Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33A15EBC13BA11F0A19B3873762E951A.roa
File: 33A15EBC13BA11F0A19B3873762E951A.roa (raw, json)
Hash identifier: ckbraDME/mPdjLFBy9CA2Pb1yIQCW5mB3So/7aJLJDA=
Subject key identifier: 6F:7F:BD:A2:3C:AC:61:A6:71:3C:23:CF:42:B0:59:33:D0:88:27:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0177FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33A15EBC13BA11F0A19B3873762E951A.roa
Signing time: Mon 07 Apr 2025 14:11:30 +0000
ROA not before: Mon 07 Apr 2025 14:11:26 +0000
ROA not after: Thu 08 May 2025 14:11:26 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96254 (0x177fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 14:11:26 2025 GMT
Not After : May 8 14:11:26 2025 GMT
Subject: CN=67f3dd12-8fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:f4:14:19:88:69:ce:c2:6b:66:1b:f6:0d:
58:20:e9:08:61:e1:e4:57:9c:7a:aa:3f:f1:6b:20:
cc:c5:c1:73:6f:13:a7:2a:3c:10:fa:c2:ae:18:f7:
29:a7:b4:d1:8b:e8:fa:8d:a1:55:48:13:6f:a8:de:
63:24:4c:9c:c0:ab:da:c6:57:0c:ad:8d:1e:55:a3:
18:45:33:f3:15:da:98:1c:06:4e:eb:b5:64:8c:da:
fe:7c:7d:58:02:d9:af:b3:9f:c5:f9:e1:af:32:ad:
4c:6c:c9:a4:4e:ba:a1:18:58:85:bd:9e:00:ac:d4:
5a:37:c2:be:d9:c4:f1:0e:ec:88:19:44:1e:d0:53:
1e:8a:76:1f:70:33:56:a3:d2:c5:84:e6:e1:76:ae:
17:b6:66:f3:a7:32:3e:54:53:76:4c:46:85:70:af:
f0:7f:5e:c3:4b:1f:a4:11:29:70:df:26:b7:ca:24:
c6:c9:b5:95:c3:e5:d1:1a:f0:f3:96:7a:51:b2:45:
d6:f9:60:3f:ac:12:2f:84:c0:97:e4:d4:d3:0a:5b:
74:1d:17:4e:6a:91:bc:d7:17:a4:d5:f5:0c:88:6a:
da:a1:dc:83:19:8b:2a:17:d6:a8:0e:6a:a7:60:c8:
25:67:44:0a:b4:ac:31:68:ce:18:29:68:c8:e2:4f:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7F:BD:A2:3C:AC:61:A6:71:3C:23:CF:42:B0:59:33:D0:88:27:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33A15EBC13BA11F0A19B3873762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:41:24:13:7b:6b:e0:8e:52:19:2b:f1:49:3d:e7:87:29:08:
1a:7b:b0:cb:d3:07:c5:38:f4:a0:a7:60:6e:8c:05:75:5a:85:
19:4d:28:af:fa:5f:50:dd:70:40:1b:a6:56:43:20:2e:37:07:
b5:a4:69:aa:31:d0:da:bd:9a:68:73:f4:c9:84:7a:6f:af:f4:
c1:66:6e:9f:26:dd:38:a1:45:44:71:d8:11:87:06:aa:b9:16:
4e:e7:f7:ce:52:7a:30:a9:d5:c1:97:ce:4b:14:d4:35:c1:f4:
11:42:b6:cd:28:3e:6c:72:9d:1c:8f:ad:a4:1e:3d:98:15:a6:
94:a3:8e:0b:33:1a:22:69:03:ae:70:c1:3a:7c:4d:96:a9:69:
04:e7:40:69:63:b4:11:90:f6:5a:fc:0c:c3:1f:ca:89:d3:32:
0d:8e:0b:b7:b7:2f:1f:a7:ee:88:65:bf:72:54:40:93:65:a7:
39:b9:d2:bc:1a:56:fb:bd:69:11:3a:96:f2:3d:d4:ac:f4:75:
a1:67:5e:71:b7:9d:d5:02:c5:c1:84:83:14:c5:50:ea:9d:f2:
29:db:c0:48:f5:5d:9b:1d:d5:a4:ec:d9:71:f2:9d:92:f5:e6:
33:5b:f0:1c:d2:c9:8d:68:b0:0d:4b:a1:06:1e:9a:b6:6d:9d:
50:04:03:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXf+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNDA3MTQxMTI2WhcNMjUwNTA4MTQxMTI2WjAYMRYw
FAYDVQQDEw02N2YzZGQxMi04ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2x/0FBmIac7Ca2Yb9g1YIOkIYeHkV5x6qj/xayDMxcFzbxOnKjwQ+sKu
GPcpp7TRi+j6jaFVSBNvqN5jJEycwKvaxlcMrY0eVaMYRTPzFdqYHAZO67VkjNr+
fH1YAtmvs5/F+eGvMq1MbMmkTrqhGFiFvZ4ArNRaN8K+2cTxDuyIGUQe0FMeinYf
cDNWo9LFhObhdq4XtmbzpzI+VFN2TEaFcK/wf17DSx+kESlw3ya3yiTGybWVw+XR
GvDzlnpRskXW+WA/rBIvhMCX5NTTClt0HRdOapG81xek1fUMiGraodyDGYsqF9ao
DmqnYMglZ0QKtKwxaM4YKWjI4k8oGQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG9/
vaI8rGGmcTwjz0KwWTPQiCetMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zM0ExNUVCQzEzQkExMUYwQTE5QjM4NzM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMdMA0GCSqGSIb3DQEB
CwUAA4IBAQA9QSQTe2vgjlIZK/FJPeeHKQgae7DL0wfFOPSgp2BujAV1WoUZTSiv
+l9Q3XBAG6ZWQyAuNwe1pGmqMdDavZpoc/TJhHpvr/TBZm6fJt04oUVEcdgRhwaq
uRZO5/fOUnowqdXBl85LFNQ1wfQRQrbNKD5scp0cj62kHj2YFaaUo44LMxoiaQOu
cME6fE2WqWkE50BpY7QRkPZa/AzDH8qJ0zINjgu3ty8fp+6IZb9yVECTZac5udK8
Glb7vWkROpbyPdSs9HWhZ15xt53VAsXBhIMUxVDqnfIp28BI9V2bHdWk7Nlx8p2S
9eYzW/Ac0smNaLANS6EGHpq2bZ1QBANV
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:53:55 2025 by rpki-client on console.sobornost.net