Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/FDEB70D44C2511EF8146B08F762E951A.roa
File: FDEB70D44C2511EF8146B08F762E951A.roa (raw, json)
Hash identifier: YfjMYIsbDX25SzCOYvPBuiMEogU2K4oEpLmtCkvxr6M=
Subject key identifier: 72:68:A4:E3:36:9B:5B:A4:8A:53:82:A1:91:A7:36:68:F9:BC:FF:74
Certificate issuer: /CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Certificate serial: 0523
Authority key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/FDEB70D44C2511EF8146B08F762E951A.roa
Signing time: Sat 27 Jul 2024 14:39:13 +0000
ROA not before: Sat 27 Jul 2024 14:39:09 +0000
ROA not after: Tue 27 Jul 2027 14:39:09 +0000
asID: 328010
IP address blocks: 196.49.19.0/24 maxlen: 24
2001:43f8:b61::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366D2C6AF/serialNumber=386298D9D0EB71CA90F486A16134AF1361D271C8
Validity
Not Before: Jul 27 14:39:09 2024 GMT
Not After : Jul 27 14:39:09 2027 GMT
Subject: CN=66a50691-fdd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:57:40:ba:b8:1f:b3:e6:79:53:4b:48:2f:
f7:2c:13:d1:ea:1b:01:91:17:1f:f8:ab:0b:1f:a9:
49:fd:59:07:84:27:03:7e:9f:af:36:a0:5a:cc:3d:
6f:db:f7:38:a6:29:fe:d2:c9:ee:2f:f5:0b:cd:73:
d7:ad:bd:21:e1:3b:9d:8a:db:9d:d7:10:84:8a:6c:
31:ca:56:f6:ee:e0:e2:69:b1:92:b5:4e:ad:49:97:
94:7a:fb:6d:cd:b9:ff:96:c9:d6:88:60:9c:e8:c9:
b3:e5:d8:5b:8c:31:3c:54:84:31:28:c0:61:72:4f:
60:fe:74:a8:62:7b:da:2c:98:a6:e6:da:42:ed:73:
e0:62:0a:eb:78:63:8c:4f:75:cd:36:8a:35:eb:b6:
e2:c4:39:a5:d1:31:8b:28:2e:b3:f7:2b:d4:23:0f:
a2:31:37:da:cb:1b:f9:72:09:72:89:6c:4d:55:a2:
64:89:45:a0:c1:04:10:47:c3:44:51:75:58:54:04:
9e:e7:48:49:18:c7:dd:6d:e9:c4:fb:0c:f1:de:06:
5f:30:90:96:82:27:82:0e:dc:3c:c2:5a:f4:66:6f:
72:26:bd:9a:af:a6:54:b1:cc:a1:67:00:8d:76:c6:
d8:70:7d:e0:96:32:22:e5:66:e0:3b:e0:97:a2:91:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:A4:E3:36:9B:5B:A4:8A:53:82:A1:91:A7:36:68:F9:BC:FF:74
X509v3 Authority Key Identifier:
keyid:38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/FDEB70D44C2511EF8146B08F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.19.0/24
IPv6:
2001:43f8:b61::/48
Signature Algorithm: sha256WithRSAEncryption
4e:b2:76:a0:53:54:c5:8e:d3:12:95:66:7d:12:bd:1c:8a:4b:
be:0c:ae:5c:ef:54:43:13:a6:c9:c3:1a:12:0e:62:4c:b5:dd:
61:8f:d8:50:3a:50:79:b9:87:61:85:ae:e3:a4:15:f4:48:78:
c3:a8:b2:ab:ff:d5:a5:23:69:2a:9c:9d:b3:89:7c:6f:34:84:
22:b1:97:31:40:f4:3d:16:1f:24:d4:ab:99:37:f2:c3:a6:a8:
90:a7:81:70:b1:93:5e:19:77:d3:de:0b:98:c4:e3:51:ab:e1:
87:47:99:46:08:50:b6:51:8b:59:9e:27:cd:b0:a5:21:70:4d:
aa:02:6f:26:cf:fc:41:62:cf:63:28:74:bc:63:cc:61:8b:d8:
ae:1d:60:ca:e9:5c:b6:0d:44:c3:a9:9b:0a:89:8d:89:7c:09:
c8:4f:fa:cc:ad:3c:62:b1:e4:90:fa:51:7f:e1:03:98:13:a7:
33:99:67:50:00:6e:b9:2f:5c:6c:6a:ad:fd:a7:f6:e7:db:64:
f8:5f:fe:49:5e:72:8a:b3:25:b5:7d:65:47:05:54:e6:ef:dc:
60:42:22:a1:4b:c6:00:44:f4:92:e8:70:84:3f:60:ab:19:49:
6c:f0:12:c7:81:74:08:ae:de:c5:be:d8:55:e7:7c:3f:9e:a3:
51:d1:14:f7
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkQyQzZBRjExMC8GA1UEBRMoMzg2Mjk4RDlEMEVCNzFDQTkwRjQ4NkExNjEzNEFG
MTM2MUQyNzFDODAeFw0yNDA3MjcxNDM5MDlaFw0yNzA3MjcxNDM5MDlaMBgxFjAU
BgNVBAMTDTY2YTUwNjkxLWZkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWaVdAurgfs+Z5U0tIL/csE9HqGwGRFx/4qwsfqUn9WQeEJwN+n682oFrM
PW/b9zimKf7Sye4v9QvNc9etvSHhO52K253XEISKbDHKVvbu4OJpsZK1Tq1Jl5R6
+23Nuf+WydaIYJzoybPl2FuMMTxUhDEowGFyT2D+dKhie9osmKbm2kLtc+BiCut4
Y4xPdc02ijXrtuLEOaXRMYsoLrP3K9QjD6IxN9rLG/lyCXKJbE1VomSJRaDBBBBH
w0RRdVhUBJ7nSEkYx91t6cT7DPHeBl8wkJaCJ4IO3DzCWvRmb3ImvZqvplSxzKFn
AI12xthwfeCWMiLlZuA74JeikcQFAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUcmik
4zabW6SKU4Khkac2aPm8/3QwHwYDVR0jBBgwFoAUOGKY2dDrccqQ9IahYTSvE2HS
ccgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEMkM2LzBCRUMwMjU2NzExQTExRUI5RUI2QjQxQ0Y4QUVBMjI4L09HS1ky
ZERyY2NxUTlJYWhZVFN2RTJIU2NjZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09HS1kyZERyY2NxUTlJYWhZVFN2RTJIU2NjZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjZEMkM2LzBCRUMwMjU2NzExQTExRUI5RUI2QjQxQ0Y4
QUVBMjI4L0ZERUI3MEQ0NEMyNTExRUY4MTQ2QjA4Rjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBADEMRMwDwQCAAIwCQMHACAB
Q/gLYTANBgkqhkiG9w0BAQsFAAOCAQEATrJ2oFNUxY7TEpVmfRK9HIpLvgyuXO9U
QxOmycMaEg5iTLXdYY/YUDpQebmHYYWu46QV9Eh4w6iyq//VpSNpKpyds4l8bzSE
IrGXMUD0PRYfJNSrmTfyw6aokKeBcLGTXhl3094LmMTjUavhh0eZRghQtlGLWZ4n
zbClIXBNqgJvJs/8QWLPYyh0vGPMYYvYrh1gyulctg1Ew6mbComNiXwJyE/6zK08
YrHkkPpRf+EDmBOnM5lnUABuuS9cbGqt/af259tk+F/+SV5yirMltX1lRwVU5u/c
YEIioUvGAET0kuhwhD9gqxlJbPASx4F0CK7exb7YVed8P56jUdEU9w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org