Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECE7D91AEF5111EFA15DB8B0762E951A.roa
File: ECE7D91AEF5111EFA15DB8B0762E951A.roa (raw, json)
Hash identifier: hjU0Wz9CYJ+D3O3F6dAeDkWFxmEJkAj6Uqwmdu7KYFw=
Subject key identifier: 33:DC:2A:8F:FB:7E:A2:01:0D:8A:80:7B:C3:10:AB:4D:E6:57:EE:EC
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1A06
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECE7D91AEF5111EFA15DB8B0762E951A.roa
Signing time: Thu 20 Feb 2025 06:14:22 +0000
ROA not before: Thu 20 Feb 2025 06:14:18 +0000
ROA not after: Sat 20 Feb 2027 06:14:18 +0000
asID: 834
IP address blocks: 154.16.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6662 (0x1a06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF
Validity
Not Before: Feb 20 06:14:18 2025 GMT
Not After : Feb 20 06:14:18 2027 GMT
Subject: CN=67b6c83e-8a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:fd:8d:d8:cd:4f:0d:8c:ea:1c:75:85:38:
a1:af:74:22:3a:b7:38:2d:21:19:3e:52:62:a4:6c:
7e:ab:19:0a:be:6b:ce:ac:b6:c4:67:1e:a4:3a:86:
0b:20:9d:4c:f8:91:1b:9d:f5:89:99:f4:6c:54:34:
79:c1:c7:66:41:b9:0f:c7:ec:14:8c:d0:7e:4b:04:
b6:70:aa:98:1c:0a:96:6b:5d:81:e1:b2:ef:e8:8f:
c5:fd:e2:16:a5:85:87:2f:53:62:bc:7d:74:e8:82:
e1:6b:3d:35:24:02:54:65:fd:ba:d5:7a:34:e5:0e:
21:44:e0:03:e7:f7:ce:6a:33:c4:d0:69:c2:57:d4:
57:ac:4f:cc:f6:9d:82:dc:08:9b:85:c2:23:26:58:
99:26:55:21:97:2d:ab:45:e2:2f:c4:e3:5d:d8:a0:
bb:1f:0d:bb:44:5c:42:3c:c5:56:27:e2:97:1a:8a:
ea:9d:d2:7e:ac:9a:3d:7a:dd:e4:3e:af:dd:cf:cc:
e0:0e:e8:08:17:a7:52:23:ac:dd:e9:a0:6a:1a:ba:
f6:7b:99:4d:90:83:6f:99:c3:42:80:22:ba:b0:67:
36:ff:d5:9e:98:53:44:18:1d:87:e1:ed:21:33:21:
ff:de:b1:0c:25:9f:1a:1a:18:3d:a7:4c:63:f5:fe:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:2A:8F:FB:7E:A2:01:0D:8A:80:7B:C3:10:AB:4D:E6:57:EE:EC
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ECE7D91AEF5111EFA15DB8B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:27:2b:2b:72:32:cf:dd:c7:ba:12:64:87:20:9e:f7:e0:74:
a9:c2:28:f9:e4:06:fa:0a:6d:9d:b1:ec:17:85:4e:e9:76:d8:
bd:36:9e:e1:72:44:e8:4d:bb:23:df:91:5e:29:b6:be:dc:94:
91:82:da:e1:f1:96:8c:ae:a6:f4:74:40:ea:57:eb:c6:bd:a5:
0f:55:ab:cd:24:17:d7:f3:4e:80:8e:13:e0:b9:e6:bd:9f:70:
b4:6e:6b:a6:04:f9:ba:49:b0:36:0f:4d:b0:3d:43:89:1b:32:
2c:84:d4:08:14:a1:f8:91:13:8d:ca:b6:b3:5a:fe:6f:fc:1a:
a3:46:bc:b9:19:25:c7:0b:32:bb:53:74:3b:90:e5:2b:63:93:
7f:f8:76:db:1f:9e:10:8b:d4:6f:11:e6:31:7b:0a:f7:22:a7:
3f:5a:ef:cc:78:52:48:9f:10:04:27:dc:da:be:23:d8:52:b4:
84:88:10:ad:4f:fb:0c:5b:b6:c7:3f:19:b0:df:03:de:db:a5:
ed:b6:c9:59:3f:83:9c:93:40:9c:45:8a:46:1a:5a:d5:0f:4f:
0e:c1:fe:07:42:65:9e:dd:dc:53:08:85:0b:d7:4f:f4:78:44:
1e:81:e9:86:25:a8:d1:8e:14:3c:18:0a:f8:b5:33:57:36:52:
22:4c:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client