Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F162C1E32BA11EFBCBD7FA8762E951A.roa
File: 3F162C1E32BA11EFBCBD7FA8762E951A.roa (raw, json)
Hash identifier: 0iiGTs+JnN/zg+sgXhnB/Ufujxr9B0y34cKT/dCckSs=
Subject key identifier: 15:5C:FE:4F:2C:04:BE:DE:06:4D:AC:3B:26:06:99:19:73:61:33:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C649
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F162C1E32BA11EFBCBD7FA8762E951A.roa
Signing time: Tue 25 Jun 2024 06:14:58 +0000
ROA not before: Tue 25 Jun 2024 06:14:54 +0000
ROA not after: Fri 03 Jan 2025 06:14:54 +0000
asID: 40065
IP address blocks: 154.84.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50761 (0xc649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:14:54 2024 GMT
Not After : Jan 3 06:14:54 2025 GMT
Subject: CN=667a6061-19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:e8:6b:1d:35:4e:bb:5b:59:92:fb:fa:c4:
d9:1f:61:8b:40:13:f9:d6:52:f2:0b:dc:28:b5:20:
5a:4a:0d:ae:f4:f9:ee:30:c7:31:33:02:66:fb:13:
17:75:44:95:b4:93:6e:49:0d:46:d5:53:ed:0b:72:
94:01:14:18:73:d6:2f:09:c3:81:ee:69:c0:63:c9:
a0:6e:20:68:3f:f6:ac:81:a8:55:7e:77:ac:ee:15:
d7:2b:83:27:04:5d:2b:25:e3:37:8b:cd:8b:fd:02:
c3:f1:36:f1:3e:79:69:f1:15:b5:94:f4:18:cc:53:
f0:23:d7:97:96:7e:b1:af:a1:0c:f2:8d:2c:20:2e:
cc:c7:77:33:3d:17:bd:0f:49:ae:b5:9b:85:bf:a9:
ed:19:9b:f7:e1:23:aa:d3:0f:f2:69:f4:90:1b:e8:
76:e0:37:54:9e:a8:40:9a:4b:58:c2:fb:2f:32:86:
f0:27:94:22:c7:32:7b:f9:e9:0e:9b:23:71:5e:f0:
22:1d:91:88:b1:c7:76:80:2d:59:27:1d:e6:65:6e:
f9:87:05:58:e7:dd:b6:2a:14:ae:87:cc:9a:9c:10:
36:fc:9d:01:19:a8:04:f1:ec:57:6b:6e:c5:34:9c:
ca:5e:5c:70:25:51:cb:6a:12:bb:e6:dc:5e:d5:80:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:FE:4F:2C:04:BE:DE:06:4D:AC:3B:26:06:99:19:73:61:33:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F162C1E32BA11EFBCBD7FA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.2.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:53:da:4d:7f:84:f6:5b:a0:b1:92:e1:14:d3:62:fc:28:87:
c4:e3:20:68:0e:3c:73:88:bb:06:33:a5:98:5c:1b:25:a2:62:
c9:9d:a2:2f:44:80:d5:93:cb:52:3b:a3:8a:99:59:71:1e:8f:
67:f7:d4:41:44:2c:0c:d1:31:8e:ee:dd:05:64:b5:a9:d5:67:
1c:d4:e3:c7:76:62:47:95:92:ab:11:15:d2:b5:9d:b3:98:cb:
52:97:af:94:03:d1:2e:a9:0a:d2:80:12:c7:f0:03:1b:c2:c2:
65:a4:f8:2e:2c:8b:8f:28:6a:c4:62:66:5d:b0:34:3b:5f:4f:
db:99:47:b5:48:90:07:33:e8:08:c7:8a:41:25:45:b7:4f:9c:
7f:6f:08:0a:d7:49:d4:0d:b0:05:e7:a6:ef:67:c6:cd:ef:84:
46:f2:2a:33:6e:27:5c:3d:26:92:85:95:79:5d:e2:f0:55:33:
3e:6d:6c:7b:a1:21:4f:83:eb:98:69:bb:79:71:72:6b:ea:76:
9d:5f:80:c4:e4:0d:bf:d1:e1:9f:f1:e7:a4:b3:41:bc:65:dd:
3e:c0:d4:0c:f5:24:61:78:d5:9d:27:13:a1:7c:9b:79:f3:6d:
6d:4e:30:30:c0:b8:b4:64:4d:30:f0:d1:8c:00:41:5c:ce:f0:
15:ba:04:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMZJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI1MDYxNDU0WhcNMjUwMTAzMDYxNDU0WjAYMRYw
FAYDVQQDEw02NjdhNjA2MS0xOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArb7oax01TrtbWZL7+sTZH2GLQBP51lLyC9wotSBaSg2u9PnuMMcxMwJm
+xMXdUSVtJNuSQ1G1VPtC3KUARQYc9YvCcOB7mnAY8mgbiBoP/asgahVfnes7hXX
K4MnBF0rJeM3i82L/QLD8TbxPnlp8RW1lPQYzFPwI9eXln6xr6EM8o0sIC7Mx3cz
PRe9D0mutZuFv6ntGZv34SOq0w/yafSQG+h24DdUnqhAmktYwvsvMobwJ5QixzJ7
+ekOmyNxXvAiHZGIscd2gC1ZJx3mZW75hwVY5922KhSuh8yanBA2/J0BGagE8exX
a27FNJzKXlxwJVHLahK75txe1YDNAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBVc
/k8sBL7eBk2sOyYGmRlzYTOHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRjE2MkMxRTMyQkExMUVGQkNCRDdGQTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlQCMA0GCSqGSIb3DQEB
CwUAA4IBAQDIU9pNf4T2W6CxkuEU02L8KIfE4yBoDjxziLsGM6WYXBslomLJnaIv
RIDVk8tSO6OKmVlxHo9n99RBRCwM0TGO7t0FZLWp1Wcc1OPHdmJHlZKrERXStZ2z
mMtSl6+UA9EuqQrSgBLH8AMbwsJlpPguLIuPKGrEYmZdsDQ7X0/bmUe1SJAHM+gI
x4pBJUW3T5x/bwgK10nUDbAF56bvZ8bN74RG8iozbidcPSaShZV5XeLwVTM+bWx7
oSFPg+uYabt5cXJr6nadX4DE5A2/0eGf8eeks0G8Zd0+wNQM9SRheNWdJxOhfJt5
821tTjAwwLi0ZE0w8NGMAEFczvAVugRw
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:05 2024 by rpki-client on console-ams.rpki-client.org