Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2A1BE2A71C11EFB8931C5D762E951A.roa
File: 5F2A1BE2A71C11EFB8931C5D762E951A.roa (raw, json)
Hash identifier: VkOjOLURekDN5SgUa+J8pIwZ3Y2Y7Qf7bcuMPCwNhVM=
Subject key identifier: C3:2F:CD:C0:10:24:35:72:B3:4B:E5:DB:C5:7B:77:04:2E:B5:DF:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2A1BE2A71C11EFB8931C5D762E951A.roa
Signing time: Wed 20 Nov 2024 08:49:37 +0000
ROA not before: Wed 20 Nov 2024 08:49:33 +0000
ROA not after: Thu 05 Dec 2024 08:49:33 +0000
asID: 5065
IP address blocks: 154.94.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69433 (0x10f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 08:49:33 2024 GMT
Not After : Dec 5 08:49:33 2024 GMT
Subject: CN=673da2a1-7c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:78:3e:3a:c5:fe:1a:af:61:1d:00:6a:30:
9a:7e:3c:e7:b0:ba:01:63:e7:8a:c4:c8:4e:e9:d6:
0d:90:41:7f:99:f8:92:0a:25:66:9d:2d:fe:c2:82:
29:44:4c:24:24:4a:e5:75:b9:a4:7d:f6:f1:2f:f0:
22:31:82:f7:72:99:b3:0b:8d:80:96:98:e8:b7:00:
1e:f9:bb:45:89:9d:d7:91:07:b2:cc:5d:1f:77:94:
88:24:74:d4:e1:de:84:90:79:2c:50:56:af:b0:c0:
bd:78:22:28:7c:53:76:91:2a:dc:ab:80:14:a1:10:
17:d5:49:9a:ac:25:c4:0e:63:6f:40:be:32:4c:58:
08:02:6f:2e:b1:ec:af:47:c1:d0:c2:a8:e5:33:2d:
b0:b2:6e:22:dd:9f:55:34:b6:9a:23:03:18:db:e5:
b8:10:61:20:f5:10:8c:f7:4b:f6:b1:a4:79:0c:2b:
72:ac:d7:05:ae:8f:3b:82:90:6c:5a:80:2f:71:06:
f1:f4:98:03:16:a9:f3:60:ac:6a:a6:65:fd:2f:a1:
5c:c0:2f:a8:63:93:25:25:8e:2a:10:e4:ee:2b:4e:
be:41:b6:b8:4b:1e:b7:f6:4b:41:6a:83:44:61:ff:
e1:32:f4:7d:9a:30:2c:41:43:6a:45:a1:b3:8a:d7:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:CD:C0:10:24:35:72:B3:4B:E5:DB:C5:7B:77:04:2E:B5:DF:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F2A1BE2A71C11EFB8931C5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c4:dd:87:4d:83:c5:87:0a:ed:13:a3:a0:ba:3f:52:05:28:
c9:f1:c6:5b:21:ee:47:31:49:1f:fe:36:c0:59:d5:47:77:f7:
96:8e:66:a6:83:bf:31:b1:09:4e:ae:13:83:30:56:84:cb:f9:
ac:51:31:f5:8c:7f:93:26:87:e7:d2:c4:e9:da:f1:59:35:78:
37:b7:cf:d6:48:34:57:2f:e1:f0:18:8f:52:e5:3e:93:1e:68:
ee:75:c5:17:0a:ad:7d:89:32:61:d3:44:8f:a7:38:10:99:72:
bc:eb:f6:56:1c:39:c2:77:b3:a3:c1:0d:29:94:ec:30:bb:5b:
4c:fa:fe:92:c9:6f:93:66:7d:ae:57:63:85:63:4e:76:dc:c4:
1a:de:d8:75:11:e4:9d:d0:a7:0b:5e:c6:3c:68:9e:40:03:5a:
a4:d2:2a:ff:2e:4c:e7:3b:6f:f3:59:0b:ad:54:96:f7:0f:cc:
1b:f5:20:b4:4b:42:49:6e:39:14:ec:c1:aa:82:44:b4:f2:3d:
71:61:3a:6b:fb:5c:af:5e:b0:24:3f:68:68:04:1e:1b:4c:7b:
9e:fb:7b:fb:b1:e8:b2:a5:1f:e0:43:4f:a8:24:e1:13:0c:65:
17:1e:70:f5:a7:9b:a1:35:41:31:82:9d:e4:08:07:2e:19:94:
a7:73:51:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ85MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIwMDg0OTMzWhcNMjQxMjA1MDg0OTMzWjAYMRYw
FAYDVQQDEw02NzNkYTJhMS03YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0ZZ4PjrF/hqvYR0AajCafjznsLoBY+eKxMhO6dYNkEF/mfiSCiVmnS3+
woIpREwkJErldbmkffbxL/AiMYL3cpmzC42AlpjotwAe+btFiZ3XkQeyzF0fd5SI
JHTU4d6EkHksUFavsMC9eCIofFN2kSrcq4AUoRAX1UmarCXEDmNvQL4yTFgIAm8u
seyvR8HQwqjlMy2wsm4i3Z9VNLaaIwMY2+W4EGEg9RCM90v2saR5DCtyrNcFro87
gpBsWoAvcQbx9JgDFqnzYKxqpmX9L6FcwC+oY5MlJY4qEOTuK06+Qba4Sx639ktB
aoNEYf/hMvR9mjAsQUNqRaGzitcqPwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMMv
zcAQJDVys0vl28V7dwQutd9mMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjJBMUJFMkE3MUMxMUVGQjg5MzFDNUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4yMA0GCSqGSIb3DQEB
CwUAA4IBAQB8xN2HTYPFhwrtE6Oguj9SBSjJ8cZbIe5HMUkf/jbAWdVHd/eWjmam
g78xsQlOrhODMFaEy/msUTH1jH+TJofn0sTp2vFZNXg3t8/WSDRXL+HwGI9S5T6T
HmjudcUXCq19iTJh00SPpzgQmXK86/ZWHDnCd7OjwQ0plOwwu1tM+v6SyW+TZn2u
V2OFY0523MQa3th1EeSd0KcLXsY8aJ5AA1qk0ir/LkznO2/zWQutVJb3D8wb9SC0
S0JJbjkU7MGqgkS08j1xYTpr+1yvXrAkP2hoBB4bTHue+3v7seiypR/gQ0+oJOET
DGUXHnD1p5uhNUExgp3kCAcuGZSnc1EI
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:34:59 2024 by rpki-client on console-fra.rpki-client.org