Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AB9D3A3020F311F092FED2E8DAE4EC9C.roa
File: AB9D3A3020F311F092FED2E8DAE4EC9C.roa (raw, json)
Hash identifier: f3V8yPEE5ZnWBSrcf+UAjCPW3DQTiZfOPtKZI+iJfm4=
Subject key identifier: 95:C9:D3:F0:43:D7:F9:C2:19:16:CB:3E:9B:E0:2C:F9:8B:FD:70:CB
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 0962
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AB9D3A3020F311F092FED2E8DAE4EC9C.roa
Signing time: Thu 24 Apr 2025 10:05:38 +0000
ROA not before: Thu 24 Apr 2025 10:05:33 +0000
ROA not after: Tue 13 Jan 2026 10:05:33 +0000
asID: 9009
IP address blocks: 102.135.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402 (0x962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Apr 24 10:05:33 2025 GMT
Not After : Jan 13 10:05:33 2026 GMT
Subject: CN=680a0cf2-54e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:0d:f2:c9:0c:ec:4e:3b:1e:21:c6:fc:46:
e4:5c:69:7c:cd:79:26:69:75:5b:55:4c:6c:b1:1a:
62:5b:c9:ce:45:d8:76:16:71:b7:b1:74:81:ce:59:
c8:89:b9:c9:50:e5:2c:69:60:da:1e:b4:47:c3:81:
0f:90:7c:cc:bf:01:bd:e6:ee:44:f1:db:40:35:d1:
b2:1d:5b:48:22:63:fb:a0:32:c5:8b:0a:d9:4b:0f:
3f:97:78:7f:56:08:6e:68:49:67:2b:a8:95:4a:ce:
cc:c0:f3:77:f5:04:19:1e:48:83:01:df:96:ee:67:
64:9d:68:41:9a:71:73:9f:f0:68:0b:e4:a2:f4:0b:
6b:79:ca:c7:f7:ac:c3:62:f9:06:97:f2:79:9e:7f:
9c:f1:0e:e5:e8:dd:f8:2a:25:bb:47:2c:a3:7c:48:
60:3f:c0:1d:18:6b:f6:d2:59:10:73:c6:db:2b:22:
d8:8b:48:10:7c:d3:68:57:f1:af:e0:e8:cb:b7:f5:
39:65:41:3f:c9:9b:0e:d9:2e:34:7d:91:af:95:8d:
01:c3:a2:55:b6:f8:4e:22:89:b8:3a:d5:0d:f9:61:
b6:e3:c0:ee:d5:4d:59:c7:b7:f9:f2:9c:cf:32:07:
d8:4e:bf:37:0c:88:10:03:e4:da:30:06:89:9b:29:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C9:D3:F0:43:D7:F9:C2:19:16:CB:3E:9B:E0:2C:F9:8B:FD:70:CB
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/AB9D3A3020F311F092FED2E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.96.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ae:54:84:c9:26:01:d8:5b:9c:3c:15:0b:c6:ba:ad:c1:c5:
83:e8:e1:1b:f0:de:5b:f9:d9:6f:c4:71:bd:13:c2:66:6a:8f:
a0:af:68:ca:20:21:9e:58:d7:ea:b9:4a:39:0f:5b:f2:55:50:
89:30:69:83:16:de:2e:ad:e0:8f:95:81:8e:00:da:a7:88:65:
40:aa:95:bd:71:3c:f9:38:97:2e:3c:ec:83:cc:b8:07:1a:ac:
33:7b:07:4a:86:87:65:b7:0a:c1:af:c0:ff:9f:75:48:42:80:
3e:76:1d:af:32:a5:a0:3e:06:b6:28:c5:b3:df:16:58:0a:99:
35:ec:69:7c:79:ba:30:0a:a4:86:4f:4f:d4:9d:a4:91:c1:f2:
6d:eb:91:24:d2:8e:b1:ed:28:e6:88:f9:57:de:a6:7a:25:06:
cd:48:17:70:ae:7f:41:5a:63:69:b8:73:b9:13:30:e5:1e:8a:
bb:41:36:fa:e5:af:37:81:dc:54:7c:71:78:df:b9:4b:76:6a:
8b:b5:2b:fb:6d:24:2c:27:0b:31:88:04:fe:20:de:4e:f1:15:
9c:48:1c:32:66:a0:72:9f:6c:97:a0:54:75:30:88:b2:0d:44:
14:24:2d:f9:17:55:83:fb:9e:56:28:e7:d9:97:c0:6c:40:fa:
af:47:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:40:35 2025 by rpki-client on console.sobornost.net