Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D44CB8F43511EF9267FF76762E951A.roa
File: 29D44CB8F43511EF9267FF76762E951A.roa (raw, json)
Hash identifier: oenpJtVqqgPAhmZd5qEjIXfhvP9NAc4m9+4mbNpMKio=
Subject key identifier: 03:3C:55:53:63:80:47:6B:92:6E:8C:02:E2:33:46:5D:F6:1C:37:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01629B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D44CB8F43511EF9267FF76762E951A.roa
Signing time: Wed 26 Feb 2025 11:31:04 +0000
ROA not before: Wed 26 Feb 2025 11:31:01 +0000
ROA not after: Fri 20 Feb 2026 11:31:01 +0000
asID: 984
IP address blocks: 154.199.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90779 (0x1629b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 11:31:01 2025 GMT
Not After : Feb 20 11:31:01 2026 GMT
Subject: CN=67befb78-6d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:33:bb:cc:a7:0c:ee:b5:76:29:e6:74:be:
1c:ce:fd:86:a2:5c:ce:61:29:75:56:59:f9:58:f3:
b6:3c:3a:50:71:2b:77:21:b1:5b:27:ac:6e:82:94:
da:1a:20:96:21:e6:61:22:ec:8e:d9:0e:d2:48:fa:
af:4e:04:ac:dd:6f:28:24:8d:ba:f4:21:5b:f8:b3:
d7:35:4e:ad:29:89:2d:d1:f1:c9:c7:13:22:64:49:
05:22:d1:df:4a:44:1f:00:14:df:02:0f:b9:9a:15:
d6:00:f3:1e:23:73:4b:23:07:e0:dd:8a:d8:ab:30:
12:ce:d9:6d:35:7b:83:71:91:3d:34:5c:a7:71:48:
6f:9c:9f:7f:7e:6b:92:af:33:93:87:05:56:1f:e3:
b0:e5:a8:1d:95:97:29:85:8a:b9:4a:a2:e5:06:87:
e5:af:80:47:6b:17:06:69:1d:fe:5e:8d:2e:2b:3c:
b4:36:d8:3d:35:70:8c:95:45:59:0d:1a:9d:0b:b5:
8d:58:ea:a0:03:b0:7e:bf:3a:a7:ff:ef:b9:85:d0:
e5:84:9a:1c:32:02:0c:0f:52:67:f0:8f:ae:e4:05:
76:84:a0:65:8e:1c:e7:b5:3d:d7:f8:98:54:1e:45:
a1:5a:2c:cb:ec:71:73:27:09:c5:75:58:90:1c:b8:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:55:53:63:80:47:6B:92:6E:8C:02:E2:33:46:5D:F6:1C:37:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29D44CB8F43511EF9267FF76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ed:a9:bf:31:f1:d8:be:d0:7b:0e:ef:18:5c:4f:6d:0a:36:
6c:60:00:f6:51:9d:27:e7:9b:9f:73:d8:3a:01:05:b3:5c:e0:
a7:97:79:cd:ac:a1:76:46:11:2f:c2:62:c2:0f:98:e3:74:f8:
ca:3d:0e:db:44:7e:ff:0a:fe:f2:99:80:dc:a8:72:31:69:75:
51:76:6b:f1:44:ef:c0:41:24:b7:dc:b5:2e:aa:44:c4:d6:b2:
e1:0e:4b:c7:2d:42:38:69:f3:34:2e:86:61:45:ce:ab:68:ee:
40:58:6e:67:5a:e9:32:e8:65:1d:ac:a3:90:3a:83:34:93:0a:
54:1c:1c:ad:b1:f1:b1:0e:9f:a0:60:da:b5:14:16:cf:6c:19:
55:47:80:74:70:e4:34:78:dd:f4:89:b2:f7:98:7a:4d:fc:72:
7c:4e:83:4e:99:12:25:0a:2b:df:57:51:a2:3a:76:7b:9f:b7:
2d:9b:17:46:e2:c3:11:be:93:8f:cd:c5:d2:86:d3:78:79:99:
91:b2:f1:a6:d7:38:00:78:55:93:3b:b7:22:52:d1:64:db:49:
97:d6:33:2f:d9:ce:13:39:09:ca:8c:5f:b6:40:3f:d5:2b:09:
7f:20:11:11:72:da:3f:5e:02:ba:28:a8:2d:92:f2:1f:bf:e0:
e3:be:ba:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWKbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI2MTEzMTAxWhcNMjYwMjIwMTEzMTAxWjAYMRYw
FAYDVQQDEw02N2JlZmI3OC02ZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApG4zu8ynDO61dinmdL4czv2GolzOYSl1Vln5WPO2PDpQcSt3IbFbJ6xu
gpTaGiCWIeZhIuyO2Q7SSPqvTgSs3W8oJI269CFb+LPXNU6tKYkt0fHJxxMiZEkF
ItHfSkQfABTfAg+5mhXWAPMeI3NLIwfg3YrYqzASztltNXuDcZE9NFyncUhvnJ9/
fmuSrzOThwVWH+Ow5agdlZcphYq5SqLlBoflr4BHaxcGaR3+Xo0uKzy0Ntg9NXCM
lUVZDRqdC7WNWOqgA7B+vzqn/++5hdDlhJocMgIMD1Jn8I+u5AV2hKBljhzntT3X
+JhUHkWhWizL7HFzJwnFdViQHLgsJQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAM8
VVNjgEdrkm6MAuIzRl32HDfxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOUQ0NENCOEY0MzUxMUVGOTI2N0ZGNzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmseGMA0GCSqGSIb3DQEB
CwUAA4IBAQBq7am/MfHYvtB7Du8YXE9tCjZsYAD2UZ0n55ufc9g6AQWzXOCnl3nN
rKF2RhEvwmLCD5jjdPjKPQ7bRH7/Cv7ymYDcqHIxaXVRdmvxRO/AQSS33LUuqkTE
1rLhDkvHLUI4afM0LoZhRc6raO5AWG5nWuky6GUdrKOQOoM0kwpUHBytsfGxDp+g
YNq1FBbPbBlVR4B0cOQ0eN30ibL3mHpN/HJ8ToNOmRIlCivfV1GiOnZ7n7ctmxdG
4sMRvpOPzcXShtN4eZmRsvGm1zgAeFWTO7ciUtFk20mX1jMv2c4TOQnKjF+2QD/V
Kwl/IBERcto/XgK6KKgtkvIfv+DjvroF
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:12 2025 by rpki-client