Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/21EAA6D41C1A11F0B258DFE4DAE4EC9C.roa
File: 21EAA6D41C1A11F0B258DFE4DAE4EC9C.roa (raw, json)
Hash identifier: 6Wh6QW0K45rT5cFTowvYBUvtqxhlzf28nay+WeSzT5w=
Subject key identifier: B5:4D:74:39:D3:B8:67:43:7A:A2:A7:D7:15:C8:BE:66:7F:5E:E3:50
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0926
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/21EAA6D41C1A11F0B258DFE4DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 05:58:22 +0000
ROA not before: Fri 18 Apr 2025 05:58:17 +0000
ROA not after: Sat 18 Apr 2026 05:58:17 +0000
asID: 18811
IP address blocks: 102.135.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342 (0x926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 18 05:58:17 2025 GMT
Not After : Apr 18 05:58:17 2026 GMT
Subject: CN=6801e9fd-1344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:05:5d:0f:8e:df:32:bf:44:8c:eb:a6:fe:
d3:0d:e3:9b:0c:f6:fb:ec:3c:08:e0:91:8e:b4:cd:
b4:fc:e9:62:0e:55:0b:0f:12:b1:bb:87:96:4d:9c:
4a:be:37:c3:f5:f9:69:e9:db:46:99:70:f1:44:ed:
ae:0f:e2:b6:69:50:58:bf:60:c2:df:05:a7:c9:9a:
26:8b:03:94:92:b1:5e:0e:fd:2f:53:7d:d9:12:99:
d5:41:8b:65:ca:eb:8d:c5:23:58:4c:09:33:c3:e6:
cd:90:9e:c1:8e:21:ed:a7:16:8f:f1:a7:4c:0c:52:
4f:75:6f:e4:d3:ae:3e:61:9d:d3:e6:a8:9c:dc:e2:
61:38:5e:6f:d6:bf:0e:1a:3e:61:45:ae:90:a0:3c:
86:a8:9a:a4:2b:50:a2:56:00:02:a4:5f:3f:fc:7b:
ef:c0:fa:c6:16:13:78:a7:10:50:8e:2f:4c:b1:51:
c7:4f:ae:63:18:12:f8:9e:2b:2d:eb:6b:8a:9d:ac:
22:fb:26:83:d4:49:08:b0:e9:ce:9b:81:85:60:c5:
46:fe:de:75:26:a6:f5:f1:e2:3e:fb:85:52:59:09:
ea:c7:f1:e3:b9:3a:2e:42:e3:2c:5d:99:c6:38:6e:
7d:9c:8c:55:75:48:8e:fc:62:75:68:36:a1:68:48:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:74:39:D3:B8:67:43:7A:A2:A7:D7:15:C8:BE:66:7F:5E:E3:50
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/21EAA6D41C1A11F0B258DFE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.76.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c1:43:1c:83:80:f7:bd:10:67:86:7c:59:d7:5d:2a:c5:c3:
51:84:7c:7f:2f:65:e3:ac:e9:e2:f7:0f:50:ce:33:fe:85:8e:
b7:be:5d:82:6b:eb:40:be:cd:30:85:2c:90:dd:ff:b7:24:8d:
5e:6f:10:c1:cb:b4:fd:5d:69:a3:19:4c:25:b1:68:83:bb:8f:
1c:20:c6:b9:8c:e3:17:83:78:4c:b3:bd:eb:82:13:2d:87:2e:
9e:bd:87:79:02:d1:51:42:08:47:e7:28:72:16:2d:40:c1:09:
c8:44:e1:2a:14:1a:d1:b0:af:73:2e:0a:b1:da:80:42:85:72:
88:cd:70:bb:ee:cd:5d:f6:d1:d0:08:7d:8e:ec:b5:f1:ce:9e:
9e:20:bb:f6:f3:c6:93:62:e3:99:a2:2f:c4:51:4f:ec:17:18:
c9:87:c8:d5:20:fd:45:39:1a:2f:29:f8:2f:0c:36:f9:90:eb:
8b:47:c9:37:0f:9b:ab:7b:83:f0:09:ed:d9:18:8d:35:b0:b3:
fc:cc:5a:bb:69:ef:31:05:69:ef:46:f2:1b:f0:ba:b5:48:2d:
0b:cc:78:6b:6b:a9:53:68:f0:77:7e:6d:70:ad:ff:37:77:65:
7c:de:a5:7b:7b:2c:f9:a5:a2:43:7d:39:d0:cd:74:0d:b7:16:
3d:b0:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net