Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A7748E8A8EF11EF86219056762E951A.roa
File: 5A7748E8A8EF11EF86219056762E951A.roa (raw, json)
Hash identifier: I8X0/mPw2bB7tVTBwNe/KpEanXc4SqQmRhZ7szirFcM=
Subject key identifier: D6:86:28:D3:1E:68:A3:E4:DB:73:85:67:8B:FD:B8:63:58:91:46:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01113F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A7748E8A8EF11EF86219056762E951A.roa
Signing time: Fri 22 Nov 2024 16:32:24 +0000
ROA not before: Fri 22 Nov 2024 16:32:20 +0000
ROA not after: Tue 03 Dec 2024 16:32:20 +0000
asID: 62240
IP address blocks: 154.195.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69951 (0x1113f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:32:20 2024 GMT
Not After : Dec 3 16:32:20 2024 GMT
Subject: CN=6740b218-8fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:42:30:a7:97:b7:4b:cc:a3:91:10:e2:76:
b7:56:b6:70:9b:78:68:76:e2:96:bf:60:b3:b5:ba:
cc:fd:be:68:1c:f4:ca:18:1d:15:57:80:06:de:8e:
ce:c6:96:95:03:45:fe:f6:36:af:fe:75:97:7d:26:
19:03:0b:5d:be:e6:95:57:0d:6a:26:b0:3b:4c:66:
53:ad:0c:98:34:8e:b7:36:74:31:c4:34:f2:ff:c7:
ff:85:59:4d:22:77:95:f2:4b:8c:66:bb:78:b4:ac:
00:58:0b:ba:15:20:66:c7:64:a1:70:67:76:bd:b7:
7a:ce:99:1d:6b:94:7a:8a:5d:07:1a:ab:b5:19:58:
91:c1:8a:8e:43:86:c8:b2:c1:a1:27:ce:e2:e0:72:
8d:d3:da:2f:37:76:f6:27:b3:bd:a3:c0:f9:bc:d7:
d2:51:27:db:d5:fb:1e:6b:f9:fd:e4:33:31:0f:78:
32:7a:e4:ab:c0:9d:a1:1b:ce:c1:34:6c:e3:2a:62:
37:c1:c0:67:dd:5a:fa:f1:18:2a:13:83:ab:83:1f:
ee:19:2b:36:20:cf:72:3d:46:e8:01:e8:24:e0:1d:
b2:cd:fb:01:9e:b0:3d:bc:0d:ee:b7:0a:41:3d:a4:
bf:06:c2:b9:07:b7:85:d8:5f:b7:34:5e:06:c4:6d:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:28:D3:1E:68:A3:E4:DB:73:85:67:8B:FD:B8:63:58:91:46:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A7748E8A8EF11EF86219056762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.154.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f0:89:89:c8:e1:0d:71:b3:c3:e2:64:f2:e7:c8:61:aa:42:
f7:12:7b:fe:23:80:11:18:de:ef:17:4e:9e:40:19:68:e4:ac:
85:18:9d:65:47:29:7d:7b:e5:e1:74:60:9b:d3:da:aa:9c:5a:
9b:20:bf:f7:4f:5d:23:3b:d9:f9:1c:a8:00:46:ac:10:d9:59:
54:02:33:22:8c:7d:8e:da:9d:76:51:7e:c9:86:0f:17:cb:15:
ad:aa:44:51:33:e0:b2:60:56:6a:13:5a:27:27:ef:a5:33:28:
9e:2c:c3:94:d2:3b:b2:52:6a:35:07:2b:a1:6e:20:3f:a2:b6:
08:36:ef:49:6a:7b:16:69:15:f3:ed:b6:db:9a:12:7d:33:70:
ca:11:bb:6b:ae:6d:21:55:08:03:70:d0:57:5c:1e:28:47:ed:
35:8e:60:5a:88:46:4c:80:e0:13:76:5c:c2:a8:ca:23:c5:9c:
6b:bd:95:19:2e:2c:8f:d2:f2:7f:a2:e0:04:82:42:1d:ba:c8:
9c:c7:65:86:6f:7f:f5:13:07:4a:f2:39:8e:2e:f1:68:a6:79:
25:86:62:c7:92:52:ee:c6:53:42:09:19:e0:d2:a2:63:e3:71:
45:71:a8:70:de:6b:0b:18:99:01:f4:2d:5c:81:94:0b:9f:44:
f9:11:da:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARE/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTYzMjIwWhcNMjQxMjAzMTYzMjIwWjAYMRYw
FAYDVQQDEw02NzQwYjIxOC04ZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzLdCMKeXt0vMo5EQ4na3VrZwm3hoduKWv2CztbrM/b5oHPTKGB0VV4AG
3o7OxpaVA0X+9jav/nWXfSYZAwtdvuaVVw1qJrA7TGZTrQyYNI63NnQxxDTy/8f/
hVlNIneV8kuMZrt4tKwAWAu6FSBmx2ShcGd2vbd6zpkda5R6il0HGqu1GViRwYqO
Q4bIssGhJ87i4HKN09ovN3b2J7O9o8D5vNfSUSfb1fsea/n95DMxD3gyeuSrwJ2h
G87BNGzjKmI3wcBn3Vr68RgqE4Orgx/uGSs2IM9yPUboAegk4B2yzfsBnrA9vA3u
twpBPaS/BsK5B7eF2F+3NF4GxG19VQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNaG
KNMeaKPk23OFZ4v9uGNYkUaNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QTc3NDhFOEE4RUYxMUVGODYyMTkwNTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOaMA0GCSqGSIb3DQEB
CwUAA4IBAQAz8ImJyOENcbPD4mTy58hhqkL3Env+I4ARGN7vF06eQBlo5KyFGJ1l
Ryl9e+XhdGCb09qqnFqbIL/3T10jO9n5HKgARqwQ2VlUAjMijH2O2p12UX7Jhg8X
yxWtqkRRM+CyYFZqE1onJ++lMyieLMOU0juyUmo1ByuhbiA/orYINu9JansWaRXz
7bbbmhJ9M3DKEbtrrm0hVQgDcNBXXB4oR+01jmBaiEZMgOATdlzCqMojxZxrvZUZ
LiyP0vJ/ouAEgkIdusicx2WGb3/1EwdK8jmOLvFopnklhmLHklLuxlNCCRng0qJj
43FFcahw3msLGJkB9C1cgZQLn0T5Edrz
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:12 2024 by rpki-client on console-ams.rpki-client.org