Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C2F848EA8E511EF9D6A1496762E951A.roa
File: 0C2F848EA8E511EF9D6A1496762E951A.roa (raw, json)
Hash identifier: fi4liNdp50s311sWDquvKRAjO02fJTjs7LyPo2H9zZI=
Subject key identifier: B9:2E:EF:FC:1A:C3:D2:FA:1F:2E:2D:D1:63:99:A4:CD:10:BE:89:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C2F848EA8E511EF9D6A1496762E951A.roa
Signing time: Fri 22 Nov 2024 15:18:38 +0000
ROA not before: Fri 22 Nov 2024 15:18:34 +0000
ROA not after: Tue 03 Dec 2024 15:18:34 +0000
asID: 62240
IP address blocks: 154.194.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69827 (0x110c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:18:34 2024 GMT
Not After : Dec 3 15:18:34 2024 GMT
Subject: CN=6740a0ce-f1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0d:24:12:a5:f6:ed:53:8d:73:e5:c6:20:9a:
41:6c:93:e9:a5:ce:69:fe:2e:cf:92:eb:ac:f2:27:
29:71:34:4b:be:2f:56:6e:37:f9:d6:18:ae:a2:50:
3a:a4:b5:da:a7:67:21:25:6a:86:bb:fc:a5:40:e9:
88:10:1d:e7:70:2a:02:01:b0:73:0d:4b:c3:d4:16:
59:5e:8d:d5:86:fa:8a:64:4a:85:bd:ee:54:91:11:
57:bd:52:51:ee:d4:1b:22:96:a9:28:50:18:0f:f4:
5d:21:45:a7:1f:10:f8:fd:5c:89:ad:c6:51:fd:2a:
24:25:e0:2c:f9:c3:5d:d5:d3:22:a0:6c:ec:96:d4:
bd:53:75:b6:47:db:ea:96:21:ae:85:c7:6e:ec:04:
f2:8d:07:1a:f0:c1:39:87:48:bf:72:8a:30:34:2d:
39:28:ac:40:bd:4e:60:08:30:94:d3:c3:74:58:ec:
a7:f0:f5:30:08:c4:06:96:82:12:f9:d9:a0:8d:ea:
85:ef:ea:4f:cd:3e:2f:ba:53:59:23:f8:d6:12:07:
97:a3:96:c8:d2:8d:da:37:e9:d8:59:0d:1c:92:6c:
3f:ad:1d:97:e4:2a:c2:f5:57:11:15:12:ea:c8:cb:
5d:57:f1:25:b7:aa:e3:00:7e:cc:91:59:99:eb:1e:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:EF:FC:1A:C3:D2:FA:1F:2E:2D:D1:63:99:A4:CD:10:BE:89:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C2F848EA8E511EF9D6A1496762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9f:2d:20:5d:83:94:90:fa:80:5d:e8:b8:3e:41:f0:d4:9d:
f3:5e:bd:a3:fc:06:3a:7f:3f:7f:5c:a0:be:a9:f9:34:54:c3:
7c:06:54:49:4e:ca:d7:8c:8d:4f:2f:ef:f1:82:bf:15:56:c5:
53:b6:22:05:cc:e2:18:41:7d:76:50:fc:b5:3d:7a:3f:0d:23:
ca:76:4a:67:b8:89:ed:86:69:c5:66:a9:64:f6:99:15:8a:a6:
d3:76:c8:1b:4d:7a:52:f7:43:d1:30:f0:b1:1a:ce:21:ee:29:
34:51:40:e6:10:d4:8f:b9:a9:99:db:a4:01:d4:96:79:0b:67:
c4:2a:74:dc:31:b6:97:8a:f1:ce:54:b8:6a:74:c7:ba:8a:89:
fe:d6:82:69:83:21:c4:11:25:4f:dc:56:1c:7a:41:84:2f:23:
15:53:3b:25:e6:37:1c:9b:13:7f:ac:df:6a:c6:08:5b:f8:3a:
a2:20:03:15:1e:9f:2b:fb:52:e2:8b:2a:f6:e4:c5:d4:b3:2d:
d8:34:de:79:60:91:03:96:bb:26:73:23:2c:d5:4c:40:22:30:
56:a3:b3:4d:31:cf:0b:e8:62:48:6d:c2:47:f4:82:11:bc:50:
3f:c7:aa:b4:00:15:b1:ea:02:47:8b:b5:59:d6:3d:a8:05:15:
37:21:8a:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARDDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTUxODM0WhcNMjQxMjAzMTUxODM0WjAYMRYw
FAYDVQQDEw02NzQwYTBjZS1mMWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6g0kEqX27VONc+XGIJpBbJPppc5p/i7Pkuus8icpcTRLvi9Wbjf51hiu
olA6pLXap2chJWqGu/ylQOmIEB3ncCoCAbBzDUvD1BZZXo3VhvqKZEqFve5UkRFX
vVJR7tQbIpapKFAYD/RdIUWnHxD4/VyJrcZR/SokJeAs+cNd1dMioGzsltS9U3W2
R9vqliGuhcdu7ATyjQca8ME5h0i/coowNC05KKxAvU5gCDCU08N0WOyn8PUwCMQG
loIS+dmgjeqF7+pPzT4vulNZI/jWEgeXo5bI0o3aN+nYWQ0ckmw/rR2X5CrC9VcR
FRLqyMtdV/Elt6rjAH7MkVmZ6x4+YwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLku
7/waw9L6Hy4t0WOZpM0Qvom4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQzJGODQ4RUE4RTUxMUVGOUQ2QTE0OTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJiMA0GCSqGSIb3DQEB
CwUAA4IBAQBsny0gXYOUkPqAXei4PkHw1J3zXr2j/AY6fz9/XKC+qfk0VMN8BlRJ
TsrXjI1PL+/xgr8VVsVTtiIFzOIYQX12UPy1PXo/DSPKdkpnuInthmnFZqlk9pkV
iqbTdsgbTXpS90PRMPCxGs4h7ik0UUDmENSPuamZ26QB1JZ5C2fEKnTcMbaXivHO
VLhqdMe6ion+1oJpgyHEESVP3FYcekGELyMVUzsl5jccmxN/rN9qxghb+DqiIAMV
Hp8r+1Liiyr25MXUsy3YNN55YJEDlrsmcyMs1UxAIjBWo7NNMc8L6GJIbcJH9IIR
vFA/x6q0ABWx6gJHi7VZ1j2oBRU3IYrF
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:55 2024 by rpki-client on console-ams.rpki-client.org