Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/15CE08780D3D11F084CEA1B0762E951A.roa
File: 15CE08780D3D11F084CEA1B0762E951A.roa (raw, json)
Hash identifier: EELtWDJ2E2X9LGsE0zWNeVZAE8paxDqvEGNwimq9oTo=
Subject key identifier: 0A:22:77:A4:A5:61:AC:32:14:05:76:46:C5:FD:DE:B9:10:C6:B4:D9
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08AD
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/15CE08780D3D11F084CEA1B0762E951A.roa
Signing time: Sun 30 Mar 2025 08:00:46 +0000
ROA not before: Sun 30 Mar 2025 08:00:42 +0000
ROA not after: Mon 30 Mar 2026 08:00:42 +0000
asID: 996
IP address blocks: 102.135.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Mar 30 08:00:42 2025 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=67e8fa2e-b676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:02:82:13:e3:2f:ed:df:54:84:eb:ec:9b:
4c:5f:f1:b6:88:ab:f6:d1:78:58:b6:15:d4:e1:4c:
6f:34:4f:60:8d:48:ab:4c:66:b2:05:f8:c4:d5:bc:
80:24:73:d0:df:0d:04:a9:95:af:8f:fd:04:fd:8b:
f5:65:dc:93:7a:35:3d:6a:9d:71:44:e0:6e:e2:90:
5f:e0:d3:51:67:cf:26:5f:85:30:05:43:af:78:7e:
c4:bd:b9:a8:bf:43:5a:08:6e:4d:d8:ef:79:92:48:
ca:11:4f:bb:88:a0:c0:df:9e:da:65:f2:75:6f:69:
f8:e2:e7:52:89:b2:bc:c4:42:ac:a0:8e:13:64:9a:
90:a1:f6:93:7b:a0:24:eb:f8:b7:d0:97:83:93:6b:
18:b5:2d:64:c9:53:08:db:57:8e:ca:53:87:5d:c3:
c0:76:13:19:df:1f:46:a3:40:a7:da:a7:11:95:43:
6b:bf:52:16:c2:75:f6:c9:11:b4:07:0c:d7:1b:a3:
1e:9d:0f:cd:f1:ce:a3:c4:77:44:d1:47:75:ea:fc:
d2:51:89:d4:b1:74:dd:4e:bd:55:60:6e:d8:8a:98:
4a:c9:e9:e7:21:75:af:f1:5e:b8:75:9e:f2:84:01:
00:47:14:e1:3d:ff:a6:50:2f:f4:c5:a7:cf:9c:9b:
c5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:77:A4:A5:61:AC:32:14:05:76:46:C5:FD:DE:B9:10:C6:B4:D9
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/15CE08780D3D11F084CEA1B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.8.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:21:d3:48:fb:06:5d:97:89:44:2a:79:66:a1:aa:7f:5a:a3:
a7:ca:64:b7:e5:eb:ab:74:34:db:2d:cc:81:15:60:fc:1a:d8:
db:42:95:00:4c:2f:ab:c5:b8:89:46:3b:24:58:0c:75:11:03:
4e:fd:2b:bc:76:e1:71:62:63:86:0c:20:fb:cf:79:18:a7:d2:
0f:89:09:00:1b:45:a3:37:48:17:88:b7:82:29:eb:ef:8a:ef:
8b:6b:77:9f:61:ba:d0:6f:49:55:78:18:c9:54:53:5c:93:16:
41:00:ac:b5:86:0b:cf:5f:d6:72:6e:47:e7:f7:dd:5a:eb:60:
2c:63:35:05:bb:a5:91:cd:67:50:81:4b:c3:b6:b0:3d:3d:c1:
f9:0f:11:42:d3:e0:4f:0a:2e:f8:ec:a5:4d:b7:53:6a:63:d7:
d1:35:d3:f4:61:33:45:dc:d7:f0:b1:fb:cf:0e:18:e0:ca:f6:
42:80:a7:0f:7c:8a:45:9b:8e:75:54:6d:6a:3f:16:2f:16:7f:
27:4e:9b:bb:7b:1e:54:4c:38:97:ce:b2:05:98:ae:c4:a3:a7:
15:de:0a:ea:33:ed:ad:de:7d:2e:48:fb:c3:76:36:73:89:f0:
30:e6:f7:ad:7f:a9:d4:32:15:0b:c1:21:15:02:0b:30:ef:b0:
dd:39:c4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net