Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084FB7BACDEA11EFBAE8A980762E951A.roa
File: 084FB7BACDEA11EFBAE8A980762E951A.roa (raw, json)
Hash identifier: qAy8yF5+9vxvij8W8Lk0K9SwUd5Nxum6VZkuBL15vJg=
Subject key identifier: 9C:4A:CB:F5:64:8B:5B:A4:47:F8:4C:8F:90:75:DE:A9:8D:7C:E0:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013801
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084FB7BACDEA11EFBAE8A980762E951A.roa
Signing time: Wed 08 Jan 2025 17:57:32 +0000
ROA not before: Wed 08 Jan 2025 17:57:28 +0000
ROA not after: Sat 03 Jan 2026 17:57:28 +0000
asID: 984
IP address blocks: 154.89.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79873 (0x13801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:57:28 2025 GMT
Not After : Jan 3 17:57:28 2026 GMT
Subject: CN=677ebc8c-885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:0d:7e:e8:d7:48:22:df:37:d5:fa:d2:75:
1b:74:b4:d1:a1:8a:32:7d:7d:cc:50:4e:52:bf:0e:
3b:d7:08:89:52:74:62:28:9c:f0:84:85:31:d4:64:
13:4d:01:6f:5d:20:da:24:9a:55:bc:05:80:92:3f:
c6:05:c4:ec:c4:bd:ed:8b:55:7e:01:bb:19:fa:f9:
9b:1d:78:c4:49:21:a7:bd:14:2b:0f:87:ce:f4:71:
e4:11:17:66:22:49:6d:bd:1c:05:05:8f:8a:4e:55:
1e:98:72:c6:64:fe:8f:a3:96:70:ed:89:83:ba:4d:
bb:d3:2b:37:21:f0:4b:a5:10:0f:53:39:f4:0f:65:
ec:6b:fa:8b:c6:38:47:f2:e0:29:2e:c8:5e:fd:21:
eb:c9:cb:29:62:6f:ad:c1:39:1c:0e:56:93:55:ab:
be:4c:11:06:e9:b9:bc:f1:a8:75:25:b5:1a:c7:7f:
df:9b:3f:29:c8:03:29:14:e5:90:b8:dc:de:82:c2:
5a:ab:89:14:a1:2c:05:0c:31:8c:c5:6f:ec:99:bb:
fe:d6:2f:c5:9d:ca:ac:ac:85:47:59:99:75:d0:c6:
01:42:b6:71:fa:12:96:82:27:b4:b2:e6:b7:98:df:
0e:da:dc:c7:39:d6:47:34:7c:54:b5:fa:38:56:77:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4A:CB:F5:64:8B:5B:A4:47:F8:4C:8F:90:75:DE:A9:8D:7C:E0:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/084FB7BACDEA11EFBAE8A980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.207.0/24
Signature Algorithm: sha256WithRSAEncryption
97:17:4b:33:8b:61:31:f9:fe:81:ec:c9:f8:b8:30:b0:e3:cf:
3a:df:3e:78:9f:a2:2c:20:2a:a7:85:a1:86:a3:34:e6:4a:11:
fa:7f:49:42:8c:d9:c1:bd:fa:f4:a6:2b:3a:3f:bd:1a:31:0f:
a2:32:36:14:ef:82:3a:85:16:fc:e8:b2:18:e3:96:e4:54:55:
14:77:2d:99:20:59:d8:95:c6:f8:57:15:f0:29:a3:ee:29:04:
dc:d7:79:5f:32:ce:81:ff:54:52:dc:b3:01:67:85:b0:7f:ea:
b1:9b:0b:d2:1e:d7:da:87:16:25:eb:e6:15:25:a7:bb:df:eb:
aa:85:77:9f:40:68:56:7f:db:b0:b1:e5:f3:65:c1:95:56:40:
33:81:31:ab:af:b9:11:86:c2:65:88:ed:b7:50:75:4d:db:76:
85:57:1c:1e:39:14:77:c1:92:fd:55:dd:4c:95:94:39:5b:c2:
4b:9c:88:ef:63:4d:c7:e6:a7:18:f4:99:05:ab:ba:20:64:7d:
de:8b:b4:a0:ab:a3:21:02:93:61:5e:31:16:4e:2d:df:76:d5:
ff:eb:22:2f:05:89:e0:7b:ce:18:5e:11:92:94:33:68:95:16:
50:12:a3:9d:ad:41:53:2e:5a:47:5d:07:39:a7:79:08:0d:e5:
48:28:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:54:35 2025 by rpki-client