Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADBA9667BA211EEB17842774AD9E6FC.roa
File: 1ADBA9667BA211EEB17842774AD9E6FC.roa (raw, json)
Hash identifier: pr2YhLzjokcjtaRck9XSsD5/UM2FfLV37pGd1eBETsU=
Subject key identifier: 51:06:E0:72:C4:26:CD:6F:4F:F8:BB:BD:97:BC:39:17:5F:7C:EE:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4B3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADBA9667BA211EEB17842774AD9E6FC.roa
Signing time: Sun 05 Nov 2023 06:11:06 +0000
ROA not before: Sun 05 Nov 2023 06:11:03 +0000
ROA not after: Tue 05 Nov 2024 06:11:03 +0000
asID: 133448
IP address blocks: 154.223.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19258 (0x4b3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 06:11:03 2023 GMT
Not After : Nov 5 06:11:03 2024 GMT
Subject: CN=654731fa-8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:99:13:5d:8b:6b:c8:43:ef:4e:6d:83:d0:
63:d0:5a:e2:8f:3c:42:04:93:3a:b4:c5:82:38:b5:
56:c5:c6:fd:15:63:9f:0a:f0:52:6f:e2:07:0c:52:
18:10:27:6b:be:40:b7:2a:17:33:2b:ee:97:db:79:
7b:f1:f4:f8:4c:a1:3a:f5:84:c0:79:f2:81:d2:c6:
61:77:e9:55:21:7d:f2:d7:9d:7c:c5:0c:f6:cd:f4:
2f:26:df:e7:bc:b4:88:ee:d3:27:eb:d6:7a:80:86:
76:b2:af:5e:92:30:5d:a4:89:90:76:55:ef:73:4d:
5a:85:d0:bf:2d:00:51:cc:f8:1c:1c:d9:49:41:fd:
1d:a4:e7:8e:28:2f:2e:23:d4:f1:61:00:67:99:e1:
bf:74:71:39:38:b1:74:9f:da:95:9a:f8:22:41:53:
1b:84:b6:2c:c7:73:f8:9b:93:e3:ab:31:bd:df:77:
31:c7:03:8a:d7:da:20:64:4a:e1:78:3a:c7:6e:eb:
ae:36:e4:f2:25:9d:d5:91:31:ae:e2:40:08:82:ab:
5f:21:ee:10:5d:5b:2e:68:09:cd:c5:04:9d:36:61:
fc:1a:1a:04:01:8b:1e:ff:33:96:e4:aa:8b:cc:e6:
4b:45:85:e8:91:b3:97:19:84:52:44:82:4a:50:03:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:E0:72:C4:26:CD:6F:4F:F8:BB:BD:97:BC:39:17:5F:7C:EE:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADBA9667BA211EEB17842774AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:94:b7:d0:f3:18:01:1e:96:92:16:34:c3:8f:f1:98:a0:bf:
80:8c:67:3f:f9:9e:e2:cf:f1:b7:78:1e:79:d8:23:1f:0f:06:
c6:92:bc:20:33:5f:39:20:b9:09:e5:c4:a9:93:b4:70:68:2b:
d6:67:40:8e:f9:24:1c:4c:c8:b2:cb:bb:90:fc:6b:e1:bc:9f:
58:42:29:7f:f4:25:f7:31:f4:ac:9a:71:74:9f:90:88:30:8f:
df:dd:a3:fb:8d:7e:f2:6d:89:55:12:04:c6:58:4b:62:fa:2d:
81:47:0c:b7:da:ea:7a:10:67:19:f8:ed:0c:dd:28:0f:56:bb:
12:5c:8e:bd:a7:18:e8:45:3e:eb:f8:90:d4:99:45:36:55:27:
34:bc:b9:1e:1b:d1:a6:da:47:f6:21:df:63:34:20:39:4d:db:
c4:e1:99:9e:31:e1:0f:e8:d9:64:f1:1d:d5:3f:54:38:70:fe:
37:1c:f5:bc:65:f8:43:94:20:a2:22:90:74:c5:5c:55:a6:2c:
05:e9:28:df:9a:3e:d3:e7:c0:1b:5e:8f:0c:0f:9c:4e:52:bd:
1b:37:22:ae:bd:1c:77:d7:2f:e5:71:4f:56:c7:91:f6:51:4d:
bb:a9:de:78:cf:b8:4d:2c:26:7d:e7:1a:29:a7:4e:71:38:ab:
36:77:3a:1e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICSzowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDUwNjExMDNaFw0yNDExMDUwNjExMDNaMBgxFjAU
BgNVBAMTDTY1NDczMWZhLTg3MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDytpkTXYtryEPvTm2D0GPQWuKPPEIEkzq0xYI4tVbFxv0VY58K8FJv4gcM
UhgQJ2u+QLcqFzMr7pfbeXvx9PhMoTr1hMB58oHSxmF36VUhffLXnXzFDPbN9C8m
3+e8tIju0yfr1nqAhnayr16SMF2kiZB2Ve9zTVqF0L8tAFHM+Bwc2UlB/R2k544o
Ly4j1PFhAGeZ4b90cTk4sXSf2pWa+CJBUxuEtizHc/ibk+OrMb3fdzHHA4rX2iBk
SuF4Osdu66425PIlndWRMa7iQAiCq18h7hBdWy5oCc3FBJ02YfwaGgQBix7/M5bk
qovM5ktFheiRs5cZhFJEgkpQA+JPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUQbg
csQmzW9P+Lu9l7w5F1987gkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFBREJBOTY2N0JBMjExRUVCMTc4NDI3NzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3wIwDQYJKoZIhvcNAQEL
BQADggEBAFuUt9DzGAEelpIWNMOP8Zigv4CMZz/5nuLP8bd4HnnYIx8PBsaSvCAz
XzkguQnlxKmTtHBoK9ZnQI75JBxMyLLLu5D8a+G8n1hCKX/0Jfcx9KyacXSfkIgw
j9/do/uNfvJtiVUSBMZYS2L6LYFHDLfa6noQZxn47QzdKA9WuxJcjr2nGOhFPuv4
kNSZRTZVJzS8uR4b0abaR/Yh32M0IDlN28ThmZ4x4Q/o2WTxHdU/VDhw/jcc9bxl
+EOUIKIikHTFXFWmLAXpKN+aPtPnwBtejwwPnE5SvRs3Iq69HHfXL+VxT1bHkfZR
Tbup3njPuE0sJn3nGimnTnE4qzZ3Oh4=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org