Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49FD4A020C0B11EF921C35FA007001B1.roa
File: 49FD4A020C0B11EF921C35FA007001B1.roa (raw, json)
Hash identifier: cZXAItnJH55eIUkfMnehA4A1Rd3jhBZSMDD0gPzkovk=
Subject key identifier: A0:37:5A:02:8A:E3:3B:C2:0A:7F:FE:80:80:01:76:AF:C8:9F:B8:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B53A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49FD4A020C0B11EF921C35FA007001B1.roa
Signing time: Tue 07 May 2024 00:46:50 +0000
ROA not before: Tue 07 May 2024 00:00:46 +0000
ROA not after: Sun 09 Jun 2024 00:00:46 +0000
asID: 20473
IP address blocks: 154.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46394 (0xb53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 00:00:46 2024 GMT
Not After : Jun 9 00:00:46 2024 GMT
Subject: CN=663979fa-f4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:b2:6b:08:a5:f1:30:9e:35:89:fd:c7:6d:
1f:83:be:19:a1:9b:48:4e:f5:0f:b3:92:7d:82:af:
97:c9:ff:d5:c3:02:11:3a:6b:0e:5f:a8:93:a9:27:
da:98:40:78:29:cd:21:b6:47:2b:1a:67:6d:89:f2:
2f:36:05:fa:4f:3b:ba:f3:f6:7f:46:72:e4:73:da:
84:22:10:0e:6e:fd:35:64:c0:9d:3e:3d:36:25:34:
2c:b1:d1:f2:67:6b:53:e2:a3:2b:99:a7:f8:e7:c7:
b9:74:e5:ea:0c:f0:f2:2c:0b:7d:1b:e1:db:68:d8:
23:ad:fe:71:f6:01:8a:01:5d:fb:46:e3:4d:47:42:
15:67:76:7d:ad:9f:2d:24:6b:a3:c7:bd:08:e0:85:
eb:37:04:7b:a9:64:2e:c7:28:c0:d8:a8:ac:a7:2d:
ea:6c:b5:14:65:b8:04:02:f3:0f:e8:90:6c:c5:21:
3a:c9:9c:4c:f3:04:c4:78:26:2a:95:f2:57:2e:3f:
4a:f6:34:c8:55:8d:f3:58:7d:c4:68:b2:b0:45:f9:
70:7e:c6:04:13:c1:d1:54:11:b9:05:05:57:d7:33:
d5:62:b2:d4:6b:0a:27:58:9b:77:80:25:35:cc:76:
9a:4f:19:5f:49:48:3c:d0:b0:98:c6:d1:8d:fa:0b:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:5A:02:8A:E3:3B:C2:0A:7F:FE:80:80:01:76:AF:C8:9F:B8:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49FD4A020C0B11EF921C35FA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6c:3c:b0:ba:28:a3:cf:cb:36:4a:f3:5a:26:0c:1c:a3:1c:
54:95:d8:4e:24:e7:2d:d8:3a:c9:c1:03:5c:49:2f:9c:ae:ec:
e9:d7:45:94:ec:4d:7c:ee:03:93:3f:ee:86:53:a7:58:15:75:
93:e1:85:6f:5d:7d:db:8a:56:bf:07:f6:4b:93:4e:cb:d8:13:
b3:d7:9d:7f:7c:04:59:18:a8:26:d1:0b:00:d8:3d:df:bc:ea:
52:89:60:f6:be:4d:71:83:68:62:a5:80:43:79:5b:52:ee:b3:
82:50:30:cf:96:ba:be:f0:7f:4a:26:ac:34:a2:fa:64:bf:ed:
ac:bd:52:dc:c0:15:52:db:d6:3f:ac:a1:d8:08:de:61:86:c1:
9a:ec:09:a6:2d:10:e2:a9:01:c5:57:ae:ce:3f:f2:d2:a6:60:
70:1b:c6:97:78:ad:20:8c:4f:bf:af:a7:fb:7d:31:93:18:c1:
e1:48:5d:42:62:57:99:54:6a:ae:21:99:b9:23:a0:f5:96:9a:
f6:b0:f3:18:f4:92:6c:1c:3b:73:6d:3c:dd:f1:01:e9:26:bd:
47:68:f9:5b:ca:e9:fd:74:0c:4f:24:34:4d:89:b8:f1:d7:ea:
a8:a0:84:e9:20:7c:a4:44:31:43:a4:a7:e8:ee:fa:79:3a:6a:
45:2e:dd:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALU6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA3MDAwMDQ2WhcNMjQwNjA5MDAwMDQ2WjAYMRYw
FAYDVQQDEw02NjM5NzlmYS1mNGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7MKyawil8TCeNYn9x20fg74ZoZtITvUPs5J9gq+Xyf/VwwIROmsOX6iT
qSfamEB4Kc0htkcrGmdtifIvNgX6Tzu68/Z/RnLkc9qEIhAObv01ZMCdPj02JTQs
sdHyZ2tT4qMrmaf458e5dOXqDPDyLAt9G+HbaNgjrf5x9gGKAV37RuNNR0IVZ3Z9
rZ8tJGujx70I4IXrNwR7qWQuxyjA2Kispy3qbLUUZbgEAvMP6JBsxSE6yZxM8wTE
eCYqlfJXLj9K9jTIVY3zWH3EaLKwRflwfsYEE8HRVBG5BQVX1zPVYrLUawonWJt3
gCU1zHaaTxlfSUg80LCYxtGN+gs24wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKA3
WgKK4zvCCn/+gIABdq/In7g5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OUZENEEwMjBDMEIxMUVGOTIxQzM1RkEwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsV/MA0GCSqGSIb3DQEB
CwUAA4IBAQBObDywuiijz8s2SvNaJgwcoxxUldhOJOct2DrJwQNcSS+cruzp10WU
7E187gOTP+6GU6dYFXWT4YVvXX3bila/B/ZLk07L2BOz151/fARZGKgm0QsA2D3f
vOpSiWD2vk1xg2hipYBDeVtS7rOCUDDPlrq+8H9KJqw0ovpkv+2svVLcwBVS29Y/
rKHYCN5hhsGa7AmmLRDiqQHFV67OP/LSpmBwG8aXeK0gjE+/r6f7fTGTGMHhSF1C
YleZVGquIZm5I6D1lpr2sPMY9JJsHDtzbTzd8QHpJr1HaPlbyun9dAxPJDRNibjx
1+qooITpIHykRDFDpKfo7vp5OmpFLt0m
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:14 2024 by rpki-client on console-fra.rpki-client.org