Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/727CF388BEB211EFB8B21F61762E951A.roa
File: 727CF388BEB211EFB8B21F61762E951A.roa (raw, json)
Hash identifier: W0T27SeL1gq8auwsyQtE84f9+Yzwgz/Er3+JbtjQ+04=
Subject key identifier: 83:1B:B9:1A:1E:15:90:47:E3:D7:5C:69:EF:74:86:0C:AF:1A:BF:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/727CF388BEB211EFB8B21F61762E951A.roa
Signing time: Fri 20 Dec 2024 09:11:51 +0000
ROA not before: Fri 20 Dec 2024 09:11:47 +0000
ROA not after: Wed 25 Jun 2025 09:11:47 +0000
asID: 201411
IP address blocks: 154.84.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72864 (0x11ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 20 09:11:47 2024 GMT
Not After : Jun 25 09:11:47 2025 GMT
Subject: CN=676534d6-c8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:28:30:cc:8c:e8:e1:d3:41:f3:ea:92:10:
bc:6b:bd:67:63:1f:5b:60:c0:fd:3f:db:67:a0:16:
a7:5b:64:61:29:5a:93:e3:86:99:78:cd:f2:8d:7c:
31:36:57:6f:19:f3:7b:ba:80:6b:63:85:f0:54:31:
f8:71:a5:62:6e:30:45:d7:1e:7e:44:ba:3b:aa:13:
e7:bb:99:59:c4:c1:57:f3:81:c1:2a:e3:78:f2:2f:
3c:80:8e:98:14:b7:fe:43:52:77:ad:d8:81:30:b0:
2c:9b:4f:91:5e:0f:81:f7:2f:90:78:60:82:eb:f2:
8c:20:da:c5:fe:6e:fb:21:51:c8:a3:65:47:0f:4c:
67:a7:65:70:4e:8b:ca:0a:64:87:d6:2d:a3:ce:44:
45:cb:e2:7d:d3:ae:bb:6a:16:9a:6c:78:ea:48:a1:
39:35:7d:1b:49:04:91:77:ce:05:0b:fc:e5:3e:d7:
2c:fb:b7:02:f1:65:d0:60:8a:aa:e3:37:0f:70:21:
91:f2:57:b4:af:04:1b:6f:65:94:7e:ee:17:bb:6a:
68:f6:90:61:fc:6d:13:3a:dc:dc:36:a1:3d:72:b2:
07:c0:27:9d:a1:e9:0f:68:dc:3b:77:80:d0:be:b5:
8a:4c:a1:08:65:5f:ec:e3:25:6e:a6:fb:d3:0e:1f:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1B:B9:1A:1E:15:90:47:E3:D7:5C:69:EF:74:86:0C:AF:1A:BF:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/727CF388BEB211EFB8B21F61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
28:06:42:4f:96:80:d4:e7:15:af:26:6a:0e:0e:27:75:a4:8a:
b0:7d:1a:fc:cd:2e:6a:b5:4f:5a:2f:45:43:f8:5a:34:ec:8c:
0e:ea:6c:02:ab:3a:80:df:99:c0:a4:93:39:67:ec:32:8c:0d:
ce:77:5e:6f:7d:1a:29:7f:6e:83:27:88:44:88:5e:db:d7:c4:
86:0a:bd:3c:8f:40:fe:33:47:a3:b6:40:63:9f:8b:a9:ff:b6:
e9:c0:09:86:4c:91:64:5e:d4:cf:3b:c2:ea:b6:95:4e:14:a9:
fc:39:38:f1:16:c7:63:0d:1c:9b:c6:24:15:16:35:e8:02:8f:
83:f1:f6:98:d8:9f:c3:39:42:d4:66:97:12:e0:19:05:23:ee:
15:fd:8b:ae:d6:1b:98:a0:10:55:5b:f3:4b:6a:23:e6:8c:ff:
e1:9f:04:52:c4:d7:53:c3:84:47:e1:4d:8d:f5:2e:c4:d4:93:
c2:44:e3:70:21:d9:37:68:a4:bd:45:5c:17:61:1e:3c:a7:11:
49:31:e5:a5:eb:51:77:6d:7d:11:d3:d4:ee:ca:84:22:16:3c:
61:6f:d1:36:20:23:05:e2:a2:84:08:47:4e:5c:a1:ff:26:78:
4f:d2:47:1f:89:c5:c9:05:64:95:d4:1d:53:34:e4:b4:71:ed:
f7:42:25:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:28 2025 by rpki-client