Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47363648800B11EF93F0DD7C762E951A.roa
File: 47363648800B11EF93F0DD7C762E951A.roa (raw, json)
Hash identifier: F9Ansm+ftCZmMqtQA5eFhOXrJTPEXIurfFrg0flNWSk=
Subject key identifier: 89:5A:32:CA:9C:24:8A:68:44:35:F1:6B:AE:D3:3F:8D:5A:0E:DF:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F6B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47363648800B11EF93F0DD7C762E951A.roa
Signing time: Tue 01 Oct 2024 15:39:00 +0000
ROA not before: Tue 01 Oct 2024 15:38:56 +0000
ROA not after: Tue 03 Dec 2024 15:38:56 +0000
asID: 200373
IP address blocks: 154.214.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63153 (0xf6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 1 15:38:56 2024 GMT
Not After : Dec 3 15:38:56 2024 GMT
Subject: CN=66fc1794-e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:19:04:c9:8d:f3:ef:80:1b:53:bc:d7:01:
a7:b2:e5:c8:db:68:61:f4:ec:f9:9a:e5:51:5d:4e:
d3:b5:af:ac:06:21:3d:02:8c:c3:5b:fd:b3:77:ac:
56:fd:e1:85:53:d2:1e:d9:48:45:68:3a:00:23:6f:
12:8d:0d:be:91:73:31:f2:97:e3:ee:59:7b:cc:c1:
34:49:95:02:15:e7:c5:fd:4a:66:61:ed:32:f9:2b:
57:41:50:13:0b:b6:6a:36:4e:fb:8c:e7:7d:ed:80:
1c:c2:a8:d6:0d:19:cc:28:8d:4b:b9:a1:72:eb:6b:
e4:30:1d:2f:45:88:70:fd:84:8f:47:46:a6:5e:fd:
5a:c3:c6:e9:1b:bf:03:23:78:df:ce:1f:14:0c:12:
fb:e8:61:58:22:22:90:f5:38:46:bf:86:9d:cc:33:
08:78:d4:a9:94:92:dc:28:0e:18:52:1f:0a:d8:4c:
d9:5e:06:87:55:73:05:a3:9e:fd:4f:31:3c:00:0c:
48:cc:23:7a:ac:dd:6f:c1:c8:28:e6:b4:d9:eb:0c:
3c:63:de:44:fc:07:52:b4:25:1d:a4:f5:15:b0:ec:
4a:6d:b8:39:18:ee:7b:86:dc:4f:3f:b4:aa:f1:dc:
8c:4f:d2:54:c3:6c:cc:b2:35:24:bd:ab:fe:3f:ab:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:32:CA:9C:24:8A:68:44:35:F1:6B:AE:D3:3F:8D:5A:0E:DF:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47363648800B11EF93F0DD7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:86:61:71:23:00:0f:c8:63:5f:b5:4d:6e:80:80:07:1f:be:
53:40:da:b9:3a:09:45:92:a8:3b:5f:ae:c0:ee:8d:98:f9:36:
32:0a:3b:ba:5c:08:2c:08:fa:91:34:66:91:56:40:24:d8:64:
b6:c3:0c:5b:8d:ac:27:9f:52:6a:21:5c:fc:c3:ea:3f:34:71:
54:2a:e7:c5:d7:5b:97:3f:6b:e9:dd:e2:7b:88:6b:f8:c0:c1:
33:6d:93:68:eb:70:24:34:3f:6a:32:ab:63:eb:ff:65:77:52:
2e:04:17:67:41:0a:f2:82:39:dc:c4:56:61:4a:19:9a:2f:a7:
9e:af:16:cf:02:56:e4:62:76:ee:a2:29:3b:81:4f:f0:0f:f1:
41:96:5a:da:4c:28:ec:12:18:07:cd:9f:29:18:b8:af:92:26:
ae:0e:ae:91:9c:e7:73:0a:f9:6d:71:ef:8e:ec:93:98:9d:5b:
b6:d0:7b:0b:46:02:ca:bf:7e:09:37:d9:11:ea:a1:b1:6c:64:
76:99:dd:87:d0:31:8d:2f:43:dc:37:16:16:26:f0:f2:86:df:
8c:57:1b:d3:e0:20:c2:1f:94:4d:4c:a9:48:78:62:a6:3d:59:
38:5f:ee:3d:0e:73:51:44:6d:5d:70:53:2f:15:3c:4b:a5:0d:
49:e1:47:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPaxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDAxMTUzODU2WhcNMjQxMjAzMTUzODU2WjAYMRYw
FAYDVQQDEw02NmZjMTc5NC1lNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApiEZBMmN8++AG1O81wGnsuXI22hh9Oz5muVRXU7Tta+sBiE9AozDW/2z
d6xW/eGFU9Ie2UhFaDoAI28SjQ2+kXMx8pfj7ll7zME0SZUCFefF/UpmYe0y+StX
QVATC7ZqNk77jOd97YAcwqjWDRnMKI1LuaFy62vkMB0vRYhw/YSPR0amXv1aw8bp
G78DI3jfzh8UDBL76GFYIiKQ9ThGv4adzDMIeNSplJLcKA4YUh8K2EzZXgaHVXMF
o579TzE8AAxIzCN6rN1vwcgo5rTZ6ww8Y95E/AdStCUdpPUVsOxKbbg5GO57htxP
P7Sq8dyMT9JUw2zMsjUkvav+P6vmcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIla
MsqcJIpoRDXxa67TP41aDt/zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NzM2MzY0ODgwMEIxMUVGOTNGMEREN0M3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtYBMA0GCSqGSIb3DQEB
CwUAA4IBAQBohmFxIwAPyGNftU1ugIAHH75TQNq5OglFkqg7X67A7o2Y+TYyCju6
XAgsCPqRNGaRVkAk2GS2wwxbjawnn1JqIVz8w+o/NHFUKufF11uXP2vp3eJ7iGv4
wMEzbZNo63AkND9qMqtj6/9ld1IuBBdnQQrygjncxFZhShmaL6eerxbPAlbkYnbu
oik7gU/wD/FBllraTCjsEhgHzZ8pGLivkiauDq6RnOdzCvltce+O7JOYnVu20HsL
RgLKv34JN9kR6qGxbGR2md2H0DGNL0PcNxYWJvDyht+MVxvT4CDCH5RNTKlIeGKm
PVk4X+49DnNRRG1dcFMvFTxLpQ1J4UdP
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org