Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D0D1DE7E3711EFA7DD8286762E951A.roa
File: 50D0D1DE7E3711EFA7DD8286762E951A.roa (raw, json)
Hash identifier: sJjf1W9lCH8rDgD84VBScDX0s+hA47iSMVv7aQQ0Res=
Subject key identifier: 6E:11:9F:F5:DA:10:D5:05:B5:60:4B:E2:49:E3:2D:5C:7C:6E:E1:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F46E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D0D1DE7E3711EFA7DD8286762E951A.roa
Signing time: Sun 29 Sep 2024 07:49:12 +0000
ROA not before: Sun 29 Sep 2024 07:49:08 +0000
ROA not after: Mon 30 Dec 2024 07:49:08 +0000
asID: 17561
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62574 (0xf46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 29 07:49:08 2024 GMT
Not After : Dec 30 07:49:08 2024 GMT
Subject: CN=66f90677-8b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:e0:db:b8:8b:cb:b6:eb:bc:1f:2e:28:20:
03:d9:67:7d:38:78:3a:a7:7b:1f:fa:6a:75:db:ae:
59:d3:95:3a:f0:53:3f:1e:de:a1:f9:35:e8:08:d7:
f7:b6:86:eb:68:ee:87:8e:ba:82:43:59:3c:77:b6:
9c:19:8a:b1:4f:99:b3:86:6c:ed:0f:6a:a8:3a:c5:
02:b6:a9:02:6e:46:7e:be:7e:72:b0:7d:7f:0b:b7:
bc:fd:d3:78:96:41:0e:71:1e:cc:e8:dd:8c:86:42:
71:19:92:61:ab:89:5d:9f:1d:00:de:78:43:de:22:
85:8c:cb:33:cd:98:04:52:66:98:1a:40:c1:bc:ce:
3c:d2:a0:ec:24:7c:d8:88:f4:41:fe:29:08:f5:3f:
9a:5b:83:12:26:70:37:79:f6:7e:d2:77:9f:0f:31:
2a:d0:28:85:e9:c7:b3:f9:4e:99:70:1d:38:22:2a:
98:0e:55:a7:4d:eb:f8:46:2c:7a:1e:93:6b:3a:e1:
44:da:51:90:5c:f2:7e:12:70:c2:ee:51:28:58:96:
8a:8d:a1:b7:4d:98:e1:0e:a8:43:8a:de:c7:17:c2:
09:3b:4a:6b:aa:ab:9a:9d:cb:6c:b4:48:1a:ce:fc:
6c:84:96:b2:15:72:a9:4b:eb:e0:5b:27:3c:bf:f4:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:11:9F:F5:DA:10:D5:05:B5:60:4B:E2:49:E3:2D:5C:7C:6E:E1:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50D0D1DE7E3711EFA7DD8286762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
14:95:63:ef:f4:f8:37:82:02:cd:07:fc:f5:66:f0:9f:80:ec:
ea:c1:11:c0:5c:b7:7c:82:dd:8c:6f:fb:48:34:3e:83:20:34:
7f:06:9e:dc:b7:8a:97:a5:0b:4f:4d:79:f9:d9:e8:48:7d:a4:
49:39:d6:1d:17:31:9b:a1:61:8e:67:9c:d8:3f:38:74:28:00:
40:08:fc:07:23:41:90:e0:1a:a8:a5:1b:57:89:55:ee:f5:7a:
8c:d0:db:0c:df:82:84:6b:26:28:9e:cd:d0:9c:61:18:da:13:
b4:ba:a8:ca:2c:38:85:23:00:3d:79:95:5d:78:2a:7d:a9:a9:
e3:86:ad:9f:04:68:7d:97:53:79:4c:03:78:e3:56:76:8d:6e:
f0:aa:84:18:fb:f1:34:8b:1e:3a:dd:9b:97:60:93:56:98:b3:
c2:f3:c2:64:cd:0a:4e:ad:30:7c:ce:9d:73:cc:22:78:e4:69:
72:52:90:0a:e3:59:a4:2b:d4:e1:fd:50:39:45:2f:84:49:e0:
61:11:50:0b:84:f0:65:31:35:29:57:94:1b:7c:68:de:ff:8a:
3b:60:1c:26:a1:14:a8:e0:b0:11:20:ca:0a:6c:e3:01:b0:c0:
b5:ac:9e:bc:93:e1:a7:d3:9d:df:28:4c:a1:61:90:90:e4:eb:
9b:34:06:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPRuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTI5MDc0OTA4WhcNMjQxMjMwMDc0OTA4WjAYMRYw
FAYDVQQDEw02NmY5MDY3Ny04YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9Pg27iLy7brvB8uKCAD2Wd9OHg6p3sf+mp1265Z05U68FM/Ht6h+TXo
CNf3tobraO6HjrqCQ1k8d7acGYqxT5mzhmztD2qoOsUCtqkCbkZ+vn5ysH1/C7e8
/dN4lkEOcR7M6N2MhkJxGZJhq4ldnx0A3nhD3iKFjMszzZgEUmaYGkDBvM480qDs
JHzYiPRB/ikI9T+aW4MSJnA3efZ+0nefDzEq0CiF6cez+U6ZcB04IiqYDlWnTev4
Rix6HpNrOuFE2lGQXPJ+EnDC7lEoWJaKjaG3TZjhDqhDit7HF8IJO0prqquancts
tEgazvxshJayFXKpS+vgWyc8v/TQKQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG4R
n/XaENUFtWBL4knjLVx8buGwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MEQwRDFERTdFMzcxMUVGQTdERDgyODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMdMA0GCSqGSIb3DQEB
CwUAA4IBAQAUlWPv9Pg3ggLNB/z1ZvCfgOzqwRHAXLd8gt2Mb/tIND6DIDR/Bp7c
t4qXpQtPTXn52ehIfaRJOdYdFzGboWGOZ5zYPzh0KABACPwHI0GQ4BqopRtXiVXu
9XqM0NsM34KEayYons3QnGEY2hO0uqjKLDiFIwA9eZVdeCp9qanjhq2fBGh9l1N5
TAN441Z2jW7wqoQY+/E0ix463ZuXYJNWmLPC88JkzQpOrTB8zp1zzCJ45GlyUpAK
41mkK9Th/VA5RS+ESeBhEVALhPBlMTUpV5QbfGje/4o7YBwmoRSo4LARIMoKbOMB
sMC1rJ68k+Gn053fKEyhYZCQ5OubNAZA
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org