Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2802963CEFF511EEAD35E5B6775412E6.roa
File: 2802963CEFF511EEAD35E5B6775412E6.roa (raw, json)
Hash identifier: lfG+JyAUlnN3WMVkHPJ+gb38m5+UwTLLftYT7/PnsHo=
Subject key identifier: 88:78:2B:A4:81:02:A9:D3:79:8F:55:03:CF:30:04:F4:E3:B2:9C:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2802963CEFF511EEAD35E5B6775412E6.roa
Signing time: Mon 01 Apr 2024 06:57:51 +0000
ROA not before: Mon 01 Apr 2024 06:57:48 +0000
ROA not after: Tue 07 May 2024 06:57:48 +0000
asID: 138915
IP address blocks: 154.223.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42992 (0xa7f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:57:48 2024 GMT
Not After : May 7 06:57:48 2024 GMT
Subject: CN=660a5aef-e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:1f:b4:49:25:46:44:df:9a:1b:43:5c:30:
3d:4a:b5:e9:d5:c6:1f:8c:09:40:a8:60:d2:bd:6c:
df:e4:38:e1:a6:85:25:0b:03:d9:ab:46:04:40:4c:
4f:ee:76:60:e2:d5:12:7a:81:58:98:f6:85:2d:88:
98:24:79:c9:15:fa:87:1b:8b:91:8b:34:7e:6e:f2:
9a:c2:3a:85:8d:82:61:e8:55:be:9e:95:88:eb:b6:
7c:50:d2:5e:da:35:6a:a8:d6:48:43:9c:90:61:d7:
43:4b:72:2b:7a:61:c3:4a:43:52:ca:ab:e7:d5:39:
40:59:33:03:ca:2a:f8:9c:47:ad:f7:b5:89:dc:34:
e5:8d:8c:4b:b3:8e:b9:d2:ec:08:58:32:35:9c:76:
4a:e8:a1:99:fa:f0:f5:95:da:ae:69:67:ff:43:26:
7e:19:b6:20:d3:5b:d3:a3:90:a0:b0:6a:49:b2:33:
ac:d2:cb:35:fb:57:7c:9d:06:a7:95:5a:cd:08:1c:
7d:31:8a:2f:43:1a:e7:2f:2b:ab:c2:9b:98:3d:7d:
8c:0f:7b:fd:7d:ed:3a:fa:d9:92:b4:45:cc:9e:dd:
07:3f:5c:5e:da:f5:6d:69:06:54:72:e9:0b:b3:fc:
4f:d2:b4:97:b9:00:ba:cc:55:25:9e:6d:3f:b7:36:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:2B:A4:81:02:A9:D3:79:8F:55:03:CF:30:04:F4:E3:B2:9C:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2802963CEFF511EEAD35E5B6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.66.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:98:44:1d:89:f0:59:b9:98:69:71:8a:03:37:e9:ee:11:c4:
ce:5a:b0:15:a6:55:0f:c2:13:ff:cc:aa:6f:7c:69:03:db:58:
93:4a:54:62:1d:f0:93:17:7f:ec:de:b1:a7:3c:64:16:ff:4f:
0f:52:78:15:8d:7b:d4:a2:2a:3b:71:e5:d7:a0:7a:e6:f8:b3:
9a:58:c6:4d:4d:87:51:6c:cd:be:df:d5:7e:50:9f:a0:54:21:
ab:b4:c2:c7:a2:ef:05:70:bb:f4:d5:8d:3a:db:84:fe:b2:44:
dd:e0:fd:cb:20:09:e3:3e:09:89:79:79:3e:0b:e9:7d:31:4c:
a4:a9:4a:24:26:aa:52:ee:a2:1f:d6:53:9d:24:24:18:b9:42:
52:7d:71:df:bc:c5:2d:92:b5:f3:60:de:e8:b3:b4:cb:ca:65:
57:fa:05:5d:19:33:e7:fd:4d:d9:f1:9a:36:b2:10:2c:6e:41:
4b:0a:16:24:80:61:74:60:16:cf:00:97:8b:aa:97:b3:b0:3b:
05:42:00:54:3b:5b:d0:88:32:af:9c:32:61:ca:e4:e2:69:41:
27:11:dc:49:60:d0:c9:db:e8:29:b3:26:79:6a:c1:06:39:ed:
55:8b:11:9e:95:07:4c:0b:b1:d7:4d:d1:06:0b:31:90:f4:64:
81:22:01:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKfwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDY1NzQ4WhcNMjQwNTA3MDY1NzQ4WjAYMRYw
FAYDVQQDEw02NjBhNWFlZi1lODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtHEftEklRkTfmhtDXDA9SrXp1cYfjAlAqGDSvWzf5DjhpoUlCwPZq0YE
QExP7nZg4tUSeoFYmPaFLYiYJHnJFfqHG4uRizR+bvKawjqFjYJh6FW+npWI67Z8
UNJe2jVqqNZIQ5yQYddDS3IremHDSkNSyqvn1TlAWTMDyir4nEet97WJ3DTljYxL
s4650uwIWDI1nHZK6KGZ+vD1ldquaWf/QyZ+GbYg01vTo5CgsGpJsjOs0ss1+1d8
nQanlVrNCBx9MYovQxrnLyurwpuYPX2MD3v9fe06+tmStEXMnt0HP1xe2vVtaQZU
cukLs/xP0rSXuQC6zFUlnm0/tzYNcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIh4
K6SBAqnTeY9VA88wBPTjspxHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yODAyOTYzQ0VGRjUxMUVFQUQzNUU1QjY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt9CMA0GCSqGSIb3DQEB
CwUAA4IBAQDHmEQdifBZuZhpcYoDN+nuEcTOWrAVplUPwhP/zKpvfGkD21iTSlRi
HfCTF3/s3rGnPGQW/08PUngVjXvUoio7ceXXoHrm+LOaWMZNTYdRbM2+39V+UJ+g
VCGrtMLHou8FcLv01Y0624T+skTd4P3LIAnjPgmJeXk+C+l9MUykqUokJqpS7qIf
1lOdJCQYuUJSfXHfvMUtkrXzYN7os7TLymVX+gVdGTPn/U3Z8Zo2shAsbkFLChYk
gGF0YBbPAJeLqpezsDsFQgBUO1vQiDKvnDJhyuTiaUEnEdxJYNDJ2+gpsyZ5asEG
Oe1VixGelQdMC7HXTdEGCzGQ9GSBIgH5
-----END CERTIFICATE-----
Generated at Fri May 3 01:29:50 2024 by rpki-client on console-fra.rpki-client.org