Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B3766F0B66811EE9C1749AF775412E6.roa
File: 2B3766F0B66811EE9C1749AF775412E6.roa (raw, json)
Hash identifier: Z6ostdvMCaRbv6efJrIvyp6neC6YQYePgXOeet97ICs=
Subject key identifier: A4:68:9E:A8:14:6A:2D:57:1D:D3:27:D2:20:A2:24:09:56:60:F6:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 77FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B3766F0B66811EE9C1749AF775412E6.roa
Signing time: Fri 19 Jan 2024 01:15:01 +0000
ROA not before: Fri 19 Jan 2024 01:14:58 +0000
ROA not after: Tue 12 Nov 2024 01:14:58 +0000
asID: 141167
IP address blocks: 154.212.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30714 (0x77fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 19 01:14:58 2024 GMT
Not After : Nov 12 01:14:58 2024 GMT
Subject: CN=65a9cd15-765f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:0c:7b:c1:69:53:b2:aa:98:fd:8a:fe:86:
6f:f0:bb:66:cb:b3:db:e9:7d:25:ec:f8:ea:d7:a1:
b2:01:93:ae:78:83:a2:4e:f1:04:42:0d:5d:ed:a6:
32:57:70:36:a2:95:bb:3f:fe:18:0f:a2:e0:59:5d:
34:20:da:2b:19:b6:16:69:80:c6:dc:1b:a3:54:38:
a3:85:3b:8b:a4:a7:a0:0d:cc:ae:fa:9d:a7:08:4d:
4c:4f:27:70:81:41:10:70:e3:cd:9e:f8:d0:22:58:
75:a7:5b:15:73:83:e6:6d:45:92:57:cf:e7:25:44:
9a:2f:71:3b:01:25:28:2f:05:11:3c:10:ae:2e:81:
0a:58:9d:6f:0f:41:e9:43:ee:72:7a:f0:98:f1:75:
d8:18:79:68:32:50:ec:7a:94:aa:d4:ea:2a:be:fc:
9b:84:eb:53:c7:41:05:24:91:28:24:8d:7e:54:89:
f6:97:e9:5d:d4:5f:ac:56:9a:b1:cf:5d:11:25:83:
71:9f:72:8c:af:86:d9:00:f3:04:67:9e:13:3b:fa:
5a:dc:50:21:15:9b:d5:5a:bc:c5:34:b3:41:a7:23:
a4:9d:73:05:3c:b5:5f:c9:e4:8e:d1:37:72:65:16:
8b:3c:73:d2:f3:8d:21:af:2e:e1:5d:3b:eb:22:2f:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:68:9E:A8:14:6A:2D:57:1D:D3:27:D2:20:A2:24:09:56:60:F6:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B3766F0B66811EE9C1749AF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f2:bb:3f:25:a7:9e:e4:32:dc:23:c7:00:9e:13:c4:ea:41:
92:11:d5:ce:6c:dd:88:de:19:83:ae:e7:a6:59:6a:54:3c:91:
01:c9:96:46:cd:37:4b:c3:b6:27:61:d2:32:a5:64:6b:91:ca:
f8:00:30:f1:3e:4d:cd:ee:b5:61:80:cd:ff:86:34:ae:8e:a2:
69:5a:5c:f6:f0:ea:5c:28:f9:0f:8d:40:a3:86:10:4e:34:2a:
b3:cc:f6:ad:de:6e:e2:f2:a5:09:63:44:f0:f8:55:1e:88:f4:
c3:ab:42:ab:7a:88:8a:35:ff:b2:bb:84:f1:be:5d:46:21:d9:
09:ae:4c:d0:8a:2c:59:2a:e0:39:4e:23:58:27:13:fd:9a:cb:
7a:f9:7a:da:a1:47:7a:61:05:e4:ae:6e:70:19:93:84:e2:ef:
12:41:e3:88:21:91:c8:37:4b:c2:9c:c3:f9:32:d6:2f:51:dd:
ca:5f:26:ac:3e:f6:4e:6a:07:6d:1e:c1:53:7c:a6:d1:02:9a:
98:79:50:65:8e:93:d9:83:fe:b9:3f:42:8c:f5:29:99:bc:78:
62:80:33:6f:20:d8:32:9a:a4:92:dd:9f:95:62:97:5e:30:1f:
5f:d6:f4:3e:6a:22:ad:0e:b9:08:90:34:78:a5:1a:3f:d4:e5:
cd:67:4e:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICd/owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTkwMTE0NThaFw0yNDExMTIwMTE0NThaMBgxFjAU
BgNVBAMTDTY1YTljZDE1LTc2NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1BQx7wWlTsqqY/Yr+hm/wu2bLs9vpfSXs+OrXobIBk654g6JO8QRCDV3t
pjJXcDailbs//hgPouBZXTQg2isZthZpgMbcG6NUOKOFO4ukp6ANzK76nacITUxP
J3CBQRBw482e+NAiWHWnWxVzg+ZtRZJXz+clRJovcTsBJSgvBRE8EK4ugQpYnW8P
QelD7nJ68JjxddgYeWgyUOx6lKrU6iq+/JuE61PHQQUkkSgkjX5UifaX6V3UX6xW
mrHPXRElg3GfcoyvhtkA8wRnnhM7+lrcUCEVm9VavMU0s0GnI6SdcwU8tV/J5I7R
N3JlFos8c9LzjSGvLuFdO+siL82VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUpGie
qBRqLVcd0yfSIKIkCVZg9lowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzJCMzc2NkYwQjY2ODExRUU5QzE3NDlBRjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa1I0wDQYJKoZIhvcNAQEL
BQADggEBADbyuz8lp57kMtwjxwCeE8TqQZIR1c5s3YjeGYOu56ZZalQ8kQHJlkbN
N0vDtidh0jKlZGuRyvgAMPE+Tc3utWGAzf+GNK6OomlaXPbw6lwo+Q+NQKOGEE40
KrPM9q3ebuLypQljRPD4VR6I9MOrQqt6iIo1/7K7hPG+XUYh2QmuTNCKLFkq4DlO
I1gnE/2ay3r5etqhR3phBeSubnAZk4Ti7xJB44ghkcg3S8Kcw/ky1i9R3cpfJqw+
9k5qB20ewVN8ptECmph5UGWOk9mD/rk/Qoz1KZm8eGKAM28g2DKapJLdn5Vil14w
H1/W9D5qIq0OuQiQNHilGj/U5c1nTi0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org