Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72997320C92311EF9EBB0B9B762E951A.roa
File: 72997320C92311EF9EBB0B9B762E951A.roa (raw, json)
Hash identifier: bsi/P3ersCIHq185Re7pKanRmciBnEwZQg5qgU4QnE4=
Subject key identifier: 83:51:B8:D0:4D:AC:F7:DC:A6:13:CF:96:2A:0E:18:33:5D:09:21:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01333F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72997320C92311EF9EBB0B9B762E951A.roa
Signing time: Thu 02 Jan 2025 16:05:55 +0000
ROA not before: Thu 02 Jan 2025 16:05:52 +0000
ROA not after: Sat 13 Dec 2025 16:05:52 +0000
asID: 984
IP address blocks: 154.222.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78655 (0x1333f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:05:52 2025 GMT
Not After : Dec 13 16:05:52 2025 GMT
Subject: CN=6776b963-58b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:d1:90:84:cf:8a:47:72:41:49:f7:8b:04:
f5:69:bf:ba:3e:96:5d:35:9d:1e:3f:33:c4:51:67:
67:ef:ac:1c:a1:f5:88:c3:3c:9f:f3:e9:45:b8:c9:
5c:70:7c:18:d2:46:9e:ab:88:17:c7:ee:b1:87:b9:
24:e8:a3:1b:ef:f2:e2:af:26:fb:06:42:d7:c6:1c:
d3:9d:d3:41:20:e4:69:28:c4:f5:fe:2c:df:bc:75:
a1:d5:77:e2:53:80:59:a9:75:e9:0d:b1:9a:49:a0:
89:1c:f6:9d:25:71:d7:65:71:fa:0f:e9:1c:c4:e9:
8a:5e:21:58:c7:d8:67:c7:ac:73:69:3f:59:7e:38:
fd:4a:7f:d0:4c:6d:13:12:5a:dd:d4:c9:06:ea:48:
28:6a:da:ce:8d:8e:e4:16:ed:d9:59:cc:64:c6:fd:
c1:64:13:a4:88:68:4e:18:61:2f:64:42:60:b4:9a:
94:85:48:34:76:66:a5:b1:98:e9:ed:3f:a7:5c:da:
34:97:5f:00:70:b6:5d:8c:f4:06:fa:7f:56:08:40:
51:b6:25:e0:9e:7f:f2:b2:21:54:b7:cb:b8:fb:b6:
fe:58:be:ae:06:c8:00:3b:fc:9e:1b:1c:0c:38:f8:
bd:0d:c1:ca:82:c9:42:f7:1b:60:0a:df:6c:83:2d:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:51:B8:D0:4D:AC:F7:DC:A6:13:CF:96:2A:0E:18:33:5D:09:21:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72997320C92311EF9EBB0B9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.101.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e6:b8:6d:8c:4e:43:62:11:d4:3f:d7:62:d7:47:d3:b6:e5:
fb:64:61:6f:bb:a7:aa:b0:f4:53:e4:d2:d8:95:cb:35:99:1b:
1a:4c:cc:a5:63:43:60:7a:98:36:9d:75:43:00:a0:e3:ba:11:
33:35:42:29:45:60:83:3c:cc:91:51:86:c7:5e:eb:4f:06:cb:
d9:82:24:b8:8f:63:32:48:45:9b:4c:87:97:7d:e3:c1:13:38:
1a:55:d2:1f:1e:95:22:65:fe:9c:eb:61:9c:f5:8d:a9:66:98:
c3:3d:26:9b:ab:92:8a:db:66:8d:9e:73:7b:cf:23:39:2b:83:
07:72:7c:82:5f:c0:65:78:c2:8e:81:03:2e:17:ee:12:1b:5a:
84:14:11:1d:61:62:dd:cd:8a:57:e0:c0:51:d5:28:4c:69:e7:
3a:51:68:0e:f3:68:45:ac:98:18:2b:a0:33:a0:f5:dd:43:00:
71:98:33:aa:61:3d:3b:70:46:8e:27:2d:fe:36:4c:68:29:ab:
ce:69:e1:a4:2f:f9:44:29:1e:b9:01:a5:17:cd:19:c9:22:21:
04:e7:a9:f9:0b:bc:e9:bf:75:70:74:70:13:cf:9e:a7:00:d8:
af:cd:28:43:72:ef:b4:8b:e4:4b:9e:63:33:ce:96:bc:93:13:
97:9e:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:44:37 2025 by rpki-client