Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACCAF1A0CDE611EFA8FDFA6C762E951A.roa
File: ACCAF1A0CDE611EFA8FDFA6C762E951A.roa (raw, json)
Hash identifier: gfHjcjSjBuf1hl3ybsaQoEL9EDtUy2+JyeMVDZcwh2I=
Subject key identifier: 29:D5:98:E3:14:58:EB:BF:80:65:92:39:F6:25:E9:B6:BA:0E:47:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACCAF1A0CDE611EFA8FDFA6C762E951A.roa
Signing time: Wed 08 Jan 2025 17:33:30 +0000
ROA not before: Wed 08 Jan 2025 17:33:25 +0000
ROA not after: Sat 03 Jan 2026 17:33:25 +0000
asID: 984
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79847 (0x137e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:33:25 2025 GMT
Not After : Jan 3 17:33:25 2026 GMT
Subject: CN=677eb6ea-9b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:05:9a:08:6e:8f:f8:3d:9b:af:47:80:1e:
55:4d:e6:a2:ec:14:ae:6e:0b:63:a4:35:2e:14:5f:
2a:bb:18:46:ed:9e:b1:5d:df:f4:e1:3c:62:fd:65:
3f:d0:c7:21:06:54:7f:2a:58:04:d1:f4:bb:9b:76:
cf:b6:60:ed:c8:a1:0a:2c:3d:75:08:9f:55:03:3e:
4c:e0:25:bd:e5:92:36:c6:9c:e2:f5:c8:5d:e7:6d:
59:21:e5:d3:21:c1:87:f0:a4:cc:7b:32:59:7f:cb:
20:77:99:47:c1:18:86:be:b4:24:68:c1:b3:a3:0c:
df:eb:75:93:79:ea:a9:ff:2f:52:a8:de:b3:d9:11:
97:a9:1c:9c:58:33:3c:34:17:0b:b7:e5:d9:95:b5:
09:a0:06:a0:64:8b:b8:1e:6b:89:41:c4:23:a5:28:
9a:ec:51:a6:66:b3:29:95:6b:85:01:7c:84:a9:c7:
00:da:da:53:87:42:df:e3:ec:cc:ab:e4:bc:f8:6d:
6a:16:4d:0a:fa:3e:4b:95:8f:1c:88:83:4e:a3:24:
7e:e4:6b:c8:7e:b7:88:06:69:66:a4:77:66:a8:73:
26:da:3d:54:93:23:a1:89:4d:6f:5c:98:f6:30:80:
6b:de:6e:43:7a:4a:66:93:c9:86:0d:41:37:79:68:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D5:98:E3:14:58:EB:BF:80:65:92:39:F6:25:E9:B6:BA:0E:47:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ACCAF1A0CDE611EFA8FDFA6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
22:08:fb:f6:d8:0b:1f:4c:f3:fe:ed:3f:33:3b:57:06:39:15:
cb:73:7f:7d:9a:38:37:df:21:35:f7:0f:4a:1c:2d:9e:27:1f:
63:26:b7:b7:15:19:42:f9:6e:25:7e:be:31:ce:16:99:64:09:
32:dd:46:17:89:8a:36:45:20:08:e0:37:bb:36:15:f4:6d:a2:
f2:7c:61:27:90:d6:2c:14:c8:07:d2:81:8c:39:ed:32:ef:24:
f8:70:ee:78:b9:de:9e:27:cb:d8:db:aa:7a:6b:c7:d6:ce:83:
df:2b:14:17:db:63:b1:3e:43:3d:c4:42:11:4d:57:4c:68:2a:
df:c5:59:2d:09:9b:a2:04:27:28:87:32:9e:d5:89:c9:71:7c:
a0:b6:67:c2:98:35:d7:c5:e1:56:6a:53:c7:e5:88:1e:6a:db:
83:c5:33:5d:45:b5:48:7e:27:42:56:a0:9a:61:2d:61:79:33:
bb:bd:18:dd:ec:ff:aa:a0:7c:a9:d6:d8:15:7e:37:ef:a0:48:
b1:0e:1e:12:6b:01:ba:ff:9d:11:43:a9:cc:cc:44:a2:bc:d5:
17:32:38:9e:fe:d5:a4:6f:bd:66:be:0a:f0:38:00:26:7c:3b:
da:43:6b:b9:41:3d:2a:03:5c:dd:3e:52:a6:2c:46:5f:55:0e:
ea:fe:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:28 2025 by rpki-client