Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F98BD3AE74C11EE83173A6E775412E6.roa
File: 0F98BD3AE74C11EE83173A6E775412E6.roa (raw, json)
Hash identifier: mgCds5ZIiqYWOnaWF99gXhYFAOiXQblTrOp3tjczICk=
Subject key identifier: 88:DF:DF:01:E8:B0:31:89:98:1A:33:33:3C:7E:2E:8A:29:65:38:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A43F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F98BD3AE74C11EE83173A6E775412E6.roa
Signing time: Thu 21 Mar 2024 06:27:16 +0000
ROA not before: Thu 21 Mar 2024 06:27:13 +0000
ROA not after: Tue 23 Apr 2024 06:27:13 +0000
asID: 44559
IP address blocks: 154.220.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42047 (0xa43f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:27:13 2024 GMT
Not After : Apr 23 06:27:13 2024 GMT
Subject: CN=65fbd344-8182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:ae:82:56:eb:79:ec:74:38:a1:62:18:d3:
26:77:60:b5:87:b2:63:c9:fa:2a:2c:0a:e7:c2:5d:
7f:1b:db:8b:69:db:1d:01:e8:46:f8:23:2a:db:83:
71:90:de:61:3f:f3:50:af:82:03:ac:99:76:d3:9b:
dc:00:31:bb:48:e4:9c:a1:4e:6b:65:83:d9:c6:5e:
a8:03:5d:15:77:7d:90:a1:88:4f:1f:3b:d9:16:b6:
bf:9a:e2:ef:8d:34:4f:25:a8:bb:0a:d3:19:5a:ad:
ba:52:72:e5:19:5e:3c:99:cf:a4:59:71:9e:82:d0:
c0:c4:96:6f:54:7f:49:1d:1e:8a:3b:5f:a5:31:bc:
96:4d:44:ae:34:4f:e3:1c:55:82:12:c5:80:87:de:
33:72:cf:92:b2:36:5a:9d:dd:a4:a4:21:8a:9b:a6:
ab:b1:71:e0:bc:61:cd:10:80:18:de:b8:8f:3b:57:
1f:e4:10:3c:6c:05:fc:22:d3:0f:a2:36:c9:af:aa:
02:67:1c:0f:9e:77:c5:37:1b:0a:99:4f:02:60:f3:
ce:47:0f:be:03:41:e2:f8:8b:79:15:26:e9:bb:f0:
7f:37:a8:cd:84:09:02:77:c9:3f:79:fa:bf:13:7b:
af:16:4d:91:74:2e:ee:bc:52:1e:36:21:86:e9:a9:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:DF:01:E8:B0:31:89:98:1A:33:33:3C:7E:2E:8A:29:65:38:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F98BD3AE74C11EE83173A6E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.153.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d2:7a:a0:e4:2a:78:25:c0:7e:51:06:69:12:b8:24:7b:08:
a2:84:2a:6e:97:2e:d3:74:8c:07:7a:ee:9d:ff:3b:3d:e7:aa:
7f:24:f6:b0:92:b1:4b:13:19:09:0a:19:05:08:ce:a3:b0:d5:
34:97:08:56:59:b0:60:af:12:2a:fb:57:f6:e3:96:72:0e:01:
a2:da:a9:da:b5:ef:d7:5c:09:fb:fa:7c:38:f7:fb:77:4e:4d:
e1:37:20:98:01:49:b8:19:2c:4c:4a:cc:1f:1c:bf:10:42:ca:
60:20:2e:4b:3a:f1:61:67:de:64:e3:a3:f9:2a:8a:41:16:13:
ed:8b:ae:30:31:a9:de:9a:1b:43:e5:21:49:c0:0f:0b:88:b4:
18:76:f0:ed:5a:f3:fe:bb:5c:50:e2:67:c6:2c:db:7c:ec:f3:
04:63:e5:85:7b:e6:c5:6f:54:74:10:4c:62:b8:84:cf:be:3b:
73:2a:c7:4d:c6:57:d1:8c:50:06:0d:89:0f:1a:6b:2a:87:87:
05:29:bd:fa:83:50:e4:61:de:d7:e9:49:c2:5c:5c:4a:09:72:
79:39:27:1a:d6:70:0b:33:48:26:9e:97:2f:63:84:12:7a:33:
3e:ee:b6:f5:27:b7:2f:2c:f6:0c:76:9e:58:c1:49:e9:5c:38:
5d:8a:47:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKQ/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDYyNzEzWhcNMjQwNDIzMDYyNzEzWjAYMRYw
FAYDVQQDEw02NWZiZDM0NC04MTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2UWuglbreex0OKFiGNMmd2C1h7JjyfoqLArnwl1/G9uLadsdAehG+CMq
24NxkN5hP/NQr4IDrJl205vcADG7SOScoU5rZYPZxl6oA10Vd32QoYhPHzvZFra/
muLvjTRPJai7CtMZWq26UnLlGV48mc+kWXGegtDAxJZvVH9JHR6KO1+lMbyWTUSu
NE/jHFWCEsWAh94zcs+SsjZand2kpCGKm6arsXHgvGHNEIAY3riPO1cf5BA8bAX8
ItMPojbJr6oCZxwPnnfFNxsKmU8CYPPORw++A0Hi+It5FSbpu/B/N6jNhAkCd8k/
efq/E3uvFk2RdC7uvFIeNiGG6amcKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIjf
3wHosDGJmBozMzx+LoopZTgfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRjk4QkQzQUU3NEMxMUVFODMxNzNBNkU3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtyZMA0GCSqGSIb3DQEB
CwUAA4IBAQAE0nqg5Cp4JcB+UQZpErgkewiihCpuly7TdIwHeu6d/zs956p/JPaw
krFLExkJChkFCM6jsNU0lwhWWbBgrxIq+1f245ZyDgGi2qnate/XXAn7+nw49/t3
Tk3hNyCYAUm4GSxMSswfHL8QQspgIC5LOvFhZ95k46P5KopBFhPti64wManemhtD
5SFJwA8LiLQYdvDtWvP+u1xQ4mfGLNt87PMEY+WFe+bFb1R0EExiuITPvjtzKsdN
xlfRjFAGDYkPGmsqh4cFKb36g1DkYd7X6UnCXFxKCXJ5OSca1nALM0gmnpcvY4QS
ejM+7rb1J7cvLPYMdp5YwUnpXDhdikfg
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org