Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/01E76B1A1C1A11F0A672C2E4DAE4EC9C.roa
File: 01E76B1A1C1A11F0A672C2E4DAE4EC9C.roa (raw, json)
Hash identifier: le/dHdkuONGRmpsR3HbTb2k1e5KZp4rezVv890uybPE=
Subject key identifier: 90:ED:64:B5:68:BF:91:9D:F9:23:F9:3D:C8:78:DE:39:4D:8F:4E:6A
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0924
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/01E76B1A1C1A11F0A672C2E4DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 05:57:28 +0000
ROA not before: Fri 18 Apr 2025 05:57:21 +0000
ROA not after: Sat 18 Apr 2026 05:57:21 +0000
asID: 18811
IP address blocks: 102.135.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2340 (0x924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 18 05:57:21 2025 GMT
Not After : Apr 18 05:57:21 2026 GMT
Subject: CN=6801e9c8-75df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:61:93:f5:24:16:ac:e2:fe:94:13:39:fc:
c0:64:b5:6f:8c:78:30:d8:e2:f5:59:ed:7a:54:7f:
42:9d:7e:c8:74:bd:0d:d9:69:db:78:68:ee:de:9b:
27:ee:21:ef:f5:a0:2e:1c:85:03:9a:f0:8f:59:3b:
13:12:1b:4f:82:32:b7:ff:55:a2:71:c7:2b:60:97:
85:99:40:21:c8:41:49:a9:1f:20:e2:f0:31:98:b7:
0c:fb:a2:7c:d8:93:da:d2:58:b9:a1:f1:59:e4:1e:
a0:75:2c:b1:1b:16:93:b8:44:70:3d:80:2d:30:8d:
5d:bb:ff:fc:45:f5:1a:62:ee:b4:3c:e8:91:45:6d:
45:64:76:ac:9b:3f:07:74:a7:a7:bd:20:dd:80:4c:
88:68:6a:84:3c:3a:67:ca:2a:58:f0:46:c8:a4:b3:
6f:89:d0:09:b9:39:48:67:eb:d5:ad:1c:dd:5b:a0:
96:ef:90:7f:ca:ba:0c:88:93:47:f9:4b:0a:f1:73:
04:50:42:53:8a:46:5c:0d:e6:3a:81:23:2d:1e:aa:
d0:62:42:69:d3:ab:e6:2f:da:e1:19:5c:65:0c:b7:
18:b6:79:ad:80:9b:b0:39:d8:7e:f7:93:9f:70:77:
ad:91:b0:1c:45:dd:66:cf:ce:9a:81:c3:91:fd:fb:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:ED:64:B5:68:BF:91:9D:F9:23:F9:3D:C8:78:DE:39:4D:8F:4E:6A
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/01E76B1A1C1A11F0A672C2E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.74.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ee:8c:58:59:f7:88:b6:9d:aa:eb:f3:40:66:94:6b:bb:d7:
59:ea:cc:84:e8:f1:9b:7e:59:73:65:35:90:e0:43:41:7c:76:
e3:f4:58:d4:9d:f3:df:07:4b:b0:c5:3e:b8:d9:30:3e:f3:85:
70:7e:2b:16:ef:15:e0:df:5e:40:e1:69:d7:f0:9a:a5:a5:94:
7e:de:15:40:80:c5:6b:66:0a:4c:6f:d1:7d:df:73:c0:e1:2f:
18:33:61:9a:46:b4:f1:aa:c3:4e:33:dc:4a:cc:2e:d1:d8:ee:
58:cb:86:2e:49:86:82:2e:71:b6:9f:49:89:ae:60:e1:36:5e:
e2:14:5b:bf:b7:fc:97:3f:be:ab:c6:25:9c:2f:c7:04:c6:b3:
90:15:b7:86:1a:c5:32:bc:96:43:cc:39:5b:8c:58:0c:00:c9:
d6:b1:47:f1:e7:d3:c7:8f:81:7d:19:ae:35:18:4d:ab:13:b7:
5f:c6:25:bb:e9:71:55:a3:8c:8a:fe:b5:7f:c7:e5:2b:08:b8:
15:d9:a3:aa:10:25:3f:46:b4:d2:84:7c:95:ea:53:af:b2:b7:
05:47:0e:f7:51:ed:7d:2f:e8:c7:88:8a:64:ea:29:f9:e6:e1:
76:21:3a:5b:b1:70:ce:54:43:10:8f:f8:2f:8e:56:cb:4e:47:
73:62:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net