Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16D991F2A64911EF9FA978AF762E951A.roa
File: 16D991F2A64911EF9FA978AF762E951A.roa (raw, json)
Hash identifier: 24CEg/ODMKXbDpfqr8Ap61OcU1aGcJ6NxD2rEmokKWI=
Subject key identifier: F2:8A:BF:86:06:B8:D1:E7:08:42:77:E0:D3:6C:98:DD:80:81:CA:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16D991F2A64911EF9FA978AF762E951A.roa
Signing time: Tue 19 Nov 2024 07:37:12 +0000
ROA not before: Tue 19 Nov 2024 07:37:08 +0000
ROA not after: Wed 04 Dec 2024 07:37:08 +0000
asID: 57456
IP address blocks: 154.213.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69358 (0x10eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 07:37:08 2024 GMT
Not After : Dec 4 07:37:08 2024 GMT
Subject: CN=673c4028-7187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:3b:63:4f:a6:3f:24:d1:54:b0:de:91:67:
6c:1c:d4:98:75:65:37:bc:86:a1:86:89:32:47:03:
4d:1f:e8:93:b6:5c:0a:10:e8:13:ea:88:7d:71:61:
27:b8:40:62:5f:3b:f5:d4:eb:18:73:14:e5:1f:92:
8a:4d:d2:47:80:0b:a4:50:77:c0:f3:a9:c6:67:f9:
e8:19:96:b2:6a:6d:08:92:67:19:0c:79:6f:99:51:
74:b2:3d:da:ed:7f:a7:6b:ff:c8:eb:89:9a:0f:16:
cc:4c:ad:06:b6:77:4e:19:bc:c2:23:db:5c:b7:5a:
61:93:0b:4c:96:16:0f:84:b2:11:3e:c6:2b:85:c5:
05:3b:7a:72:c7:d7:03:30:43:df:b8:b1:11:71:2a:
f8:0f:e2:06:7a:8b:f2:34:ff:87:81:59:36:26:45:
52:e4:c1:ed:d4:e0:ee:db:5f:9b:71:0d:4e:48:b9:
75:cb:c1:11:53:b5:65:76:cd:2e:48:85:e0:13:b8:
51:fc:aa:19:37:64:2e:95:2d:11:83:41:df:48:7a:
82:81:83:86:79:35:b5:0d:4f:9f:2d:de:39:98:fe:
af:4f:fb:13:da:90:b3:7a:df:ed:00:96:34:e8:f8:
ae:44:be:c0:99:a6:5a:b9:5c:82:fc:75:9f:19:3c:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8A:BF:86:06:B8:D1:E7:08:42:77:E0:D3:6C:98:DD:80:81:CA:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16D991F2A64911EF9FA978AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.162.0/23
Signature Algorithm: sha256WithRSAEncryption
89:7b:13:06:a6:1f:f3:1a:44:d7:1a:bf:a5:ea:a9:87:e9:83:
a0:b2:d5:d5:66:26:41:77:55:29:aa:6d:bb:d8:3b:d1:e9:3d:
ee:5b:cd:3d:91:52:ee:d7:b3:b1:01:49:c4:fa:b3:76:5d:43:
09:41:7b:c8:bc:46:db:d2:05:cd:f9:55:24:2b:f7:20:92:c0:
d7:38:bf:ea:d8:07:e7:b7:fc:06:3f:bf:b8:f8:60:e8:74:29:
c4:17:f1:d9:3b:25:e5:63:86:ef:63:c0:85:f3:1c:ed:96:7e:
28:28:6e:07:cd:85:34:9e:37:6c:7e:d0:0c:33:72:2d:14:23:
b3:8c:f3:d4:1d:8c:5f:ac:6b:2b:f3:f7:ff:98:4e:c4:54:33:
b2:b6:0e:ce:16:77:b4:68:66:49:11:42:2a:5b:69:aa:0d:a2:
83:02:e7:15:99:60:8b:3e:8b:cd:b6:cd:47:c3:ae:b2:06:c6:
58:75:7d:4a:09:c3:97:9b:61:17:be:e1:e2:28:28:15:ab:ae:
eb:55:f1:e0:1c:60:49:ba:ec:cf:30:b1:cf:c4:24:51:34:32:
f8:f7:01:59:9d:9c:e2:2d:18:92:c3:5c:ec:51:2b:8e:3c:41:
60:9d:41:df:2a:e4:a0:85:76:6b:fb:c0:61:87:1b:f7:a9:a9:
1f:98:8c:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ7uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE5MDczNzA4WhcNMjQxMjA0MDczNzA4WjAYMRYw
FAYDVQQDEw02NzNjNDAyOC03MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtA7Y0+mPyTRVLDekWdsHNSYdWU3vIahhokyRwNNH+iTtlwKEOgT6oh9
cWEnuEBiXzv11OsYcxTlH5KKTdJHgAukUHfA86nGZ/noGZayam0IkmcZDHlvmVF0
sj3a7X+na//I64maDxbMTK0GtndOGbzCI9tct1phkwtMlhYPhLIRPsYrhcUFO3py
x9cDMEPfuLERcSr4D+IGeovyNP+HgVk2JkVS5MHt1ODu21+bcQ1OSLl1y8ERU7Vl
ds0uSIXgE7hR/KoZN2QulS0Rg0HfSHqCgYOGeTW1DU+fLd45mP6vT/sT2pCzet/t
AJY06PiuRL7AmaZauVyC/HWfGTz3RQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPKK
v4YGuNHnCEJ34NNsmN2AgcrWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNkQ5OTFGMkE2NDkxMUVGOUZBOTc4QUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtWiMA0GCSqGSIb3DQEB
CwUAA4IBAQCJexMGph/zGkTXGr+l6qmH6YOgstXVZiZBd1Upqm272DvR6T3uW809
kVLu17OxAUnE+rN2XUMJQXvIvEbb0gXN+VUkK/cgksDXOL/q2Afnt/wGP7+4+GDo
dCnEF/HZOyXlY4bvY8CF8xztln4oKG4HzYU0njdsftAMM3ItFCOzjPPUHYxfrGsr
8/f/mE7EVDOytg7OFne0aGZJEUIqW2mqDaKDAucVmWCLPovNts1Hw66yBsZYdX1K
CcOXm2EXvuHiKCgVq67rVfHgHGBJuuzPMLHPxCRRNDL49wFZnZziLRiSw1zsUSuO
PEFgnUHfKuSghXZr+8Bhhxv3qakfmIwC
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:13 2024 by rpki-client on console-fra.rpki-client.org