Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2186D774A8DB11EFA3DF1F57762E951A.roa
File: 2186D774A8DB11EFA3DF1F57762E951A.roa (raw, json)
Hash identifier: qa4MRbpNsW7o1Zlvcc8NiUhG0DbZGlooEXJhGjo/sN0=
Subject key identifier: E1:6C:99:4D:9E:F1:79:F6:6F:FC:F8:A9:A6:E2:16:A0:C8:64:F2:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01104B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2186D774A8DB11EFA3DF1F57762E951A.roa
Signing time: Fri 22 Nov 2024 14:07:39 +0000
ROA not before: Fri 22 Nov 2024 14:07:35 +0000
ROA not after: Mon 09 Dec 2024 14:07:35 +0000
asID: 7018
IP address blocks: 154.206.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69707 (0x1104b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:07:35 2024 GMT
Not After : Dec 9 14:07:35 2024 GMT
Subject: CN=6740902b-91eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:7d:ea:c4:86:be:8a:bd:e5:11:a9:14:10:
6d:73:f4:a3:8d:3b:a3:03:b5:39:08:39:cb:35:90:
2c:b6:2a:81:ff:e0:2c:d0:75:75:bc:62:8e:46:ad:
d7:84:f2:e1:7a:35:43:24:f5:3c:15:c5:17:bc:d0:
99:6b:6e:76:dd:99:7c:49:8a:5e:3c:ab:92:20:33:
b9:62:f3:18:2f:7d:0b:7a:51:3f:ce:d4:8a:b5:5b:
5f:13:53:24:a0:b7:09:6c:ac:8a:45:50:82:c7:62:
b9:d5:49:a2:25:b0:b4:35:ca:a4:f7:be:02:ae:d9:
0e:29:61:8d:ed:af:38:e3:5c:e9:a4:8c:d3:a2:eb:
33:a9:33:fe:9d:6e:84:48:38:6d:50:0c:ea:e1:c9:
b9:ae:93:1f:4a:66:e4:00:be:07:ba:dd:37:f1:11:
26:c3:14:c4:c3:41:f9:be:d5:93:91:5e:1b:37:71:
9d:d5:e0:86:a8:63:ca:15:10:39:ae:6e:7a:c7:c2:
18:71:ad:7a:db:e0:c3:39:64:62:42:2b:70:d3:22:
ae:3a:30:3d:6c:a2:7c:a3:ee:23:1c:e8:14:37:24:
cc:13:6d:a9:31:e1:71:df:2f:f2:30:2e:d9:cb:59:
41:3d:1c:dc:42:6f:40:83:4a:07:78:ff:fc:3b:93:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6C:99:4D:9E:F1:79:F6:6F:FC:F8:A9:A6:E2:16:A0:C8:64:F2:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2186D774A8DB11EFA3DF1F57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:34:ef:06:02:46:6b:9a:3c:22:da:18:65:9f:5d:4b:e8:38:
7f:bf:0a:28:13:80:7b:f3:50:35:da:ba:58:d5:3e:fd:bd:c0:
4f:15:48:a4:88:35:5a:45:29:7f:0a:87:0b:6f:ce:e0:df:83:
87:d7:0c:cf:a4:8d:8a:5f:51:48:f9:c6:8b:09:6d:d5:27:00:
c4:a7:90:75:c3:e2:5b:4d:43:3a:ee:82:00:0e:e9:bd:00:c4:
77:53:44:69:99:0e:69:c0:df:90:4f:a0:a9:9b:19:3c:67:7a:
d5:51:73:e2:f8:b5:b4:00:6d:2e:a9:d9:e2:71:76:eb:2b:a7:
49:b5:b0:dc:5d:72:07:6b:8c:13:20:f9:f2:ea:20:23:81:de:
14:ee:a1:00:7b:7b:60:5a:06:8c:9e:33:82:41:4b:20:40:b6:
50:20:f2:60:24:ec:3b:f6:d4:c9:2a:52:d0:1d:7f:81:9b:3b:
f7:07:62:be:c1:50:d9:b8:79:9d:c3:ad:3d:eb:cb:e0:54:79:
6c:ec:9b:b3:55:a2:e3:8c:d8:b8:3d:c5:1e:7a:02:25:3f:44:
b4:b1:90:bd:09:1d:54:41:99:bd:7e:5d:4d:0b:10:31:13:62:
09:ee:2e:15:77:b6:4d:21:18:81:7e:2a:c2:fb:2a:94:07:17:
0f:6e:1b:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARBLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTQwNzM1WhcNMjQxMjA5MTQwNzM1WjAYMRYw
FAYDVQQDEw02NzQwOTAyYi05MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx0p96sSGvoq95RGpFBBtc/SjjTujA7U5CDnLNZAstiqB/+As0HV1vGKO
Rq3XhPLhejVDJPU8FcUXvNCZa2523Zl8SYpePKuSIDO5YvMYL30LelE/ztSKtVtf
E1MkoLcJbKyKRVCCx2K51UmiJbC0Ncqk974CrtkOKWGN7a8441zppIzTouszqTP+
nW6ESDhtUAzq4cm5rpMfSmbkAL4Hut038REmwxTEw0H5vtWTkV4bN3Gd1eCGqGPK
FRA5rm56x8IYca162+DDOWRiQitw0yKuOjA9bKJ8o+4jHOgUNyTME22pMeFx3y/y
MC7Zy1lBPRzcQm9Ag0oHeP/8O5MOOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOFs
mU2e8Xn2b/z4qabiFqDIZPKsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTg2RDc3NEE4REIxMUVGQTNERjFGNTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms4wMA0GCSqGSIb3DQEB
CwUAA4IBAQClNO8GAkZrmjwi2hhln11L6Dh/vwooE4B781A12rpY1T79vcBPFUik
iDVaRSl/CocLb87g34OH1wzPpI2KX1FI+caLCW3VJwDEp5B1w+JbTUM67oIADum9
AMR3U0RpmQ5pwN+QT6Cpmxk8Z3rVUXPi+LW0AG0uqdnicXbrK6dJtbDcXXIHa4wT
IPny6iAjgd4U7qEAe3tgWgaMnjOCQUsgQLZQIPJgJOw79tTJKlLQHX+Bmzv3B2K+
wVDZuHmdw60968vgVHls7JuzVaLjjNi4PcUeegIlP0S0sZC9CR1UQZm9fl1NCxAx
E2IJ7i4Vd7ZNIRiBfirC+yqUBxcPbhsM
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:24 2024 by rpki-client on console-fra.rpki-client.org