Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7DB77C8A104911F090A327AD762E951A.roa
File: 7DB77C8A104911F090A327AD762E951A.roa (raw, json)
Hash identifier: N0XY09YC/qeXXrUISYn6bbB/QGInRajBoJl2OtiPumk=
Subject key identifier: AA:69:26:1A:16:9D:11:40:FF:93:2B:2F:F3:E8:1D:F1:91:7D:A0:80
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08B5
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7DB77C8A104911F090A327AD762E951A.roa
Signing time: Thu 03 Apr 2025 05:07:08 +0000
ROA not before: Thu 03 Apr 2025 05:07:02 +0000
ROA not after: Tue 13 Jan 2026 05:07:02 +0000
asID: 10103
IP address blocks: 102.135.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 3 05:07:02 2025 GMT
Not After : Jan 13 05:07:02 2026 GMT
Subject: CN=67ee177c-b768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:69:eb:c0:a5:c7:08:bf:84:e0:c0:78:2e:
ed:84:a6:41:7b:51:3f:ac:c2:40:db:1a:4c:33:cf:
0e:dc:ac:1e:95:3f:70:ed:f4:ec:0d:7b:cb:76:c3:
53:d7:2a:07:db:f8:2a:2f:08:41:5d:77:8b:8a:35:
bc:8a:d1:7a:d7:e2:d0:3e:14:43:c2:47:4a:a9:fe:
ee:83:11:9b:fd:0a:ad:7d:b9:c6:a1:eb:4c:2d:51:
1a:30:b2:6e:41:b1:84:08:5d:a5:65:e2:a0:4b:0f:
d5:26:92:8b:9f:2e:4c:0e:50:f1:f4:dd:d0:aa:79:
b3:9a:64:53:44:53:0d:c0:2b:04:14:00:f9:e7:92:
e5:10:6f:a3:b4:e2:13:96:8e:2a:ff:19:2f:97:66:
fb:f3:e3:88:92:93:83:a4:c3:5d:e2:73:3c:7d:81:
70:23:74:db:d8:56:39:f3:7f:89:aa:32:88:ff:7c:
9e:fc:e0:35:51:b1:0f:83:5e:a5:0b:21:dc:06:f8:
1a:c7:0a:13:36:24:30:ed:6e:fa:18:f1:90:b2:b3:
fd:41:8b:3c:46:d9:f5:04:3a:12:61:bb:5d:88:2c:
af:43:b4:0d:ba:7b:4c:8a:06:0a:74:2d:73:3e:bb:
29:b6:f9:29:15:6e:a5:53:bf:cd:50:19:26:d8:61:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:26:1A:16:9D:11:40:FF:93:2B:2F:F3:E8:1D:F1:91:7D:A0:80
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/7DB77C8A104911F090A327AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.5.0/24
Signature Algorithm: sha256WithRSAEncryption
99:50:6f:81:fc:43:f4:a6:a3:c3:db:e5:cd:b4:ee:e0:73:37:
09:da:a4:61:c0:3d:58:a7:08:90:c1:a5:93:04:f5:f2:dc:d2:
63:67:d8:82:6b:0b:43:9d:2b:be:02:fb:f0:d5:66:44:50:0a:
da:74:86:91:15:a6:ff:2b:51:48:14:c2:28:55:1e:64:89:08:
0d:52:70:d6:51:48:f3:03:f4:df:6b:d9:97:d6:4e:8d:eb:01:
00:5b:af:a3:8e:33:58:0f:45:4c:06:15:b7:f8:6f:f3:bf:18:
33:1f:fe:fc:29:ae:a8:dc:9f:cb:5f:63:ec:25:14:f0:e2:e2:
74:b1:5b:76:9c:da:77:1c:89:fd:47:0e:53:90:a8:2d:44:04:
0e:a0:a6:27:e2:55:8a:3a:87:a7:a1:15:6a:7d:72:b7:28:78:
51:aa:4e:0c:b2:3b:d4:da:25:d7:dc:40:77:a9:ad:d3:75:c3:
44:aa:7e:9e:20:1f:e6:9f:80:8e:ed:b8:a2:27:48:01:8b:a8:
86:6e:c9:f8:06:9d:b3:dd:c5:a0:3b:3d:55:16:e7:ec:11:3d:
94:ff:e3:5f:ed:b3:d6:8f:7f:40:19:48:ec:00:b3:f1:bc:96:
54:e7:51:b2:a9:ec:fd:20:d2:44:e1:f4:9f:c6:6e:da:f2:2a:
53:b4:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:40:35 2025 by rpki-client on console.sobornost.net