Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6624B224FBAD11EEA7E0C82C017001B1.roa
File: 6624B224FBAD11EEA7E0C82C017001B1.roa (raw, json)
Hash identifier: km87Xo974wuM3n3XUHLJrRdfb7X8phaRLwPhxeTd9m0=
Subject key identifier: D2:E8:47:EA:60:04:B5:78:A9:3E:37:02:15:D0:80:21:74:43:40:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6624B224FBAD11EEA7E0C82C017001B1.roa
Signing time: Tue 16 Apr 2024 04:54:26 +0000
ROA not before: Tue 16 Apr 2024 04:54:22 +0000
ROA not after: Thu 30 May 2024 04:54:22 +0000
asID: 63139
IP address blocks: 154.94.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44489 (0xadc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:54:22 2024 GMT
Not After : May 30 04:54:22 2024 GMT
Subject: CN=661e0482-53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:24:46:0e:43:05:db:02:47:63:a7:03:35:
53:41:b0:9d:f5:e8:e2:0c:47:f0:52:21:47:93:c1:
06:8a:72:d9:9b:41:d8:96:e8:80:eb:66:7f:67:75:
ae:0f:46:9e:9e:db:d3:de:33:b6:46:43:12:d5:6d:
8e:5f:d7:ba:84:cc:85:ed:e3:39:69:cc:43:8a:a5:
24:b4:c4:d5:62:d1:51:2f:26:41:83:93:de:cf:4e:
d8:33:48:02:ea:a8:60:ae:4b:37:69:2b:c0:86:09:
42:b7:cc:22:b7:27:4a:34:e3:02:ec:21:74:f0:27:
dd:66:fc:56:32:36:d7:1a:31:0e:9d:ca:f5:1c:d9:
10:cf:ec:0a:f2:07:ff:82:82:42:4f:82:5c:8a:d1:
48:18:4a:b5:2f:5e:c5:06:f8:e2:51:91:6c:fd:0f:
dd:ad:0b:36:47:03:21:03:54:53:4d:0e:08:e4:5a:
57:7e:1c:ed:78:bf:b5:c5:f9:b3:fa:f3:4e:ce:dc:
d5:55:ef:d4:52:10:0d:37:5c:cf:10:6e:02:9c:09:
71:a5:02:ed:6d:a3:26:15:f3:c9:c6:60:7e:a7:93:
e0:76:28:ab:15:f3:0f:48:b0:0c:2c:2f:b9:f4:2d:
df:e1:c8:91:a9:ad:8a:ec:4a:cb:76:ee:23:b8:cb:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E8:47:EA:60:04:B5:78:A9:3E:37:02:15:D0:80:21:74:43:40:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6624B224FBAD11EEA7E0C82C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.99.0/24
Signature Algorithm: sha256WithRSAEncryption
85:dd:09:9e:60:dd:e2:75:15:93:55:86:48:71:49:85:e5:32:
0b:ff:d0:50:87:d8:56:44:7d:2f:38:c1:bb:60:b8:e6:d7:04:
97:af:5b:71:bc:f5:20:56:49:de:c4:1c:7c:7f:81:ac:30:ad:
f0:5c:8a:57:88:f2:58:81:10:43:97:09:22:ff:7c:f0:f8:3e:
9a:8b:df:a9:bd:c8:21:d4:7a:a2:42:2b:b6:fd:18:9e:5c:24:
fb:c0:99:5b:6e:0d:74:6f:f2:c8:0d:8d:67:d1:d9:16:cd:6d:
27:e1:f8:05:82:3b:d9:f6:0d:a7:b9:b6:1c:a9:2a:18:61:b2:
6b:be:50:87:d3:fd:ce:84:78:4f:ca:94:ad:87:b9:9d:20:09:
68:ad:2c:65:14:1d:2d:cc:ec:cd:78:d2:c3:d7:15:c6:f2:8e:
e1:53:22:bd:60:10:b2:c9:63:44:14:b5:c4:4f:67:de:22:a1:
e8:51:a9:df:e0:a2:4f:db:71:d2:ac:1d:23:70:29:fc:69:f3:
08:86:50:70:14:8a:a1:03:6f:4b:ca:d9:bb:5c:3e:44:e1:f8:
d7:6c:31:c3:e7:78:3e:4e:e2:cd:0b:5d:70:1c:4e:fb:e4:93:
7a:1b:50:ec:51:85:d6:da:43:15:25:54:e2:cd:79:34:48:0d:
d2:1f:c6:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK3JMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDQ1NDIyWhcNMjQwNTMwMDQ1NDIyWjAYMRYw
FAYDVQQDEw02NjFlMDQ4Mi01M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw4YkRg5DBdsCR2OnAzVTQbCd9ejiDEfwUiFHk8EGinLZm0HYluiA62Z/
Z3WuD0aentvT3jO2RkMS1W2OX9e6hMyF7eM5acxDiqUktMTVYtFRLyZBg5Pez07Y
M0gC6qhgrks3aSvAhglCt8witydKNOMC7CF08CfdZvxWMjbXGjEOncr1HNkQz+wK
8gf/goJCT4JcitFIGEq1L17FBvjiUZFs/Q/drQs2RwMhA1RTTQ4I5FpXfhzteL+1
xfmz+vNOztzVVe/UUhANN1zPEG4CnAlxpQLtbaMmFfPJxmB+p5PgdiirFfMPSLAM
LC+59C3f4ciRqa2K7ErLdu4juMt5KQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNLo
R+pgBLV4qT43AhXQgCF0Q0AfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NjI0QjIyNEZCQUQxMUVFQTdFMEM4MkMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5jMA0GCSqGSIb3DQEB
CwUAA4IBAQCF3QmeYN3idRWTVYZIcUmF5TIL/9BQh9hWRH0vOMG7YLjm1wSXr1tx
vPUgVknexBx8f4GsMK3wXIpXiPJYgRBDlwki/3zw+D6ai9+pvcgh1HqiQiu2/Rie
XCT7wJlbbg10b/LIDY1n0dkWzW0n4fgFgjvZ9g2nubYcqSoYYbJrvlCH0/3OhHhP
ypSth7mdIAlorSxlFB0tzOzNeNLD1xXG8o7hUyK9YBCyyWNEFLXET2feIqHoUanf
4KJP23HSrB0jcCn8afMIhlBwFIqhA29Lytm7XD5E4fjXbDHD53g+TuLNC11wHE77
5JN6G1DsUYXW2kMVJVTizXk0SA3SH8Z/
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org