Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B77430C5B0A11F0BEAB1C84DAE4EC9C.roa
File: 4B77430C5B0A11F0BEAB1C84DAE4EC9C.roa (raw, json)
Hash identifier: b5nqyV9GUIVBMZjQsID+W7Ds2R0vAQjBn/iSCrk99Uw=
Subject key identifier: F5:52:36:EC:F9:49:10:B8:D6:C6:5E:BA:36:05:2A:D5:36:05:51:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018BFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B77430C5B0A11F0BEAB1C84DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 08:13:43 +0000
ROA not before: Mon 07 Jul 2025 08:13:38 +0000
ROA not after: Thu 07 Aug 2025 08:13:38 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101370 (0x18bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 08:13:38 2025 GMT
Not After : Aug 7 08:13:38 2025 GMT
Subject: CN=686b81b7-c24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:57:f1:e9:35:31:a5:35:d3:3e:51:bc:8c:
77:d8:f4:2d:38:df:b7:42:a4:99:e4:0e:ce:e1:6f:
5a:b3:bf:f6:16:d7:ed:7e:5c:4a:ce:a7:70:69:74:
a1:53:3d:c9:90:bc:62:42:a4:45:03:7b:c5:d6:f2:
69:34:b6:4c:8d:50:bb:8c:6d:4b:3f:79:e0:75:af:
ce:52:d1:10:26:68:df:ee:25:34:04:54:39:bb:4d:
99:1e:3d:4f:4a:b3:a9:14:8f:97:49:45:2e:38:ea:
dd:c8:c9:f1:78:1a:df:d1:03:71:c4:17:f8:c1:88:
ff:72:24:1b:3d:ea:ee:25:ab:45:6c:af:09:3c:78:
a6:92:47:f8:f6:cc:e8:1f:6d:ae:27:73:2c:27:4f:
7a:f2:66:5b:bc:a9:a7:04:97:ab:1c:59:3d:f8:6d:
3e:a7:71:ac:41:95:6f:8c:b0:3c:ec:e1:39:56:08:
db:a0:5c:f5:46:e4:1b:8d:48:b0:41:d6:e1:8c:8e:
54:b1:a5:bd:56:ef:a5:75:ac:45:96:26:c3:01:6a:
06:1c:fe:59:ff:06:97:b8:3c:4a:2f:24:76:c0:22:
2f:16:31:3a:73:10:6f:a0:67:af:52:45:d7:9a:29:
80:ef:82:26:9f:c5:0d:88:53:0d:b2:fb:70:f8:5f:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:52:36:EC:F9:49:10:B8:D6:C6:5E:BA:36:05:2A:D5:36:05:51:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B77430C5B0A11F0BEAB1C84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:34:b7:cb:bd:c5:8b:42:50:1c:0f:e1:bb:9e:c9:6c:4c:0e:
96:78:cd:fb:fc:4b:f5:d8:a2:54:de:af:37:25:98:f9:0f:c5:
a6:0c:a7:17:95:0c:53:35:9c:fc:ed:1a:e7:24:79:d4:d8:b3:
24:98:d6:a6:81:45:b1:89:b3:94:15:b9:5e:77:c1:b9:43:4f:
35:55:ee:c2:3f:7f:c1:48:e8:c3:cd:f5:7c:06:27:a3:ce:bf:
df:04:b5:ba:27:0d:c0:dd:a7:63:ef:84:20:d9:43:d0:4b:b5:
91:72:ae:cb:e1:60:a2:88:1b:9d:05:85:ff:76:b3:25:60:95:
f5:9b:f0:6e:04:ff:ea:ba:76:b1:bd:28:0e:c1:5c:e5:62:1a:
7a:a2:75:39:4d:48:a1:cf:b8:5d:7b:60:da:2d:f1:58:6c:7d:
2a:07:2a:2a:57:e8:4d:3e:45:55:26:b4:a8:79:69:c7:9e:cf:
c3:54:f6:7e:ba:40:c5:4a:4b:22:ac:09:08:9b:6c:5d:bc:8e:
d3:07:0c:53:fb:61:76:36:9d:af:88:21:71:ab:97:ec:78:0f:
04:82:18:89:83:f5:94:a9:83:60:ee:8f:03:2d:40:88:ab:0a:
89:e1:7a:50:af:96:ad:73:51:bf:a8:bb:c6:13:ad:ac:51:c0:
d2:7a:2b:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYv6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNzA3MDgxMzM4WhcNMjUwODA3MDgxMzM4WjAYMRYw
FAYDVQQDEw02ODZiODFiNy1jMjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq+tX8ek1MaU10z5RvIx32PQtON+3QqSZ5A7O4W9as7/2FtftflxKzqdw
aXShUz3JkLxiQqRFA3vF1vJpNLZMjVC7jG1LP3ngda/OUtEQJmjf7iU0BFQ5u02Z
Hj1PSrOpFI+XSUUuOOrdyMnxeBrf0QNxxBf4wYj/ciQbPeruJatFbK8JPHimkkf4
9szoH22uJ3MsJ0968mZbvKmnBJerHFk9+G0+p3GsQZVvjLA87OE5VgjboFz1RuQb
jUiwQdbhjI5UsaW9Vu+ldaxFlibDAWoGHP5Z/waXuDxKLyR2wCIvFjE6cxBvoGev
UkXXmimA74Imn8UNiFMNsvtw+F9PJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPVS
Nuz5SRC41sZeujYFKtU2BVGnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80Qjc3NDMwQzVCMEExMUYwQkVBQjFDODREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMdMA0GCSqGSIb3DQEB
CwUAA4IBAQBqNLfLvcWLQlAcD+G7nslsTA6WeM37/Ev12KJU3q83JZj5D8WmDKcX
lQxTNZz87RrnJHnU2LMkmNamgUWxibOUFbled8G5Q081Ve7CP3/BSOjDzfV8Biej
zr/fBLW6Jw3A3adj74Qg2UPQS7WRcq7L4WCiiBudBYX/drMlYJX1m/BuBP/qunax
vSgOwVzlYhp6onU5TUihz7hde2DaLfFYbH0qByoqV+hNPkVVJrSoeWnHns/DVPZ+
ukDFSksirAkIm2xdvI7TBwxT+2F2Np2viCFxq5fseA8EghiJg/WUqYNg7o8DLUCI
qwqJ4XpQr5atc1G/qLvGE62sUcDSeisi
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:03 2025 by rpki-client