Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B4B92EF35F11EFA3BEE240762E951A.roa
File: 29B4B92EF35F11EFA3BEE240762E951A.roa (raw, json)
Hash identifier: hGGATaiiM0eDOxKjLmlWLxMcERihy5tqyyyAGNGZTZ0=
Subject key identifier: C5:C2:20:8E:FE:A6:AD:EF:52:26:DA:F6:17:75:27:4C:AB:B4:5A:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B4B92EF35F11EFA3BEE240762E951A.roa
Signing time: Tue 25 Feb 2025 09:59:12 +0000
ROA not before: Tue 25 Feb 2025 09:59:08 +0000
ROA not after: Sat 19 Feb 2028 09:59:08 +0000
asID: 17561
IP address blocks: 154.83.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89634 (0x15e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:59:08 2025 GMT
Not After : Feb 19 09:59:08 2028 GMT
Subject: CN=67bd9470-160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:d7:3b:59:d0:ac:a1:c2:e4:80:de:b3:38:
e5:aa:45:8e:52:ec:46:d1:5f:29:df:72:f3:74:98:
8e:94:4e:cf:0a:21:e9:07:26:65:e5:c3:ea:64:5a:
01:29:d0:3d:28:96:bb:ef:fa:15:d5:18:5a:3c:8c:
5c:dd:b3:24:dc:d4:6b:36:58:c7:67:8b:03:7b:c1:
b8:a4:7c:e0:c3:84:d6:5e:05:53:99:0d:74:6e:e1:
b6:91:ce:b2:a2:ab:3c:68:d7:8f:9f:f7:40:16:6b:
76:f5:19:73:9c:29:5f:b0:6d:35:1c:fa:ee:93:9c:
1b:65:d0:3a:b9:96:d5:cc:4e:88:14:8a:92:29:8f:
39:43:42:5b:ca:5d:6a:ff:5a:af:99:d7:02:3e:a5:
23:c5:5d:9b:98:db:c8:48:b4:dc:a1:53:3d:88:f5:
31:b6:e9:5d:f2:f0:2e:f0:fc:d1:68:68:33:07:79:
11:30:c9:5e:f1:eb:08:91:1e:13:2e:a2:bb:1e:f3:
43:d7:63:f7:73:85:ca:be:6d:2c:1b:af:0a:c4:91:
69:4d:4e:89:2b:a8:a6:5c:76:7f:bb:e2:be:70:e4:
4a:62:35:24:d3:d9:da:56:87:53:be:7d:d7:45:ef:
1b:67:d1:bc:ea:80:2d:c0:09:af:e3:12:00:5d:6d:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:20:8E:FE:A6:AD:EF:52:26:DA:F6:17:75:27:4C:AB:B4:5A:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B4B92EF35F11EFA3BEE240762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:05:ac:90:8c:bf:4e:d0:81:24:ea:12:75:e3:a1:0f:84:50:
b3:f9:57:c3:4a:0d:9a:d8:63:9a:7d:df:4d:25:22:10:84:e3:
7c:2a:6b:7f:cb:3b:ba:8f:10:5d:58:a9:53:8c:fa:06:fd:63:
70:d5:2c:40:10:b0:c7:74:4e:e7:73:55:cd:a8:d6:74:aa:52:
d5:fa:af:fd:c1:c3:d5:86:4a:b5:4f:db:2d:c9:5d:10:b4:e4:
b1:d7:fe:89:be:aa:1e:8d:b0:e5:e9:c7:64:53:e7:0d:1b:53:
c3:75:8e:a8:0f:8a:04:d5:54:46:87:b2:d9:77:22:29:b7:6c:
10:b6:34:f3:17:64:9c:31:c9:6b:1c:4a:3e:43:d6:5d:5f:1a:
3e:06:9b:f2:b5:c3:e0:a6:53:f9:9e:71:df:8b:d1:46:35:22:
8a:3f:70:8c:cb:4f:20:04:7d:3d:56:fd:19:bc:d3:ea:7c:e9:
2c:b4:d5:e5:c2:12:eb:e6:e7:05:c5:cc:4a:4d:3a:ba:9f:38:
03:da:59:2e:ec:87:e6:1e:14:ed:1c:56:c6:f5:b6:10:f3:64:
34:0c:65:75:b7:ad:05:3a:21:c9:34:d9:f7:16:29:b3:ec:b5:
39:ad:6f:74:1f:82:86:ea:79:2b:05:67:3c:61:29:fe:7d:15:
84:bf:79:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAV4iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI1MDk1OTA4WhcNMjgwMjE5MDk1OTA4WjAYMRYw
FAYDVQQDEw02N2JkOTQ3MC0xNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0iDXO1nQrKHC5IDeszjlqkWOUuxG0V8p33LzdJiOlE7PCiHpByZl5cPq
ZFoBKdA9KJa77/oV1RhaPIxc3bMk3NRrNljHZ4sDe8G4pHzgw4TWXgVTmQ10buG2
kc6yoqs8aNePn/dAFmt29RlznClfsG01HPruk5wbZdA6uZbVzE6IFIqSKY85Q0Jb
yl1q/1qvmdcCPqUjxV2bmNvISLTcoVM9iPUxtuld8vAu8PzRaGgzB3kRMMle8esI
kR4TLqK7HvND12P3c4XKvm0sG68KxJFpTU6JK6imXHZ/u+K+cORKYjUk09naVodT
vn3XRe8bZ9G86oAtwAmv4xIAXW30JQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMXC
II7+pq3vUiba9hd1J0yrtFomMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOUI0QjkyRUYzNUYxMUVGQTNCRUUyNDA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlNqMA0GCSqGSIb3DQEB
CwUAA4IBAQC/BayQjL9O0IEk6hJ146EPhFCz+VfDSg2a2GOafd9NJSIQhON8Kmt/
yzu6jxBdWKlTjPoG/WNw1SxAELDHdE7nc1XNqNZ0qlLV+q/9wcPVhkq1T9styV0Q
tOSx1/6JvqoejbDl6cdkU+cNG1PDdY6oD4oE1VRGh7LZdyIpt2wQtjTzF2ScMclr
HEo+Q9ZdXxo+BpvytcPgplP5nnHfi9FGNSKKP3CMy08gBH09Vv0ZvNPqfOkstNXl
whLr5ucFxcxKTTq6nzgD2lku7IfmHhTtHFbG9bYQ82Q0DGV1t60FOiHJNNn3Fimz
7LU5rW90H4KG6nkrBWc8YSn+fRWEv3ks
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:53 2025 by rpki-client