Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519E4C76A45811EF92C5F776762E951A.roa
File: 519E4C76A45811EF92C5F776762E951A.roa (raw, json)
Hash identifier: 7LMHclP51FmoJe3/BrFILg1JDzvzWJc5oTAQwa4w9t0=
Subject key identifier: 0B:4E:F5:79:2A:69:21:A2:DA:14:A2:22:8E:99:E9:89:7E:C9:4F:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519E4C76A45811EF92C5F776762E951A.roa
Signing time: Sat 16 Nov 2024 20:21:11 +0000
ROA not before: Sat 16 Nov 2024 20:21:07 +0000
ROA not after: Wed 27 Nov 2024 20:21:07 +0000
asID: 204721
IP address blocks: 154.221.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69191 (0x10e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 20:21:07 2024 GMT
Not After : Nov 27 20:21:07 2024 GMT
Subject: CN=6738feb6-ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:fd:cb:8a:33:50:d6:ce:0c:20:7c:e3:d3:
b8:35:f1:51:20:41:ca:0b:a6:ec:75:45:74:bd:a6:
3f:d6:30:05:c0:4a:b9:3f:95:87:ef:fb:db:ab:3c:
8f:d6:2c:f0:92:b8:2f:cd:8a:d6:12:e7:75:ce:8e:
c1:07:8f:0b:41:0f:d0:16:e9:7a:46:90:40:3b:a5:
05:b8:3d:8d:42:2b:01:2d:1a:fb:03:5c:2a:5b:17:
a3:0a:b5:a6:57:47:d4:c0:ee:ea:fa:a5:ed:98:c3:
12:72:90:1f:c6:d4:8a:6f:e4:ef:8f:21:ef:4a:7b:
36:91:7d:7c:09:53:b1:81:29:7d:63:27:ba:75:6d:
af:96:a1:09:6c:f0:82:50:ac:59:e6:a7:46:3b:dc:
0a:27:92:1e:67:35:e7:42:e0:5f:97:d2:6a:6e:2f:
21:42:fc:97:29:c6:7d:70:56:fe:7a:72:eb:a5:3f:
56:f7:87:e7:cd:a5:0e:f6:37:e4:2f:51:5a:0e:3a:
2c:fd:5a:8a:a6:69:95:5c:a9:38:78:41:4f:3c:b8:
63:34:3f:47:86:b0:a6:60:67:70:0f:af:d4:01:f1:
82:ad:02:0f:07:ba:06:32:a8:f7:40:61:42:36:d8:
27:58:07:b9:a3:9f:40:1c:28:b2:9c:7a:a4:ed:79:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:F5:79:2A:69:21:A2:DA:14:A2:22:8E:99:E9:89:7E:C9:4F:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/519E4C76A45811EF92C5F776762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.2.0/23
Signature Algorithm: sha256WithRSAEncryption
89:e1:8a:fd:d1:76:6e:4b:da:a9:78:ae:c2:6e:84:f8:20:a2:
19:5a:07:8a:85:32:ee:8b:c2:79:20:df:c7:42:5e:0c:4f:39:
49:92:20:e4:8a:8e:24:62:24:9d:ce:a6:9f:5f:7e:06:67:6f:
36:c2:f7:a4:c1:b7:15:de:81:de:82:8e:6b:b7:ce:79:7b:66:
1e:ab:f0:45:33:36:e0:51:46:e1:35:82:bc:35:2d:b5:d0:41:
4c:3c:ac:a3:87:76:36:cb:76:67:12:cd:03:3b:a7:14:50:ea:
7a:04:9b:1a:34:66:0b:fc:4c:20:9d:3b:24:8c:b7:1b:94:de:
93:6f:9d:e0:3d:1f:e9:5f:52:96:76:0f:f0:b8:89:77:5c:74:
cd:c0:59:6c:41:41:f8:bb:96:39:d4:4a:f4:40:f0:6d:7f:98:
eb:1a:03:df:e2:b9:0c:86:06:d1:7b:3d:05:27:af:f7:97:6f:
34:ec:0e:97:38:17:c1:65:25:f7:fe:42:d8:5b:43:d2:72:88:
22:87:99:8d:43:91:59:3d:8a:d0:26:19:0a:30:dc:8a:a6:fa:
33:25:31:29:d0:1d:4e:51:a3:f9:3f:cc:0b:6a:2b:57:08:49:
df:48:92:52:f3:69:0b:5a:fe:aa:fa:f2:35:8a:0a:ba:1d:18:
0d:40:3c:20
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ5HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MjAyMTA3WhcNMjQxMTI3MjAyMTA3WjAYMRYw
FAYDVQQDEw02NzM4ZmViNi1jY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAver9y4ozUNbODCB849O4NfFRIEHKC6bsdUV0vaY/1jAFwEq5P5WH7/vb
qzyP1izwkrgvzYrWEud1zo7BB48LQQ/QFul6RpBAO6UFuD2NQisBLRr7A1wqWxej
CrWmV0fUwO7q+qXtmMMScpAfxtSKb+TvjyHvSns2kX18CVOxgSl9Yye6dW2vlqEJ
bPCCUKxZ5qdGO9wKJ5IeZzXnQuBfl9Jqbi8hQvyXKcZ9cFb+enLrpT9W94fnzaUO
9jfkL1FaDjos/VqKpmmVXKk4eEFPPLhjND9HhrCmYGdwD6/UAfGCrQIPB7oGMqj3
QGFCNtgnWAe5o59AHCiynHqk7Xk3tQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAtO
9XkqaSGi2hSiIo6Z6Yl+yU/LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTlFNEM3NkE0NTgxMUVGOTJDNUY3NzY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt0CMA0GCSqGSIb3DQEB
CwUAA4IBAQCJ4Yr90XZuS9qpeK7CboT4IKIZWgeKhTLui8J5IN/HQl4MTzlJkiDk
io4kYiSdzqafX34GZ282wvekwbcV3oHego5rt855e2Yeq/BFMzbgUUbhNYK8NS21
0EFMPKyjh3Y2y3ZnEs0DO6cUUOp6BJsaNGYL/EwgnTskjLcblN6Tb53gPR/pX1KW
dg/wuIl3XHTNwFlsQUH4u5Y51Er0QPBtf5jrGgPf4rkMhgbRez0FJ6/3l2807A6X
OBfBZSX3/kLYW0PScogih5mNQ5FZPYrQJhkKMNyKpvozJTEp0B1OUaP5P8wLaitX
CEnfSJJS82kLWv6q+vI1igq6HRgNQDwg
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:38:11 2024 by rpki-client on console-fra.rpki-client.org