Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612121CC736711EF92D6E444762E951A.roa
File: 612121CC736711EF92D6E444762E951A.roa (raw, json)
Hash identifier: 3Xr85XlgAclxQzUAtlexwREl8WvAzUoF3obB6WxjJ5A=
Subject key identifier: 08:A1:55:E1:9C:DE:7B:EF:72:7E:BB:9D:07:CD:74:13:67:00:F7:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612121CC736711EF92D6E444762E951A.roa
Signing time: Sun 15 Sep 2024 13:35:32 +0000
ROA not before: Sun 15 Sep 2024 13:35:29 +0000
ROA not after: Sat 30 Nov 2024 13:35:29 +0000
asID: 142403
IP address blocks: 154.94.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61214 (0xef1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:35:29 2024 GMT
Not After : Nov 30 13:35:29 2024 GMT
Subject: CN=66e6e2a4-31df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:e0:d7:e3:cb:c8:1e:80:a8:43:93:af:70:
51:cf:01:42:9a:e8:20:a8:d0:3e:11:92:6d:d5:1f:
f1:8e:17:f0:b1:ba:d5:02:35:6e:71:2f:f8:8f:c8:
5e:7c:95:0b:44:3d:88:92:5e:22:62:dc:cc:64:61:
1f:0b:c2:3f:54:8d:86:da:05:20:38:54:90:09:4a:
23:a1:aa:0b:32:fa:4a:c8:51:f1:b9:6f:e0:32:d4:
e5:3a:76:a4:32:e3:e8:5c:65:7d:3d:97:3b:bf:5e:
5e:bf:c9:2b:89:a7:db:07:3e:af:13:c3:18:59:c8:
61:f6:07:e7:15:5f:93:35:5b:e4:3c:37:c4:ce:a2:
7f:62:f3:5b:0e:5c:3b:72:1d:7f:c3:f4:ee:bb:8f:
00:a4:20:2e:89:a4:5f:4e:9b:10:17:51:2a:24:f2:
64:b4:a4:f1:0f:2c:e5:8c:c8:15:6a:9e:7c:24:70:
89:17:2d:e0:ec:9e:c1:bb:2b:60:8f:21:69:d3:af:
8b:d5:87:bb:8a:00:c0:30:af:59:8f:1a:3e:5e:0b:
7f:f2:41:1b:99:a3:32:24:a8:2d:26:01:52:bc:a9:
93:31:c7:18:97:33:ef:d2:7c:5c:a4:98:52:e3:cc:
b0:91:ed:81:fc:87:90:72:8d:63:ac:8a:6e:af:e3:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:55:E1:9C:DE:7B:EF:72:7E:BB:9D:07:CD:74:13:67:00:F7:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612121CC736711EF92D6E444762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.5.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3b:bf:5d:81:d7:a0:7c:32:4a:6b:4b:d1:dc:5a:69:60:0e:
7d:97:ea:72:fd:53:11:14:85:5d:29:53:ec:18:06:2a:22:cc:
94:c3:23:d4:55:42:77:31:d5:fa:f0:a9:03:54:94:e5:0c:1e:
b0:d4:4f:a1:e3:a8:37:b8:1a:8c:f4:14:b8:a3:7e:44:80:57:
31:fd:eb:4d:9a:07:91:c0:fd:6b:18:4b:07:3a:b6:77:64:c4:
61:d5:2a:06:ca:9c:0c:34:68:56:88:54:c2:89:08:d8:8f:64:
00:95:bc:30:45:8b:39:49:5d:22:d3:0c:f2:2a:b0:e5:a0:af:
79:14:2c:1c:45:eb:fe:45:90:aa:7f:61:c8:f1:56:3d:ec:1b:
d0:f2:a2:e8:12:f8:20:33:79:df:63:a9:02:78:06:ae:0e:4c:
7c:c0:a6:f5:1a:f9:d6:5a:c8:50:eb:dd:35:ea:48:43:d5:50:
ce:2d:9a:b9:0c:10:28:65:08:bb:ab:f7:b8:ce:b7:1c:23:e2:
f4:0b:4b:1c:80:3f:25:69:94:34:a4:05:d6:bd:50:fd:2d:e3:
15:e2:39:68:29:3f:b8:47:dc:db:8e:d8:fc:ec:b0:43:7f:d4:
e7:98:59:5f:ee:4a:21:a5:fb:e9:d6:ca:c9:7e:b8:5d:e3:f6:
c4:51:da:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO8eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE1MTMzNTI5WhcNMjQxMTMwMTMzNTI5WjAYMRYw
FAYDVQQDEw02NmU2ZTJhNC0zMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr1vg1+PLyB6AqEOTr3BRzwFCmuggqNA+EZJt1R/xjhfwsbrVAjVucS/4
j8hefJULRD2Ikl4iYtzMZGEfC8I/VI2G2gUgOFSQCUojoaoLMvpKyFHxuW/gMtTl
OnakMuPoXGV9PZc7v15ev8kriafbBz6vE8MYWchh9gfnFV+TNVvkPDfEzqJ/YvNb
Dlw7ch1/w/Tuu48ApCAuiaRfTpsQF1EqJPJktKTxDyzljMgVap58JHCJFy3g7J7B
uytgjyFp06+L1Ye7igDAMK9Zjxo+Xgt/8kEbmaMyJKgtJgFSvKmTMccYlzPv0nxc
pJhS48ywke2B/IeQco1jrIpur+PNQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAih
VeGc3nvvcn67nQfNdBNnAPfhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTIxMjFDQzczNjcxMUVGOTJENkU0NDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4FMA0GCSqGSIb3DQEB
CwUAA4IBAQBHO79dgdegfDJKa0vR3FppYA59l+py/VMRFIVdKVPsGAYqIsyUwyPU
VUJ3MdX68KkDVJTlDB6w1E+h46g3uBqM9BS4o35EgFcx/etNmgeRwP1rGEsHOrZ3
ZMRh1SoGypwMNGhWiFTCiQjYj2QAlbwwRYs5SV0i0wzyKrDloK95FCwcRev+RZCq
f2HI8VY97BvQ8qLoEvggM3nfY6kCeAauDkx8wKb1GvnWWshQ69016khD1VDOLZq5
DBAoZQi7q/e4zrccI+L0C0scgD8laZQ0pAXWvVD9LeMV4jloKT+4R9zbjtj87LBD
f9TnmFlf7kohpfvp1srJfrhd4/bEUdqs
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org