Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE347B0A8E711EFBBAC31A5762E951A.roa
File: 5CE347B0A8E711EFBBAC31A5762E951A.roa (raw, json)
Hash identifier: XFcwfngaY/9ny96aEMnmgahlSz/rn/Kko6dK0d0jxIo=
Subject key identifier: AC:BA:3A:B4:A9:E8:17:09:C0:9F:35:29:A0:25:F8:7F:A2:91:99:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE347B0A8E711EFBBAC31A5762E951A.roa
Signing time: Fri 22 Nov 2024 15:35:12 +0000
ROA not before: Fri 22 Nov 2024 15:35:09 +0000
ROA not after: Tue 03 Dec 2024 15:35:09 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69855 (0x110df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:35:09 2024 GMT
Not After : Dec 3 15:35:09 2024 GMT
Subject: CN=6740a4b0-4ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:75:d2:98:cb:0e:5d:17:ef:c5:c2:05:d4:
a2:8d:ce:54:27:15:8f:e8:ed:a1:af:de:3b:df:ca:
f4:27:e9:df:ee:a0:b6:a3:df:c5:80:29:29:bd:98:
81:1b:02:bb:58:fe:76:19:6e:f1:6b:f5:65:ab:c2:
43:ad:a0:4b:b9:28:ea:67:a4:80:8e:d1:e9:bd:aa:
90:62:1c:e6:3c:56:b9:03:40:1c:e4:07:e5:d7:77:
5b:36:3d:e5:bb:23:47:78:05:a1:56:b1:3c:6e:a2:
ce:64:fb:e2:e6:83:7e:13:23:5d:57:4d:12:42:de:
2a:bc:b9:f7:83:bb:55:9a:b6:36:00:6a:ee:4b:8f:
03:88:d1:df:f6:96:bc:9e:2c:6f:3b:05:ec:72:15:
fc:5f:e5:38:75:4b:bc:77:70:36:8c:f5:9c:99:e1:
b3:77:94:70:24:19:7d:13:e6:ad:7b:e8:93:4f:ea:
9b:e0:1c:bc:2d:04:b8:b3:ca:de:ac:27:57:05:e2:
87:c3:d5:41:14:7f:b7:6b:92:ef:f7:8c:3d:b5:a4:
85:8c:aa:8e:01:c1:5d:a8:47:93:61:45:7d:58:76:
02:5a:f0:90:ce:6b:be:5d:29:39:45:a4:fc:0c:02:
29:5e:b0:71:bd:5f:22:f3:04:5b:37:d9:60:04:5c:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BA:3A:B4:A9:E8:17:09:C0:9F:35:29:A0:25:F8:7F:A2:91:99:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CE347B0A8E711EFBBAC31A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:98:b3:b5:71:28:5e:30:b9:92:41:b1:5f:aa:7a:26:71:
90:6d:d5:01:db:23:35:19:03:d3:71:4c:19:a1:ad:5b:ee:c7:
00:0e:62:7a:df:c6:10:24:ed:84:9d:13:db:3d:b2:0e:b7:63:
d2:a2:87:d2:e1:6f:05:43:3e:e8:4e:8f:51:0b:5d:30:c5:3c:
56:e2:fe:48:6a:d5:cc:40:7f:04:15:d0:89:90:17:e4:22:47:
fe:f4:2f:a7:38:c8:66:63:c9:64:f8:26:cf:59:c0:22:13:1c:
cb:67:d4:25:6e:e8:73:34:e7:36:3c:57:8f:b5:71:d3:8e:d5:
7e:ab:63:62:e6:c9:cb:6b:fa:79:51:6d:cb:8a:fa:f7:ca:e7:
74:79:a5:cb:76:42:68:69:d7:d8:cb:5c:57:cd:7a:f3:f7:02:
67:27:33:83:5c:a1:0c:99:eb:3a:37:b3:cf:58:af:4a:ef:41:
80:89:68:4f:3e:a4:0e:76:84:6a:c6:1f:af:68:66:32:59:e3:
30:10:51:ca:10:2c:ee:04:e0:db:43:60:5c:de:a1:b7:45:86:
1a:41:b7:12:ce:fd:2f:a3:c6:77:9a:7a:f5:94:4d:59:43:0c:
34:7e:12:5c:3b:82:3f:b6:1c:9b:3b:46:5d:d4:87:63:2a:a9:
6d:a2:92:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARDfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTUzNTA5WhcNMjQxMjAzMTUzNTA5WjAYMRYw
FAYDVQQDEw02NzQwYTRiMC00ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoTR10pjLDl0X78XCBdSijc5UJxWP6O2hr94738r0J+nf7qC2o9/FgCkp
vZiBGwK7WP52GW7xa/Vlq8JDraBLuSjqZ6SAjtHpvaqQYhzmPFa5A0Ac5Afl13db
Nj3luyNHeAWhVrE8bqLOZPvi5oN+EyNdV00SQt4qvLn3g7tVmrY2AGruS48DiNHf
9pa8nixvOwXschX8X+U4dUu8d3A2jPWcmeGzd5RwJBl9E+ate+iTT+qb4By8LQS4
s8rerCdXBeKHw9VBFH+3a5Lv94w9taSFjKqOAcFdqEeTYUV9WHYCWvCQzmu+XSk5
RaT8DAIpXrBxvV8i8wRbN9lgBFzlCwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKy6
OrSp6BcJwJ81KaAl+H+ikZndMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Q0UzNDdCMEE4RTcxMUVGQkJBQzMxQTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJwMA0GCSqGSIb3DQEB
CwUAA4IBAQANO5iztXEoXjC5kkGxX6p6JnGQbdUB2yM1GQPTcUwZoa1b7scADmJ6
38YQJO2EnRPbPbIOt2PSoofS4W8FQz7oTo9RC10wxTxW4v5IatXMQH8EFdCJkBfk
Ikf+9C+nOMhmY8lk+CbPWcAiExzLZ9QlbuhzNOc2PFePtXHTjtV+q2Ni5snLa/p5
UW3Livr3yud0eaXLdkJoadfYy1xXzXrz9wJnJzODXKEMmes6N7PPWK9K70GAiWhP
PqQOdoRqxh+vaGYyWeMwEFHKECzuBODbQ2Bc3qG3RYYaQbcSzv0vo8Z3mnr1lE1Z
Qww0fhJcO4I/thybO0Zd1IdjKqltopIB
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:12 2024 by rpki-client on console-ams.rpki-client.org