Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FB39F9EA9C311EFB93B2E8C762E951A.roa
File: 5FB39F9EA9C311EFB93B2E8C762E951A.roa (raw, json)
Hash identifier: JEj/WMeXfnyuDCxjE7yDBs93RZZzedxUkL2ky/cEDYU=
Subject key identifier: 0D:58:B4:12:27:F3:54:B1:4A:57:E2:10:5B:0E:F3:36:86:6C:9B:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FB39F9EA9C311EFB93B2E8C762E951A.roa
Signing time: Sat 23 Nov 2024 17:50:06 +0000
ROA not before: Sat 23 Nov 2024 17:50:02 +0000
ROA not after: Mon 09 Dec 2024 17:50:02 +0000
asID: 5065
IP address blocks: 154.206.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70092 (0x111cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:50:02 2024 GMT
Not After : Dec 9 17:50:02 2024 GMT
Subject: CN=674215ce-6df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:03:c6:3b:6e:9a:a8:b9:ce:63:47:58:14:
31:e9:37:94:88:20:11:77:ce:73:00:6b:5e:0f:bc:
7a:0c:cd:a5:6c:0f:a4:39:7c:8e:d9:7b:97:30:68:
2d:5d:21:d4:87:cc:65:d0:a3:d9:c6:b7:65:29:98:
9f:6c:3d:de:a6:78:14:a6:4c:c0:60:83:fb:88:0a:
90:f4:5b:8f:db:7f:25:10:e9:a9:0b:51:76:bb:05:
78:aa:de:16:aa:5b:fa:11:70:dc:f5:0c:b7:1b:52:
03:a1:2a:96:77:b8:15:29:a4:65:f4:9b:06:76:2b:
ac:21:1a:cf:e1:b0:06:d0:2b:83:b5:07:ac:b9:50:
bc:a6:85:5c:c6:4c:08:f3:30:48:c2:76:b8:ca:cc:
82:e9:29:6a:55:a7:eb:79:99:f5:c2:e7:3b:30:46:
e1:9d:78:ba:09:56:5b:50:62:b3:71:9b:c1:80:a2:
66:a8:cf:82:18:bf:92:12:95:54:02:5e:ec:17:bc:
e8:b9:bc:c5:14:15:26:03:f5:dc:1b:a7:1f:aa:fc:
06:be:01:5e:99:09:70:ae:f6:f3:b3:a9:eb:5c:81:
5b:5f:cd:99:9d:1e:3f:1c:64:a1:46:d9:98:0b:23:
fd:fd:18:f3:8b:f3:5b:ed:f3:4a:96:80:12:b2:1f:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:B4:12:27:F3:54:B1:4A:57:E2:10:5B:0E:F3:36:86:6C:9B:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FB39F9EA9C311EFB93B2E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c7:df:97:a5:62:03:15:5d:70:eb:a2:56:79:21:27:20:52:
c3:57:98:f4:97:80:25:52:e1:c3:1d:a1:98:ee:5c:65:53:a7:
75:8e:c7:5c:bd:e5:e6:68:4c:2d:be:a5:07:66:b7:31:f3:3b:
20:7b:05:60:fb:db:a1:c1:85:3f:3b:4b:0b:a7:f0:cc:b7:4b:
b5:2a:71:63:81:8f:10:6d:bb:4e:01:dd:9d:0c:d2:ca:57:c0:
35:bc:86:3c:40:35:e9:ff:07:cf:bd:ee:d0:d6:0f:e4:5f:f6:
1f:dc:4a:18:5f:ef:a9:63:52:97:3e:7d:fa:f4:64:c8:f4:c6:
fc:eb:59:a7:53:98:3f:e3:c6:5a:09:16:16:91:2e:b8:bb:5f:
b6:4b:15:c3:d5:e6:8d:ab:21:a9:d4:75:26:0e:00:a6:a7:c2:
5a:a0:9d:70:74:7a:df:ce:8f:ec:f2:83:01:49:16:30:eb:95:
6d:26:06:94:3b:af:27:fc:73:7e:56:ea:e7:40:13:db:18:d2:
fd:eb:9d:1f:6a:54:b9:1c:bd:57:7b:f6:a7:66:9e:a9:0c:66:
48:bd:c0:76:73:42:b8:1c:bc:77:f8:6d:c9:fd:86:8c:76:b0:
d7:f7:73:5a:97:29:64:cf:07:23:69:75:b4:c8:39:ee:e1:7e:
30:68:be:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARHMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTc1MDAyWhcNMjQxMjA5MTc1MDAyWjAYMRYw
FAYDVQQDEw02NzQyMTVjZS02ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1I8Dxjtumqi5zmNHWBQx6TeUiCARd85zAGteD7x6DM2lbA+kOXyO2XuX
MGgtXSHUh8xl0KPZxrdlKZifbD3epngUpkzAYIP7iAqQ9FuP238lEOmpC1F2uwV4
qt4Wqlv6EXDc9Qy3G1IDoSqWd7gVKaRl9JsGdiusIRrP4bAG0CuDtQesuVC8poVc
xkwI8zBIwna4ysyC6SlqVafreZn1wuc7MEbhnXi6CVZbUGKzcZvBgKJmqM+CGL+S
EpVUAl7sF7zoubzFFBUmA/XcG6cfqvwGvgFemQlwrvbzs6nrXIFbX82ZnR4/HGSh
RtmYCyP9/Rjzi/Nb7fNKloASsh+IqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA1Y
tBIn81SxSlfiEFsO8zaGbJstMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RkIzOUY5RUE5QzMxMUVGQjkzQjJFOEM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4kMA0GCSqGSIb3DQEB
CwUAA4IBAQBex9+XpWIDFV1w66JWeSEnIFLDV5j0l4AlUuHDHaGY7lxlU6d1jsdc
veXmaEwtvqUHZrcx8zsgewVg+9uhwYU/O0sLp/DMt0u1KnFjgY8QbbtOAd2dDNLK
V8A1vIY8QDXp/wfPve7Q1g/kX/Yf3EoYX++pY1KXPn369GTI9Mb861mnU5g/48Za
CRYWkS64u1+2SxXD1eaNqyGp1HUmDgCmp8JaoJ1wdHrfzo/s8oMBSRYw65VtJgaU
O68n/HN+VurnQBPbGNL9650falS5HL1Xe/anZp6pDGZIvcB2c0K4HLx3+G3J/YaM
drDX93NalylkzwcjaXW0yDnu4X4waL5s
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:32 2024 by rpki-client on console-fra.rpki-client.org