Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/9C0922A07CDA11EE826623584AD9E6FC.roa
File: 9C0922A07CDA11EE826623584AD9E6FC.roa (raw, json)
Hash identifier: uECmY3jV3qiuTfMrOHue7zCKctO8EvT0qW7ZBh1T6zE=
Subject key identifier: 83:B1:2D:C7:2C:42:25:49:D1:C8:70:B6:6F:95:CE:3D:F1:14:8D:51
Certificate issuer: /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial: 040E
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/9C0922A07CDA11EE826623584AD9E6FC.roa
Signing time: Mon 06 Nov 2023 19:28:06 +0000
ROA not before: Mon 06 Nov 2023 19:28:02 +0000
ROA not after: Sat 31 Dec 2033 19:28:02 +0000
asID: 37738
IP address blocks: 154.70.200.0/24 maxlen: 24
154.70.201.0/24 maxlen: 24
154.70.202.0/24 maxlen: 24
154.70.203.0/24 maxlen: 24
154.70.204.0/24 maxlen: 24
154.70.205.0/24 maxlen: 24
154.70.206.0/24 maxlen: 24
154.70.207.0/24 maxlen: 24
2c0f:5400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038 (0x40e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Validity
Not Before: Nov 6 19:28:02 2023 GMT
Not After : Dec 31 19:28:02 2033 GMT
Subject: CN=65493e46-7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:b7:ce:76:31:05:e9:a6:d8:1e:49:a4:15:
1a:1f:d0:c5:70:bf:20:f8:fc:ef:ed:d2:97:c4:21:
1f:fb:72:70:8d:ae:6f:ff:e8:6c:5f:5f:28:19:12:
e4:0c:8c:5d:87:9f:99:0f:bb:59:02:54:64:aa:33:
18:f4:cc:cb:13:a1:fe:62:3d:0f:a6:8d:72:3e:c6:
d8:0f:87:db:8e:0e:35:3f:4a:e6:ae:55:6d:3b:16:
78:90:14:d2:c1:29:2e:2c:63:aa:53:dd:60:d3:c1:
3e:3b:7f:3f:79:46:75:05:69:5b:76:f1:90:02:34:
5a:78:18:a8:e1:2b:18:2e:f0:34:69:95:08:51:32:
74:ea:a2:0b:4e:55:7d:5c:91:94:b9:05:3a:83:8e:
a4:65:0a:fd:9b:4d:98:5e:e3:13:53:3b:88:f0:ba:
5e:ef:3c:57:c9:ff:2a:24:16:e6:af:f4:81:a4:e8:
22:40:45:75:f3:08:e4:07:52:8b:b9:9a:cc:97:05:
29:0c:2d:5d:c5:c0:5c:22:a9:96:db:94:f8:5c:a7:
a0:6c:ec:0d:c7:d6:83:b8:5d:77:c8:4f:80:59:81:
a3:6f:92:af:27:91:81:c7:d8:a4:dd:67:a0:49:30:
3c:dc:5d:83:d2:a3:07:b6:54:e4:78:15:86:ff:5b:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:2D:C7:2C:42:25:49:D1:C8:70:B6:6F:95:CE:3D:F1:14:8D:51
X509v3 Authority Key Identifier:
keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/9C0922A07CDA11EE826623584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.200.0/21
IPv6:
2c0f:5400::/32
Signature Algorithm: sha256WithRSAEncryption
66:57:a1:f2:eb:fa:65:ac:bc:e9:df:f5:fb:9a:3f:b3:c3:71:
2b:04:c2:7c:b6:91:ee:78:87:05:60:94:38:e8:c6:aa:70:ff:
86:8a:73:70:6f:bb:7b:7c:00:38:4b:f1:20:77:ff:52:f4:b9:
ff:ea:ee:4c:95:ee:7e:46:07:a7:82:dc:3c:87:68:e5:06:58:
d1:d4:e3:fa:bf:82:01:3b:85:78:9f:45:83:d3:d3:20:05:8c:
f0:c5:8b:26:4d:4f:62:2a:bc:81:57:5d:bd:22:ba:0d:e8:65:
67:eb:76:4b:71:76:24:d5:04:1d:29:00:f3:fb:c6:ac:95:8b:
c4:4f:75:3b:8d:0d:a1:51:b0:ca:33:b5:ba:a1:4c:82:cd:2b:
97:4a:26:43:8c:c1:f1:d8:ed:74:55:40:30:19:ee:55:07:b3:
97:60:58:e6:81:6a:05:02:55:0a:55:38:53:ac:56:f7:f0:4e:
88:c7:50:43:b2:54:68:50:27:fe:a6:6c:cb:86:1c:49:20:b3:
4b:d6:d6:d2:27:71:2c:40:d0:de:a9:f1:0a:8a:fe:4f:f1:fb:
d6:d1:4e:d7:a8:b3:c2:08:75:c5:29:de:77:bc:af:1f:d0:f8:
00:4d:8c:e1:67:b9:52:4d:f6:4e:57:6d:37:0e:28:f7:f4:60:
e0:4a:c4:49
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NDkzRTJBRjExMC8GA1UEBRMoQThBMUFGMDJGOTZDMUJBOTJEOTNBNTIyQ0FCRTlF
RDhFNTI5NTE1MzAeFw0yMzExMDYxOTI4MDJaFw0zMzEyMzExOTI4MDJaMBgxFjAU
BgNVBAMTDTY1NDkzZTQ2LTdhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNWLfOdjEF6abYHkmkFRof0MVwvyD4/O/t0pfEIR/7cnCNrm//6GxfXygZ
EuQMjF2Hn5kPu1kCVGSqMxj0zMsTof5iPQ+mjXI+xtgPh9uODjU/SuauVW07FniQ
FNLBKS4sY6pT3WDTwT47fz95RnUFaVt28ZACNFp4GKjhKxgu8DRplQhRMnTqogtO
VX1ckZS5BTqDjqRlCv2bTZhe4xNTO4jwul7vPFfJ/yokFuav9IGk6CJARXXzCOQH
Uou5msyXBSkMLV3FwFwiqZbblPhcp6Bs7A3H1oO4XXfIT4BZgaNvkq8nkYHH2KTd
Z6BJMDzcXYPSowe2VOR4FYb/W1pbAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUg7Et
xyxCJUnRyHC2b5XOPfEUjVEwHwYDVR0jBBgwFoAUqKGvAvlsG6ktk6Uiyr6e2OUp
UVMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ5M0UyL0NEMERDQzEwNkZEQzExRUI5RkY3N0I1OEY4QUVBMjI4L3FLR3ZB
dmxzRzZrdGs2VWl5cjZlMk9VcFVWTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FLR3ZBdmxzRzZrdGs2VWl5cjZlMk9VcFVWTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjQ5M0UyL0NEMERDQzEwNkZEQzExRUI5RkY3N0I1OEY4
QUVBMjI4LzlDMDkyMkEwN0NEQTExRUU4MjY2MjM1ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAOaRsgwDQQCAAIwBwMFACwP
VAAwDQYJKoZIhvcNAQELBQADggEBAGZXofLr+mWsvOnf9fuaP7PDcSsEwny2ke54
hwVglDjoxqpw/4aKc3Bvu3t8ADhL8SB3/1L0uf/q7kyV7n5GB6eC3DyHaOUGWNHU
4/q/ggE7hXifRYPT0yAFjPDFiyZNT2IqvIFXXb0iug3oZWfrdktxdiTVBB0pAPP7
xqyVi8RPdTuNDaFRsMoztbqhTILNK5dKJkOMwfHY7XRVQDAZ7lUHs5dgWOaBagUC
VQpVOFOsVvfwTojHUEOyVGhQJ/6mbMuGHEkgs0vW1tIncSxA0N6p8QqK/k/x+9bR
Tteos8IIdcUp3ne8rx/Q+ABNjOFnuVJN9k5XbTcOKPf0YOBKxEk=
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:36 2024 by rpki-client on console-ams.rpki-client.org