Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD44E30E2CBF11F094A3B7DCDAE4EC9C.roa
File: CD44E30E2CBF11F094A3B7DCDAE4EC9C.roa (raw, json)
Hash identifier: hgZbnqqYqZEZZDJ51c0ktwl83C9U/vahR5sYTxKHXWo=
Subject key identifier: 4F:B7:2F:72:F9:08:4E:AF:B8:6E:E8:67:69:19:32:65:74:65:96:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017FAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD44E30E2CBF11F094A3B7DCDAE4EC9C.roa
Signing time: Fri 09 May 2025 10:24:35 +0000
ROA not before: Fri 09 May 2025 10:24:30 +0000
ROA not after: Sun 03 Aug 2025 10:24:30 +0000
asID: 18229
IP address blocks: 154.206.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 May 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98219 (0x17fab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 10:24:30 2025 GMT
Not After : Aug 3 10:24:30 2025 GMT
Subject: CN=681dd7e3-1170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:6b:73:cf:47:d2:ff:22:90:52:9a:6a:cf:
b8:16:a2:a9:2e:4e:53:c2:06:f6:9f:e6:ef:e1:b3:
6f:7a:8c:fb:79:70:5c:36:ca:20:b2:a2:33:65:2f:
74:1e:33:f7:f0:29:33:87:bb:7f:fa:fb:74:45:1b:
1a:69:4a:13:f6:00:62:aa:b8:b7:52:71:40:48:22:
f8:79:a9:4a:82:cd:ce:25:4d:0f:ed:76:7c:44:3d:
02:73:7a:3d:bf:42:7f:3f:4b:f2:c4:56:ad:40:38:
e4:a4:11:5e:3a:4e:67:7a:95:90:39:0b:bc:e1:93:
fd:fd:77:e1:e3:e6:1b:65:3a:49:f4:2a:cd:9f:96:
9f:c5:79:c6:c7:12:12:8c:af:6d:8a:54:3e:83:ab:
a0:cd:f2:d6:77:90:21:c3:a3:34:d8:e2:f8:dd:2f:
45:55:5d:05:3e:5c:d1:63:6e:5a:28:27:bf:fd:da:
28:c1:4e:7d:8e:89:60:40:87:a6:2f:f8:06:24:80:
a4:c2:ee:90:58:bf:92:eb:28:58:c4:ed:61:5f:27:
a8:3b:d4:a4:14:54:3f:d8:b3:b9:40:eb:c3:c9:a8:
43:1e:be:d2:68:03:0b:4a:3a:41:d3:dc:e8:f4:af:
5c:ef:79:1f:02:55:ac:b9:b5:bc:20:85:03:a4:d1:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B7:2F:72:F9:08:4E:AF:B8:6E:E8:67:69:19:32:65:74:65:96:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD44E30E2CBF11F094A3B7DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9b:f6:bf:2b:ff:54:e9:1f:ef:b0:3d:a7:1b:da:cf:8d:c2:
dc:44:cb:0f:d0:4e:f6:8f:3b:04:dc:e5:89:68:87:8a:16:89:
32:8e:5b:c6:e9:17:b0:8b:a0:52:1b:00:36:d1:3f:fe:9b:66:
78:2e:4e:16:ab:44:dc:9a:1f:88:1b:8e:5b:94:dd:f0:5d:f9:
e8:e3:18:46:77:da:75:0c:48:d2:6d:0b:f0:95:d8:fc:f5:f5:
e4:c0:c6:88:9a:39:d6:bb:77:89:14:24:ec:f4:18:a9:1d:62:
df:ce:d5:7f:0f:ea:3a:ab:f4:9a:c0:d8:88:0c:3b:3f:fc:ba:
fa:3c:8e:16:b7:c8:d7:e4:a3:bb:a7:65:2d:44:90:1b:6e:b7:
e8:fa:8b:ca:33:e5:67:94:90:3f:cb:01:5a:e8:91:23:cb:0c:
36:10:6e:03:c6:07:5b:6f:b0:7a:7f:5b:7d:f2:8f:48:48:55:
54:0f:e9:1e:73:d7:f7:a0:44:7a:ba:73:a0:b5:27:73:90:4e:
46:96:8f:fa:6e:23:47:22:be:8d:bd:ed:b0:85:87:ab:2c:b8:
03:31:ee:4f:94:4b:29:c0:cc:cc:1a:15:4f:05:b1:24:e2:41:
79:bb:90:c5:7d:89:59:a1:58:10:9e:0a:43:f2:2f:99:51:1b:
c6:31:6d:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAX+rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTA5MTAyNDMwWhcNMjUwODAzMTAyNDMwWjAYMRYw
FAYDVQQDEw02ODFkZDdlMy0xMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAor1rc89H0v8ikFKaas+4FqKpLk5Twgb2n+bv4bNveoz7eXBcNsogsqIz
ZS90HjP38Ckzh7t/+vt0RRsaaUoT9gBiqri3UnFASCL4ealKgs3OJU0P7XZ8RD0C
c3o9v0J/P0vyxFatQDjkpBFeOk5nepWQOQu84ZP9/Xfh4+YbZTpJ9CrNn5afxXnG
xxISjK9tilQ+g6ugzfLWd5Ahw6M02OL43S9FVV0FPlzRY25aKCe//doowU59jolg
QIemL/gGJICkwu6QWL+S6yhYxO1hXyeoO9SkFFQ/2LO5QOvDyahDHr7SaAMLSjpB
09zo9K9c73kfAlWsubW8IIUDpNGxZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFE+3
L3L5CE6vuG7oZ2kZMmV0ZZYEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRDQ0RTMwRTJDQkYxMUYwOTRBM0I3RENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4dMA0GCSqGSIb3DQEB
CwUAA4IBAQCkm/a/K/9U6R/vsD2nG9rPjcLcRMsP0E72jzsE3OWJaIeKFokyjlvG
6Rewi6BSGwA20T/+m2Z4Lk4Wq0Tcmh+IG45blN3wXfno4xhGd9p1DEjSbQvwldj8
9fXkwMaImjnWu3eJFCTs9BipHWLfztV/D+o6q/SawNiIDDs//Lr6PI4Wt8jX5KO7
p2UtRJAbbrfo+ovKM+VnlJA/ywFa6JEjyww2EG4Dxgdbb7B6f1t98o9ISFVUD+ke
c9f3oER6unOgtSdzkE5Glo/6biNHIr6Nve2whYerLLgDMe5PlEspwMzMGhVPBbEk
4kF5u5DFfYlZoVgQngpD8i+ZURvGMW00
-----END CERTIFICATE-----
Generated at Sun May 11 11:40:19 2025 by rpki-client