Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF22DF84014111EFACFA6523017001B1.roa
File: FF22DF84014111EFACFA6523017001B1.roa (raw, json)
Hash identifier: tdrSzUSbHXBzUXXhva4JjBadPlTtlIUeGZdygKDJVcc=
Subject key identifier: 61:98:DA:F2:77:48:BA:34:A7:2F:D2:7A:5E:4F:43:3A:D6:B6:79:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AED9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF22DF84014111EFACFA6523017001B1.roa
Signing time: Tue 23 Apr 2024 07:20:44 +0000
ROA not before: Tue 23 Apr 2024 07:20:40 +0000
ROA not after: Thu 30 May 2024 07:20:40 +0000
asID: 63139
IP address blocks: 154.93.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44761 (0xaed9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:20:40 2024 GMT
Not After : May 30 07:20:40 2024 GMT
Subject: CN=6627614c-c5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:fc:7a:07:b6:88:9a:3b:52:70:08:19:f6:
86:60:c2:b9:bf:60:a7:f7:1b:d6:eb:5a:9f:34:5a:
6e:85:42:f2:d6:64:a8:eb:11:84:cf:31:96:af:5c:
72:84:5a:0b:05:2a:eb:f4:37:07:ff:6a:2e:be:68:
76:ca:e5:a6:65:61:b2:03:dc:0d:14:27:21:89:a3:
c1:47:d4:82:0c:1c:2a:06:af:55:a2:f6:46:79:83:
bc:f3:ae:77:63:cc:94:96:ba:c0:38:2e:a2:1a:33:
50:eb:04:07:ff:5b:c3:60:77:2f:15:8e:29:13:19:
b6:21:9d:1e:36:4c:88:bf:0d:b2:0f:54:7b:67:a8:
0e:f2:05:92:65:3f:2a:30:b6:73:7c:b8:b3:95:50:
67:e0:3f:23:53:54:6e:4d:d8:33:ce:bd:2a:e4:0b:
38:82:51:4b:24:ad:d0:e8:09:ab:31:23:a2:34:f3:
9f:ad:5f:79:89:47:8a:4b:a1:32:4c:45:03:f2:7f:
51:23:04:f5:ee:2d:e7:5d:ff:55:50:ca:9d:ca:96:
8d:f3:36:06:c4:3a:ac:a1:ee:58:bc:0e:02:cb:86:
9e:3c:f4:01:19:9b:38:5e:16:9a:f6:0b:e2:dd:36:
7f:ab:35:4b:d0:37:08:97:76:7b:fe:62:ed:a1:e0:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:DA:F2:77:48:BA:34:A7:2F:D2:7A:5E:4F:43:3A:D6:B6:79:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF22DF84014111EFACFA6523017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.79.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1f:a9:0d:7a:39:24:0c:54:c8:0e:9c:a1:f8:d5:35:22:29:
3c:ad:7e:19:ff:24:0c:56:8d:c4:46:b1:fe:8a:ed:69:a9:9a:
ad:d9:69:ae:c8:71:02:5e:dd:fa:80:5b:51:b8:87:93:13:8e:
cc:e2:38:86:7d:9e:d7:f6:ae:be:25:e1:5d:8c:2d:11:93:ff:
8f:4d:4b:68:12:3f:f2:c2:5f:5d:e7:33:8f:e1:46:83:7b:10:
a1:1d:a4:3d:36:37:b1:9f:41:95:3c:2b:35:1d:0e:47:10:5a:
fb:cf:65:82:36:2e:05:1d:49:03:76:b7:7e:41:d1:88:c9:b4:
ba:4e:f1:ba:47:2e:a0:5f:96:a4:83:18:4e:4e:26:9c:22:d9:
c2:9a:4c:0f:ac:db:55:db:c6:b4:a6:df:6c:95:c4:84:48:7d:
85:3a:57:1e:e5:86:d7:49:a1:4a:e0:80:4c:5c:af:56:87:ba:
e0:93:0b:88:bd:4a:48:00:65:51:e5:31:73:e3:ab:dd:8f:ae:
1d:9e:a6:bb:51:96:a0:66:88:f0:50:59:62:c9:99:40:69:64:
7e:ee:ac:d8:0e:0b:70:08:c3:f9:d2:a7:8a:71:01:d8:2b:f2:
32:6b:f8:e7:bf:9d:12:50:97:81:e3:89:33:73:3c:4f:31:46:
e6:cb:1e:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK7ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMDcyMDQwWhcNMjQwNTMwMDcyMDQwWjAYMRYw
FAYDVQQDEw02NjI3NjE0Yy1jNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlQ78ege2iJo7UnAIGfaGYMK5v2Cn9xvW61qfNFpuhULy1mSo6xGEzzGW
r1xyhFoLBSrr9DcH/2ouvmh2yuWmZWGyA9wNFCchiaPBR9SCDBwqBq9VovZGeYO8
8653Y8yUlrrAOC6iGjNQ6wQH/1vDYHcvFY4pExm2IZ0eNkyIvw2yD1R7Z6gO8gWS
ZT8qMLZzfLizlVBn4D8jU1RuTdgzzr0q5As4glFLJK3Q6AmrMSOiNPOfrV95iUeK
S6EyTEUD8n9RIwT17i3nXf9VUMqdypaN8zYGxDqsoe5YvA4Cy4aePPQBGZs4Xhaa
9gvi3TZ/qzVL0DcIl3Z7/mLtoeBNUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGGY
2vJ3SLo0py/Sel5PQzrWtnkvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjIyREY4NDAxNDExMUVGQUNGQTY1MjMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1PMA0GCSqGSIb3DQEB
CwUAA4IBAQAJH6kNejkkDFTIDpyh+NU1Iik8rX4Z/yQMVo3ERrH+iu1pqZqt2Wmu
yHECXt36gFtRuIeTE47M4jiGfZ7X9q6+JeFdjC0Rk/+PTUtoEj/ywl9d5zOP4UaD
exChHaQ9Njexn0GVPCs1HQ5HEFr7z2WCNi4FHUkDdrd+QdGIybS6TvG6Ry6gX5ak
gxhOTiacItnCmkwPrNtV28a0pt9slcSESH2FOlce5YbXSaFK4IBMXK9Wh7rgkwuI
vUpIAGVR5TFz46vdj64dnqa7UZagZojwUFliyZlAaWR+7qzYDgtwCMP50qeKcQHY
K/Iya/jnv50SUJeB44kzczxPMUbmyx4A
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:27 2024 by rpki-client on console-fra.rpki-client.org