Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3166620CA32E11EFA41FC1B1762E951A.roa
File: 3166620CA32E11EFA41FC1B1762E951A.roa (raw, json)
Hash identifier: rCoTRYP3/bsXTzFleVNNpf/6o4zhTarp6lMJBRrAyw0=
Subject key identifier: 93:9A:9A:9A:10:33:7D:C7:4A:08:E2:BB:59:5B:D3:C0:3A:FC:0A:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3166620CA32E11EFA41FC1B1762E951A.roa
Signing time: Fri 15 Nov 2024 08:47:06 +0000
ROA not before: Fri 15 Nov 2024 08:47:03 +0000
ROA not after: Fri 20 Dec 2024 08:47:03 +0000
asID: 22724
IP address blocks: 154.89.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68958 (0x10d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 08:47:03 2024 GMT
Not After : Dec 20 08:47:03 2024 GMT
Subject: CN=67370a8a-2e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:79:54:08:ad:e7:21:0e:95:02:fb:d7:23:
c3:ab:99:52:d1:ba:fd:2c:0a:cb:93:ad:89:93:d6:
6c:7b:e0:99:12:05:7e:9e:e2:95:66:d5:cf:e0:8b:
d4:3b:8c:37:3d:69:5f:c9:03:ba:a0:8a:8d:3d:5d:
06:d9:db:90:a0:b2:54:2b:b2:97:54:33:59:bb:b4:
65:93:01:cd:15:57:15:44:03:ca:6c:db:90:4d:81:
da:76:d0:1d:0f:ad:fe:0b:85:4a:61:08:d9:80:90:
ce:98:0f:25:87:8c:e2:88:a9:3f:ce:0e:64:7e:13:
42:60:bd:58:49:bd:ca:ac:60:7a:8d:db:0e:a5:6d:
4a:ce:c6:0f:dd:3a:37:bf:52:5f:11:73:c9:81:7f:
11:6b:28:d5:49:cd:1e:0a:a4:5c:12:ed:1e:ab:ec:
a4:ad:1f:f5:0c:24:4e:b0:ac:e1:16:10:55:f5:fd:
93:4e:e4:ee:9f:48:0b:58:da:15:fb:fb:a2:ea:d5:
80:d8:d1:a8:4c:f9:b0:c7:37:ce:62:f1:42:b8:94:
48:20:4c:9c:9f:f4:e1:68:83:fe:f8:ff:b9:f7:53:
aa:ce:0b:30:ab:ab:81:3f:20:dd:ae:58:03:11:d9:
b7:e0:87:5d:1c:5f:f1:76:b3:fb:94:6b:31:d4:bc:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9A:9A:9A:10:33:7D:C7:4A:08:E2:BB:59:5B:D3:C0:3A:FC:0A:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3166620CA32E11EFA41FC1B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:00:28:ca:63:7e:46:2c:1f:19:6e:2e:db:5a:31:41:82:da:
d9:5b:6a:3e:35:60:61:35:d6:ba:b5:05:a4:66:16:e4:48:2e:
ce:bc:2e:27:e6:03:f4:78:9a:94:49:17:92:c4:23:b2:f1:c4:
34:00:cd:d0:51:88:2e:40:a8:d0:d3:da:0f:6d:e5:44:f7:18:
26:a8:40:aa:4f:a7:f2:9b:d0:08:3a:dc:53:5c:77:b4:86:05:
1c:4c:39:df:89:f6:19:be:82:c6:e8:40:f8:df:ab:f8:62:1c:
11:da:b0:64:4d:f3:3c:00:a4:a9:3a:21:a2:09:d1:37:58:8b:
dc:ac:04:e7:8c:3a:4a:87:61:1d:ad:8f:8a:cd:77:24:d8:aa:
f4:e4:c6:fa:1a:0f:06:6a:2e:57:8c:e0:d0:22:68:ae:40:1c:
22:2d:bd:8c:42:8f:5f:15:b2:da:05:65:64:dc:b2:51:8a:4a:
ab:4a:08:4d:ee:f9:93:eb:1a:d5:71:bc:b8:59:67:89:83:f7:
94:42:cd:dd:55:3c:b9:ff:8e:e2:1a:54:50:6e:3a:11:d8:2d:
fb:2e:e4:fc:c4:60:70:4e:fb:8e:ac:bb:4a:e6:cf:00:16:4e:
8d:65:9a:a6:e3:45:f6:8a:04:42:ac:a1:04:74:ab:55:87:1d:
4e:46:fa:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ1eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE1MDg0NzAzWhcNMjQxMjIwMDg0NzAzWjAYMRYw
FAYDVQQDEw02NzM3MGE4YS0yZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJt5VAit5yEOlQL71yPDq5lS0br9LArLk62Jk9Zse+CZEgV+nuKVZtXP
4IvUO4w3PWlfyQO6oIqNPV0G2duQoLJUK7KXVDNZu7RlkwHNFVcVRAPKbNuQTYHa
dtAdD63+C4VKYQjZgJDOmA8lh4ziiKk/zg5kfhNCYL1YSb3KrGB6jdsOpW1KzsYP
3To3v1JfEXPJgX8RayjVSc0eCqRcEu0eq+ykrR/1DCROsKzhFhBV9f2TTuTun0gL
WNoV+/ui6tWA2NGoTPmwxzfOYvFCuJRIIEycn/ThaIP++P+591Oqzgswq6uBPyDd
rlgDEdm34IddHF/xdrP7lGsx1LxzHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJOa
mpoQM33HSgjiu1lb08A6/AozMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMTY2NjIwQ0EzMkUxMUVGQTQxRkMxQjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlkQMA0GCSqGSIb3DQEB
CwUAA4IBAQBdACjKY35GLB8Zbi7bWjFBgtrZW2o+NWBhNda6tQWkZhbkSC7OvC4n
5gP0eJqUSReSxCOy8cQ0AM3QUYguQKjQ09oPbeVE9xgmqECqT6fym9AIOtxTXHe0
hgUcTDnfifYZvoLG6ED436v4YhwR2rBkTfM8AKSpOiGiCdE3WIvcrATnjDpKh2Ed
rY+KzXck2Kr05Mb6Gg8Gai5XjODQImiuQBwiLb2MQo9fFbLaBWVk3LJRikqrSghN
7vmT6xrVcby4WWeJg/eUQs3dVTy5/47iGlRQbjoR2C37LuT8xGBwTvuOrLtK5s8A
Fk6NZZqm40X2igRCrKEEdKtVhx1ORvp5
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:35 2024 by rpki-client on console-ams.rpki-client.org