Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2488B63DCA11EFB9F05952762E951A.roa
File: 5D2488B63DCA11EFB9F05952762E951A.roa (raw, json)
Hash identifier: /iQH8u9iSeShm4rT5UeqVRyx8cQYrbApZVOEJH7K+KQ=
Subject key identifier: 99:51:F5:36:96:1A:21:E1:49:A5:8A:55:49:65:58:EE:37:C9:AD:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CF7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2488B63DCA11EFB9F05952762E951A.roa
Signing time: Tue 09 Jul 2024 08:08:03 +0000
ROA not before: Tue 09 Jul 2024 08:07:59 +0000
ROA not after: Tue 20 May 2025 08:07:59 +0000
asID: 23764
IP address blocks: 154.85.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53118 (0xcf7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 08:07:59 2024 GMT
Not After : May 20 08:07:59 2025 GMT
Subject: CN=668cefe3-098d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:fb:23:b4:25:5d:ba:e2:47:bd:52:13:81:
e6:6a:b4:9e:06:eb:14:8c:4d:de:85:3b:c4:21:08:
06:bb:4a:51:2f:17:8c:36:4a:5c:e4:ce:fe:c9:52:
f8:70:71:60:63:c8:39:d4:0a:5d:87:41:2a:fa:1c:
bc:79:b0:1f:de:36:3e:4e:d4:f7:62:0d:a4:e0:13:
b2:af:a0:0f:71:d6:6e:65:2a:0e:04:62:78:3c:e5:
58:0b:52:91:aa:af:99:38:5f:07:0b:54:43:b6:12:
d2:ef:53:10:23:12:b1:a4:18:4c:75:58:b5:df:f8:
71:57:fa:65:ef:33:0e:67:96:01:37:58:69:f7:cc:
41:92:07:65:7a:cd:32:f9:2e:e9:f7:39:1d:6f:0f:
7d:5b:77:87:e5:34:69:24:a7:c8:c2:87:a5:81:eb:
7d:bd:fa:4b:ae:8e:47:de:2f:6c:9d:f5:e6:75:8c:
f7:63:40:ce:0b:85:fd:fe:61:36:c0:e6:fc:84:c6:
bb:25:1c:9c:87:06:96:4a:14:01:31:f5:e6:c0:41:
92:09:4e:62:e9:d8:71:ac:89:a5:44:2b:f2:fa:b1:
2a:99:65:87:f4:52:13:4f:23:fd:df:c6:c5:fd:21:
c8:9a:ca:bd:6f:e3:bb:c0:be:a8:c8:4a:a1:c1:f5:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:F5:36:96:1A:21:E1:49:A5:8A:55:49:65:58:EE:37:C9:AD:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2488B63DCA11EFB9F05952762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a2:4f:5d:eb:45:ce:a7:04:17:f6:94:b4:09:a7:ae:df:c6:
37:9a:7c:80:fa:fe:97:b4:08:64:b6:0f:6f:0d:e9:26:fd:be:
55:44:9b:3e:f2:06:af:c8:ff:7a:8d:4d:99:90:dc:44:6f:ad:
58:e3:28:0e:4a:05:62:7d:10:61:45:9f:d4:a6:48:0c:f8:2d:
2a:bd:b5:82:66:c2:8d:ba:a7:d1:da:bb:0b:79:bc:32:8f:8d:
e3:70:bd:55:11:7e:5f:49:9e:98:7e:83:24:b8:31:0a:91:07:
18:1f:3a:bf:15:4d:77:d8:ae:2f:16:aa:13:f2:57:0d:05:9c:
c1:5a:4a:3a:1b:cb:97:f7:6d:a2:ca:52:a5:1b:af:4f:79:4d:
b4:f8:63:33:b5:9a:d8:11:69:92:fc:de:60:25:23:e3:5d:a7:
15:71:17:5e:4f:5e:2f:83:49:28:83:fc:fa:fb:5a:f3:60:5a:
b0:70:ca:c5:2f:9d:47:87:07:84:44:f5:82:68:ad:b0:85:07:
50:30:82:0b:e3:2a:4c:26:e4:b0:5c:ff:b2:ca:24:ab:a0:56:
c4:76:6e:74:65:23:33:4e:a6:d7:b5:54:70:cb:9f:74:5b:94:
53:1a:89:d3:1f:5a:04:24:c0:74:7d:53:6a:22:43:1a:49:72:
6c:77:65:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAM9+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzA5MDgwNzU5WhcNMjUwNTIwMDgwNzU5WjAYMRYw
FAYDVQQDEw02NjhjZWZlMy0wOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2cD7I7QlXbriR71SE4HmarSeBusUjE3ehTvEIQgGu0pRLxeMNkpc5M7+
yVL4cHFgY8g51Apdh0Eq+hy8ebAf3jY+TtT3Yg2k4BOyr6APcdZuZSoOBGJ4POVY
C1KRqq+ZOF8HC1RDthLS71MQIxKxpBhMdVi13/hxV/pl7zMOZ5YBN1hp98xBkgdl
es0y+S7p9zkdbw99W3eH5TRpJKfIwoelget9vfpLro5H3i9snfXmdYz3Y0DOC4X9
/mE2wOb8hMa7JRychwaWShQBMfXmwEGSCU5i6dhxrImlRCvy+rEqmWWH9FITTyP9
38bF/SHImsq9b+O7wL6oyEqhwfUo0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJlR
9TaWGiHhSaWKVUllWO43ya2wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RDI0ODhCNjNEQ0ExMUVGQjlGMDU5NTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlUOMA0GCSqGSIb3DQEB
CwUAA4IBAQBqok9d60XOpwQX9pS0Caeu38Y3mnyA+v6XtAhktg9vDekm/b5VRJs+
8gavyP96jU2ZkNxEb61Y4ygOSgVifRBhRZ/UpkgM+C0qvbWCZsKNuqfR2rsLebwy
j43jcL1VEX5fSZ6YfoMkuDEKkQcYHzq/FU132K4vFqoT8lcNBZzBWko6G8uX922i
ylKlG69PeU20+GMztZrYEWmS/N5gJSPjXacVcRdeT14vg0kog/z6+1rzYFqwcMrF
L51HhweERPWCaK2whQdQMIIL4ypMJuSwXP+yyiSroFbEdm50ZSMzTqbXtVRwy590
W5RTGonTH1oEJMB0fVNqIkMaSXJsd2WK
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org