Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2746E6A8C011EF9AE433AD762E951A.roa
File: 2E2746E6A8C011EF9AE433AD762E951A.roa (raw, json)
Hash identifier: I0PfkB9j7CRwWFP1wL7ZnkaChLrAXecxFW7OfkEP+A0=
Subject key identifier: 40:D7:A3:02:39:EB:BC:91:A4:C9:30:0D:93:EA:57:1F:88:C5:42:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2746E6A8C011EF9AE433AD762E951A.roa
Signing time: Fri 22 Nov 2024 10:54:43 +0000
ROA not before: Fri 22 Nov 2024 10:54:40 +0000
ROA not after: Sat 30 Nov 2024 10:54:40 +0000
asID: 149014
IP address blocks: 154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69633 (0x11001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 10:54:40 2024 GMT
Not After : Nov 30 10:54:40 2024 GMT
Subject: CN=674062f3-526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:88:7b:e7:7b:12:d7:df:05:d4:de:34:7c:
03:a9:0f:aa:90:c9:4e:c7:e8:34:33:52:b9:37:b0:
36:3f:53:61:34:4f:0c:66:11:50:23:f3:51:4e:7d:
90:9e:d2:cf:ba:7b:dc:8f:4f:92:29:f4:a7:5e:e3:
c5:f0:17:a2:85:0b:3c:37:53:a6:ab:0d:be:12:c9:
94:b0:0e:6e:86:8c:b5:d4:2b:a5:12:a2:b6:85:5f:
f1:9f:c1:8e:5a:e2:b4:bf:f8:2a:ab:b3:60:52:f1:
3b:3d:4c:88:e3:0a:f3:db:7f:cb:8b:13:fd:ed:b3:
96:b1:0f:ad:51:62:95:cd:0b:86:77:db:da:2b:2c:
a0:dc:29:2e:9b:ce:fb:e4:4e:ba:e9:00:52:d6:73:
d3:f5:64:34:db:11:b5:63:a3:69:6f:72:72:90:e9:
97:04:6d:7c:a2:d3:22:11:ac:6c:47:9a:e6:0a:bf:
b6:20:2a:40:31:6e:c9:77:d1:d8:44:81:6c:1c:47:
0b:aa:8f:b2:ad:95:92:fb:70:ff:94:ef:f2:4f:a3:
ba:e8:8b:69:4d:6b:e5:4d:51:18:f4:d1:2c:d5:cf:
2a:33:02:86:73:a6:74:f7:6b:83:a7:e3:a9:5a:17:
9f:1b:06:cf:ff:0a:c2:67:8e:db:e9:3e:ab:e0:99:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:A3:02:39:EB:BC:91:A4:C9:30:0D:93:EA:57:1F:88:C5:42:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E2746E6A8C011EF9AE433AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:21:54:68:ab:3a:e6:00:12:60:f9:c0:9b:36:1b:14:28:3c:
4d:51:2f:70:fe:cf:be:08:97:bb:ea:e7:48:ef:75:ff:c5:da:
a4:6a:c2:80:e9:c7:fe:73:b9:4f:d2:09:c3:ee:2c:a9:40:db:
8c:01:d9:f7:aa:77:8c:53:68:1b:5a:46:56:8e:b2:74:39:53:
33:9d:07:93:e7:00:88:87:4d:65:09:9b:0f:30:c4:2c:dd:f5:
e2:1c:df:89:7b:c9:da:e0:91:b4:ae:29:e7:23:86:1b:18:7b:
34:20:53:a2:16:b2:71:18:81:d1:2e:89:40:29:b4:b6:84:9d:
13:bc:fd:30:a0:36:be:18:86:44:4d:a9:d1:e2:0f:88:97:8b:
b6:65:e8:9b:38:ed:6d:99:c0:aa:5e:a2:cb:46:92:11:6c:91:
ca:de:5c:9d:be:ff:05:a6:9c:9a:d8:2e:14:68:77:8a:09:d9:
89:9d:00:03:c0:81:a7:66:46:24:a8:dd:4f:99:57:ec:9e:59:
c6:7e:01:4e:75:1f:84:ec:3a:6a:94:0e:b0:74:c3:a3:05:26:
df:54:55:4c:b1:b1:08:a6:cf:f0:46:15:4d:da:e4:03:10:8a:
2c:62:d7:3e:b7:3e:ed:4a:1b:d7:ce:61:82:db:97:3e:72:32:
f8:89:21:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARABMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTA1NDQwWhcNMjQxMTMwMTA1NDQwWjAYMRYw
FAYDVQQDEw02NzQwNjJmMy01MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz6yIe+d7EtffBdTeNHwDqQ+qkMlOx+g0M1K5N7A2P1NhNE8MZhFQI/NR
Tn2QntLPunvcj0+SKfSnXuPF8BeihQs8N1Omqw2+EsmUsA5uhoy11CulEqK2hV/x
n8GOWuK0v/gqq7NgUvE7PUyI4wrz23/LixP97bOWsQ+tUWKVzQuGd9vaKyyg3Cku
m8775E666QBS1nPT9WQ02xG1Y6Npb3JykOmXBG18otMiEaxsR5rmCr+2ICpAMW7J
d9HYRIFsHEcLqo+yrZWS+3D/lO/yT6O66ItpTWvlTVEY9NEs1c8qMwKGc6Z092uD
p+OpWhefGwbP/wrCZ47b6T6r4JknfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEDX
owI567yRpMkwDZPqVx+IxUIFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTI3NDZFNkE4QzAxMUVGOUFFNDMzQUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt+8MA0GCSqGSIb3DQEB
CwUAA4IBAQAcIVRoqzrmABJg+cCbNhsUKDxNUS9w/s++CJe76udI73X/xdqkasKA
6cf+c7lP0gnD7iypQNuMAdn3qneMU2gbWkZWjrJ0OVMznQeT5wCIh01lCZsPMMQs
3fXiHN+Je8na4JG0rinnI4YbGHs0IFOiFrJxGIHRLolAKbS2hJ0TvP0woDa+GIZE
TanR4g+Il4u2ZeibOO1tmcCqXqLLRpIRbJHK3lydvv8Fppya2C4UaHeKCdmJnQAD
wIGnZkYkqN1PmVfsnlnGfgFOdR+E7DpqlA6wdMOjBSbfVFVMsbEIps/wRhVN2uQD
EIosYtc+tz7tShvXzmGC25c+cjL4iSHR
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:02 2024 by rpki-client on console-ams.rpki-client.org