Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF01A8E0B5011EFB59CB310017001B1.roa
File: 0BF01A8E0B5011EFB59CB310017001B1.roa (raw, json)
Hash identifier: 3UCJ/XOJhXY5D9tVzZj28uep/a16NvKNdobjzyyYmCY=
Subject key identifier: AA:CB:94:E5:B2:2F:A5:91:E0:1E:D0:A2:3F:AD:1C:0C:48:96:7F:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B492
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF01A8E0B5011EFB59CB310017001B1.roa
Signing time: Mon 06 May 2024 02:26:30 +0000
ROA not before: Mon 06 May 2024 02:26:26 +0000
ROA not after: Tue 11 Jun 2024 02:26:26 +0000
asID: 138915
IP address blocks: 154.205.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46226 (0xb492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:26:26 2024 GMT
Not After : Jun 11 02:26:26 2024 GMT
Subject: CN=66383fd6-6361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:97:0c:be:9b:a4:3c:e9:15:74:e9:95:cd:
b9:06:40:ee:44:7f:ba:b2:8f:6c:be:7e:14:56:ef:
d7:b4:35:9d:99:a0:ba:93:40:ea:0d:46:0f:5b:82:
66:42:87:fa:35:48:64:bb:f6:1d:c4:6c:22:fc:0f:
15:78:23:cb:70:3d:5a:00:6e:60:3e:ca:b7:69:b9:
bc:62:29:8b:63:f0:88:5b:12:12:6d:e8:41:b2:10:
0b:82:e8:1a:2f:d8:e9:a2:86:6e:b1:ae:16:a1:25:
84:3a:2c:42:8c:9b:9d:8e:52:33:95:17:d2:15:b1:
cd:56:c1:be:67:30:55:b3:e8:d5:d3:80:10:e5:c0:
b2:c5:0b:d6:ce:23:3f:65:f8:46:96:0b:79:0c:36:
1b:31:c0:9c:ca:f4:97:1b:64:c4:59:f6:69:dd:57:
9e:33:c3:63:8f:92:2a:40:b1:94:ca:bc:94:19:25:
47:f3:0d:37:7f:e9:4a:0b:0d:e2:93:69:5a:78:83:
d9:30:28:be:d2:b7:ff:0b:df:d3:11:39:4d:24:6a:
ac:0f:d3:b9:9c:ff:9e:d5:fe:a9:6f:9a:12:b5:e4:
ea:f8:39:bc:02:ca:b0:98:fa:11:6a:ec:36:b9:92:
65:eb:df:76:b5:10:11:04:8a:d0:89:78:66:6a:11:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:94:E5:B2:2F:A5:91:E0:1E:D0:A2:3F:AD:1C:0C:48:96:7F:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BF01A8E0B5011EFB59CB310017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.136.0/23
Signature Algorithm: sha256WithRSAEncryption
32:f5:08:cd:1f:ad:71:19:d0:b2:75:c3:31:fe:b5:12:03:2a:
f0:93:00:03:73:8d:68:7e:99:c0:88:84:f3:0e:ff:e2:d0:d1:
72:80:b8:5f:d6:06:e7:52:03:35:d2:54:9e:3b:f5:d4:88:3c:
70:bd:70:23:11:eb:32:10:51:29:19:fc:76:39:56:c0:9d:d7:
4e:95:e6:75:5b:a9:12:ba:66:3b:0f:57:fb:1e:bd:7a:47:86:
5a:5f:dd:74:79:db:f4:c6:73:9e:04:10:2a:c6:e4:55:7e:de:
c8:82:4e:5c:e0:d6:35:03:c3:c2:1c:77:21:da:84:e7:53:62:
99:3c:d5:e9:33:64:9e:b4:2c:d6:4f:a0:b0:24:29:5e:02:72:
a9:6b:66:34:cc:93:35:03:84:f2:46:a7:ec:04:e1:df:17:df:
00:39:fb:e2:40:e7:42:3f:5a:20:76:78:94:fc:68:8c:fe:10:
55:2a:4e:d2:39:ee:cc:39:a5:ad:9b:ce:a7:48:50:7a:7e:c0:
fc:b8:8b:36:cd:51:ab:3a:9e:fb:72:8a:8d:0a:3d:73:b8:8a:
27:3e:74:ee:a6:99:ec:32:75:a6:0d:a5:c3:a7:83:c4:c2:30:
00:13:9b:68:c4:37:15:6e:3c:2e:fa:9b:d0:3f:63:16:16:e1:
05:6e:3b:fe
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALSSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDIyNjI2WhcNMjQwNjExMDIyNjI2WjAYMRYw
FAYDVQQDEw02NjM4M2ZkNi02MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAspaXDL6bpDzpFXTplc25BkDuRH+6so9svn4UVu/XtDWdmaC6k0DqDUYP
W4JmQof6NUhku/YdxGwi/A8VeCPLcD1aAG5gPsq3abm8YimLY/CIWxISbehBshAL
gugaL9jpooZusa4WoSWEOixCjJudjlIzlRfSFbHNVsG+ZzBVs+jV04AQ5cCyxQvW
ziM/ZfhGlgt5DDYbMcCcyvSXG2TEWfZp3VeeM8Njj5IqQLGUyryUGSVH8w03f+lK
Cw3ik2laeIPZMCi+0rf/C9/TETlNJGqsD9O5nP+e1f6pb5oSteTq+Dm8AsqwmPoR
auw2uZJl6992tRARBIrQiXhmahGJMwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKrL
lOWyL6WR4B7Qoj+tHAxIln+8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQkYwMUE4RTBCNTAxMUVGQjU5Q0IzMTAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms2IMA0GCSqGSIb3DQEB
CwUAA4IBAQAy9QjNH61xGdCydcMx/rUSAyrwkwADc41ofpnAiITzDv/i0NFygLhf
1gbnUgM10lSeO/XUiDxwvXAjEesyEFEpGfx2OVbAnddOleZ1W6kSumY7D1f7Hr16
R4ZaX910edv0xnOeBBAqxuRVft7Igk5c4NY1A8PCHHch2oTnU2KZPNXpM2SetCzW
T6CwJCleAnKpa2Y0zJM1A4TyRqfsBOHfF98AOfviQOdCP1ogdniU/GiM/hBVKk7S
Oe7MOaWtm86nSFB6fsD8uIs2zVGrOp77coqNCj1zuIonPnTuppnsMnWmDaXDp4PE
wjAAE5toxDcVbjwu+pvQP2MWFuEFbjv+
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:59 2024 by rpki-client on console-fra.rpki-client.org