Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E29F844A5111EFBA7BEBA5762E951A.roa
File: 17E29F844A5111EFBA7BEBA5762E951A.roa (raw, json)
Hash identifier: XHxGVvKBYXBTtTFvAte/HxDo8BbdCKURztNiSwTEz5I=
Subject key identifier: E5:2D:CF:E4:95:21:53:9B:E7:CD:AA:72:74:45:A2:15:8E:3D:C3:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D696
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E29F844A5111EFBA7BEBA5762E951A.roa
Signing time: Thu 25 Jul 2024 06:42:43 +0000
ROA not before: Thu 25 Jul 2024 06:42:39 +0000
ROA not after: Sun 23 Feb 2025 06:42:39 +0000
asID: 152920
IP address blocks: 154.208.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54934 (0xd696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 06:42:39 2024 GMT
Not After : Feb 23 06:42:39 2025 GMT
Subject: CN=66a1f3e2-8f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:68:5f:98:8a:9e:60:ef:98:92:77:74:ca:
57:42:6a:2f:f3:29:a2:e5:46:62:97:46:66:de:32:
37:dc:f3:57:e9:ec:08:82:a2:6a:11:5b:23:5e:e7:
94:99:89:45:55:ab:82:c3:49:f2:64:52:d6:99:04:
2b:52:7f:ed:f4:7f:4a:ff:25:73:74:f8:c9:9d:41:
27:08:ce:b2:98:62:3c:02:4a:29:d1:78:e7:29:d1:
45:e6:51:0a:8f:1c:e4:a2:9e:12:08:90:20:85:b4:
8b:38:ec:32:9a:f0:d8:cf:4b:cb:e2:90:1e:06:74:
86:54:61:0e:f2:c8:d9:20:71:61:c4:0c:be:5a:ad:
fd:74:b9:1f:f8:9f:a7:c1:26:f1:09:d0:0f:cd:f0:
10:b1:09:2e:8f:bb:da:ad:48:2e:4f:54:60:2b:3f:
3e:f8:e1:56:f2:bb:fd:44:27:2b:5a:61:f6:58:8f:
13:dd:af:75:a8:1f:02:ef:df:e1:c3:aa:ad:62:ff:
44:d5:11:27:df:e1:1d:4d:21:09:d6:e8:c3:4f:a8:
91:a8:17:3d:c5:40:57:b5:bd:c7:19:d8:04:c0:43:
a9:65:1a:c3:04:46:f7:02:37:a6:07:53:ca:97:d8:
c5:24:f3:c7:6b:87:a5:3c:52:2c:14:28:e0:10:34:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:CF:E4:95:21:53:9B:E7:CD:AA:72:74:45:A2:15:8E:3D:C3:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17E29F844A5111EFBA7BEBA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.160.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:8a:7e:dc:04:54:ee:fc:9f:f3:43:f0:1a:1c:b3:38:37:0e:
16:da:4d:b7:ee:af:24:50:26:d2:34:6d:e1:f3:ff:1d:52:40:
f7:32:52:9b:7f:17:87:b6:96:49:1c:c9:08:ad:29:1e:32:82:
9f:35:18:05:df:ac:3a:60:78:f5:b3:07:f8:b1:73:30:dd:1e:
78:cb:b6:a1:c0:3f:64:20:45:0e:25:d8:f3:84:44:98:60:57:
c1:d5:75:c4:df:61:47:80:e7:07:60:58:c8:aa:9f:c3:2f:86:
bf:56:a5:56:4d:0d:12:e9:45:83:91:c5:27:c9:f5:e7:11:9b:
b8:b8:35:5a:2c:9c:f4:a9:5e:b4:d0:c2:df:38:5d:15:b0:05:
f6:fc:7e:a3:ef:8c:21:d8:8b:36:47:e6:67:b4:e8:c8:f1:89:
4b:6c:bf:56:1e:9f:aa:ac:a5:ac:67:00:98:ce:65:ff:1c:86:
1f:dd:dc:7d:83:fc:1f:78:08:4e:45:56:fb:01:b9:30:93:0a:
4f:64:b6:35:02:4a:9f:5b:f1:62:67:3a:47:89:a2:92:4c:4e:
8c:72:e2:3c:2f:6e:af:d1:fa:db:7f:d0:a7:ee:68:0e:2d:7a:
96:d3:64:45:1d:84:11:85:76:c9:c2:6d:b8:d6:9b:b3:ac:b4:
38:74:b3:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANaWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzI1MDY0MjM5WhcNMjUwMjIzMDY0MjM5WjAYMRYw
FAYDVQQDEw02NmExZjNlMi04ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3hVoX5iKnmDvmJJ3dMpXQmov8ymi5UZil0Zm3jI33PNX6ewIgqJqEVsj
XueUmYlFVauCw0nyZFLWmQQrUn/t9H9K/yVzdPjJnUEnCM6ymGI8Akop0XjnKdFF
5lEKjxzkop4SCJAghbSLOOwymvDYz0vL4pAeBnSGVGEO8sjZIHFhxAy+Wq39dLkf
+J+nwSbxCdAPzfAQsQkuj7varUguT1RgKz8++OFW8rv9RCcrWmH2WI8T3a91qB8C
79/hw6qtYv9E1REn3+EdTSEJ1ujDT6iRqBc9xUBXtb3HGdgEwEOpZRrDBEb3Ajem
B1PKl9jFJPPHa4elPFIsFCjgEDTxmwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOUt
z+SVIVOb582qcnRFohWOPcOiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xN0UyOUY4NDRBNTExMUVGQkE3QkVCQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmtCgMA0GCSqGSIb3DQEB
CwUAA4IBAQA9in7cBFTu/J/zQ/AaHLM4Nw4W2k237q8kUCbSNG3h8/8dUkD3MlKb
fxeHtpZJHMkIrSkeMoKfNRgF36w6YHj1swf4sXMw3R54y7ahwD9kIEUOJdjzhESY
YFfB1XXE32FHgOcHYFjIqp/DL4a/VqVWTQ0S6UWDkcUnyfXnEZu4uDVaLJz0qV60
0MLfOF0VsAX2/H6j74wh2Is2R+ZntOjI8YlLbL9WHp+qrKWsZwCYzmX/HIYf3dx9
g/wfeAhORVb7AbkwkwpPZLY1AkqfW/FiZzpHiaKSTE6McuI8L26v0frbf9Cn7mgO
LXqW02RFHYQRhXbJwm241puzrLQ4dLN6
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org