
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/861CBDA2111D11F09C2EA1B0762E951A.roa
File: 861CBDA2111D11F09C2EA1B0762E951A.roa (raw, json)
Hash identifier: wevhhPNn0MH8b0fBZRKbdY1vqGz/f8FZ9qL7uxfEXYg=
Subject key identifier: 1F:86:FC:BD:A7:FA:D4:B8:99:C6:52:B6:A0:F8:0A:46:78:04:50:1B
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 08BB
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/861CBDA2111D11F09C2EA1B0762E951A.roa
Signing time: Fri 04 Apr 2025 06:24:55 +0000
ROA not before: Fri 04 Apr 2025 06:24:51 +0000
ROA not after: Tue 10 Feb 2026 06:24:51 +0000
asID: 63025
IP address blocks: 102.135.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 27 Apr 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 4 06:24:51 2025 GMT
Not After : Feb 10 06:24:51 2026 GMT
Subject: CN=67ef7b37-ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:6e:73:28:b2:3f:3f:2d:5c:6b:fd:0b:33:
db:e1:b1:a0:99:4a:bc:96:17:b8:fa:c6:29:09:36:
25:ae:07:66:11:36:af:68:54:d8:5d:ff:14:ec:51:
b4:10:0d:9a:f3:7e:0f:f0:ec:91:10:9a:dd:40:e4:
df:d3:e2:bb:8b:4a:6a:5d:b3:06:8e:0d:66:3d:25:
a5:9a:ed:6a:b6:ba:5f:bb:ff:cf:34:31:30:45:37:
86:63:e8:c9:85:f2:c3:99:7c:37:d7:f6:8b:34:c7:
98:11:16:c0:2f:d1:f3:00:f5:ae:a7:18:d5:fb:3f:
ee:94:90:f8:79:a5:a4:89:c9:bd:81:66:08:4d:e5:
0c:0b:09:de:56:ec:20:33:41:b8:7e:88:87:40:e0:
34:1c:03:6c:ca:06:af:89:8e:f0:9f:f7:6f:1b:06:
82:e9:35:e4:cc:ad:b8:cf:b3:9e:14:a9:35:a3:c1:
60:ab:d5:00:d7:20:47:75:3f:28:6d:f6:10:ac:6e:
5e:49:4f:df:06:25:07:35:8c:8c:d2:a2:c1:f7:c0:
6d:26:f4:12:79:d8:94:72:b2:3b:da:c8:43:e9:64:
44:82:8f:7b:04:54:5e:9d:ff:a3:cc:56:bb:9b:c9:
e8:a3:90:54:8d:78:ea:15:ea:c2:59:34:3b:96:b1:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:FC:BD:A7:FA:D4:B8:99:C6:52:B6:A0:F8:0A:46:78:04:50:1B
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/861CBDA2111D11F09C2EA1B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.102.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d4:5a:6c:79:d7:d7:82:b8:f6:c3:6c:52:eb:74:19:95:37:
db:6f:61:ea:f2:7c:a9:b9:eb:7d:7e:0b:94:19:0f:8e:42:75:
2a:de:2a:1b:91:6c:2f:be:f8:46:8e:16:92:93:13:98:47:82:
1a:7a:e3:3b:11:b4:0d:88:b2:9b:0a:72:aa:5b:fd:3b:32:74:
ca:45:f1:8b:3c:97:66:fe:eb:29:bb:91:42:1b:38:1e:10:3e:
ab:46:df:7f:89:f2:e0:b3:d9:ff:c3:dc:98:26:b7:79:b7:1d:
c8:60:61:8c:ae:38:db:e5:57:3f:24:54:8e:95:b6:21:e2:c2:
08:2f:11:41:8e:95:b4:39:84:48:84:9f:7a:ef:53:5d:8b:94:
52:c9:6f:6d:ba:e9:98:ad:ca:ca:4c:d7:9e:45:28:38:09:17:
99:26:66:bf:7e:df:8d:13:1c:02:1b:5a:97:0d:b9:a9:e8:03:
6a:02:28:ab:3a:61:9d:df:fc:52:25:d1:77:a6:00:4a:0e:48:
ba:9c:3b:49:33:1e:8a:29:b7:60:d9:5e:05:f1:72:33:a2:15:
df:ac:e2:fe:8e:20:c2:6d:af:d2:83:3b:49:f9:5a:5d:5a:46:
f0:fe:0d:25:fb:14:36:28:ac:a9:07:0d:12:1c:e4:cd:9d:66:
41:3d:06:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net