Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2F2F09FC1C1A11F08CBAEEE4DAE4EC9C.roa
File: 2F2F09FC1C1A11F08CBAEEE4DAE4EC9C.roa (raw, json)
Hash identifier: C7zUh7+aWqosEfTW9D0nzBSEQV5iDQHM8l+Mh0PGR60=
Subject key identifier: 5E:A3:B2:9B:FD:C2:FA:79:34:5B:DE:28:FB:00:7A:F8:46:22:E7:A5
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0928
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2F2F09FC1C1A11F08CBAEEE4DAE4EC9C.roa
Signing time: Fri 18 Apr 2025 05:58:44 +0000
ROA not before: Fri 18 Apr 2025 05:58:39 +0000
ROA not after: Sat 18 Apr 2026 05:58:39 +0000
asID: 18811
IP address blocks: 102.135.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2344 (0x928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 18 05:58:39 2025 GMT
Not After : Apr 18 05:58:39 2026 GMT
Subject: CN=6801ea14-b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:eb:4b:43:29:c6:5c:7c:d7:92:88:ae:29:
ca:8f:f2:07:af:98:54:c3:ff:07:cf:07:b5:aa:3f:
3b:e2:9e:6d:d9:f3:ba:0d:ff:0d:d1:33:e2:5c:06:
d0:17:cd:42:94:fc:2e:cf:15:3b:04:72:45:7f:07:
68:8e:8b:dd:44:32:f7:38:75:e3:8c:79:9a:a5:6b:
89:26:a3:45:db:6d:55:2d:38:06:b5:7e:ca:d4:72:
fc:ad:bd:d6:bc:f3:23:e6:a3:9b:9e:8c:50:7c:6c:
85:9c:e2:ab:a6:23:10:92:fa:b6:af:df:33:ac:c2:
95:b7:ea:36:39:77:e2:42:22:7c:4b:c6:b2:07:51:
0b:d9:59:2e:ef:95:e0:dd:24:4d:65:7c:59:0b:e1:
fc:71:af:73:b6:b5:ca:23:01:b9:3b:27:b4:30:dc:
36:ac:22:8a:64:de:57:82:29:6f:93:c0:ed:62:86:
eb:29:45:2b:17:4a:d1:09:31:cb:85:b9:9a:99:d4:
86:13:30:f1:b2:6c:07:f2:dc:5e:3a:a0:1b:8c:ea:
4f:c2:d2:33:34:9f:59:fd:8e:e1:2c:5d:30:8f:60:
22:af:ca:de:5d:12:28:e6:c3:42:dc:1a:6b:d2:4c:
57:86:e6:01:65:c2:ae:dc:2b:c1:72:b1:1a:2c:eb:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:B2:9B:FD:C2:FA:79:34:5B:DE:28:FB:00:7A:F8:46:22:E7:A5
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/2F2F09FC1C1A11F08CBAEEE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.78.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f2:50:bb:27:f8:fc:27:35:3e:1d:81:1d:62:0b:a5:ba:c9:
7e:e7:d0:63:a2:e2:1e:44:84:13:fd:c8:ba:57:da:32:a0:b5:
c9:71:d2:e8:9f:e4:7a:bc:66:c9:03:97:35:6b:ca:65:d3:f1:
c9:c0:ea:6f:1e:71:ef:91:3b:e7:62:35:56:73:fc:9c:ab:6f:
a7:ab:2f:a0:7c:fb:c7:a5:1b:a7:5e:f3:74:6b:c6:bf:42:c9:
43:0f:cc:c4:e7:74:7c:b4:74:0b:3e:b1:41:93:da:75:e7:07:
95:eb:bc:ea:7e:f4:db:b3:d7:1e:fd:31:33:21:d3:dc:7d:2b:
8c:17:d5:6e:c6:e2:43:13:e1:f4:53:3f:4b:45:dc:01:8b:8e:
ca:13:28:d1:64:e3:2f:c8:ba:f7:8c:83:ce:7d:a1:bb:ae:a7:
d1:bb:ff:2b:7b:3b:f1:d9:88:a1:9f:7d:da:f7:03:14:16:e6:
f4:47:6c:e5:7d:66:6e:e1:27:0c:71:e7:10:93:4e:c6:0d:93:
ea:35:39:dc:3e:d6:34:9f:58:1d:49:ef:8e:3e:6c:b6:2f:8e:
b9:16:5f:f6:db:69:7f:8c:47:e3:91:4e:ba:c5:d3:18:18:a5:
32:2d:5e:ad:d3:05:ed:e5:f6:33:c3:89:08:60:08:d8:7d:20:
a8:74:2d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net