Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72CA1098E77E11EE95274179775412E6.roa
File: 72CA1098E77E11EE95274179775412E6.roa (raw, json)
Hash identifier: 9AjRsf3mmxYkXdmAw5oMK+GgDsQhzflp01pXcsoIyrE=
Subject key identifier: 07:FB:E0:4C:D6:80:8D:DF:BE:47:53:17:34:89:DA:2A:D6:5E:F4:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A555
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72CA1098E77E11EE95274179775412E6.roa
Signing time: Thu 21 Mar 2024 12:27:57 +0000
ROA not before: Thu 21 Mar 2024 12:27:54 +0000
ROA not after: Tue 23 Apr 2024 12:27:54 +0000
asID: 44559
IP address blocks: 154.210.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42325 (0xa555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:27:54 2024 GMT
Not After : Apr 23 12:27:54 2024 GMT
Subject: CN=65fc27cd-a07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:17:24:10:b1:9c:4c:e2:2d:59:4d:86:ba:
26:3d:5d:4f:e0:aa:c3:18:6e:4a:61:cd:c8:c3:8c:
cc:71:fb:c6:7f:c1:dd:42:99:b4:0f:cd:77:d6:ad:
6a:08:d5:47:13:20:6f:82:14:03:62:df:ac:72:92:
91:ea:dc:9c:e5:b5:a1:c8:2d:5a:71:16:ec:a6:fc:
47:23:2b:78:66:3e:c6:9e:4b:16:3c:50:38:0a:ce:
65:5f:2c:aa:93:48:3d:85:ad:76:95:21:b6:60:7d:
b2:c5:ea:89:8c:9f:06:45:8b:6a:61:fb:63:61:ca:
51:9f:67:28:73:b5:37:1d:28:29:21:e2:85:70:ca:
f7:8d:ba:ed:d1:1d:c0:f4:59:88:c6:ac:1a:7c:f7:
da:7c:73:34:dc:35:c1:2b:4f:b2:fa:cd:3a:5e:14:
1c:75:6a:1b:11:56:d9:b6:48:e3:5c:dc:b9:50:e8:
0a:be:b9:11:9d:ac:db:ae:a0:3f:40:1d:77:f0:e6:
0c:ed:a4:45:28:23:e0:b8:1c:02:f9:7a:27:1d:96:
11:b0:47:f8:2d:7f:b1:09:89:0b:0f:92:c6:cc:a2:
4c:30:f7:ae:c9:72:f1:c5:6a:f2:42:a4:d0:58:8c:
e4:aa:0a:a1:02:8d:8e:e7:9b:a7:ef:b6:4f:b4:74:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:E0:4C:D6:80:8D:DF:BE:47:53:17:34:89:DA:2A:D6:5E:F4:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/72CA1098E77E11EE95274179775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.114.0/24
Signature Algorithm: sha256WithRSAEncryption
70:c4:87:84:20:3e:7f:71:c6:2d:f9:cb:ac:77:fa:bc:1a:e8:
59:f6:d9:93:55:f0:e8:a7:ce:08:52:cb:f1:51:05:15:b4:17:
e8:41:0d:0d:59:8f:af:d0:1d:8b:0d:ae:d5:4a:43:f7:bd:e0:
95:b9:e3:e5:25:4f:43:96:dd:7d:2a:e0:3c:42:7a:df:7f:70:
54:e3:55:2b:a4:c0:1f:ea:58:24:41:16:fc:50:14:1c:e4:d8:
16:69:78:45:b8:ec:cb:94:26:2b:dc:62:a0:97:05:66:82:73:
6c:88:3c:7b:01:9b:29:5d:35:ef:4f:76:33:fa:e3:e8:b2:d7:
6e:12:b5:fa:f4:d2:24:7a:c1:0d:f0:8a:15:e8:99:1b:16:42:
89:4c:0f:0b:71:0a:28:dc:43:9e:c6:bd:9c:ab:35:04:ae:ec:
3f:6b:12:ba:65:cb:ff:be:a5:da:b3:78:73:df:e3:27:e9:0d:
47:12:88:33:3d:80:3e:da:ef:fb:0e:bd:03:81:eb:94:5f:a9:
6c:6e:80:38:bf:8c:2a:84:81:b6:c1:5d:69:cb:d1:26:d3:bc:
e5:73:cb:84:f8:bb:f5:33:f9:41:9f:10:e7:02:57:03:22:a2:
55:45:8b:b1:3e:c9:05:6f:57:8c:b8:f5:79:1d:46:04:14:4e:
65:4e:44:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKVVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMTIyNzU0WhcNMjQwNDIzMTIyNzU0WjAYMRYw
FAYDVQQDEw02NWZjMjdjZC1hMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlZwXJBCxnEziLVlNhromPV1P4KrDGG5KYc3Iw4zMcfvGf8HdQpm0D813
1q1qCNVHEyBvghQDYt+scpKR6tyc5bWhyC1acRbspvxHIyt4Zj7GnksWPFA4Cs5l
Xyyqk0g9ha12lSG2YH2yxeqJjJ8GRYtqYftjYcpRn2coc7U3HSgpIeKFcMr3jbrt
0R3A9FmIxqwafPfafHM03DXBK0+y+s06XhQcdWobEVbZtkjjXNy5UOgKvrkRnazb
rqA/QB138OYM7aRFKCPguBwC+XonHZYRsEf4LX+xCYkLD5LGzKJMMPeuyXLxxWry
QqTQWIzkqgqhAo2O55un77ZPtHSvJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAf7
4EzWgI3fvkdTFzSJ2irWXvQfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MkNBMTA5OEU3N0UxMUVFOTUyNzQxNzk3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJyMA0GCSqGSIb3DQEB
CwUAA4IBAQBwxIeEID5/ccYt+cusd/q8GuhZ9tmTVfDop84IUsvxUQUVtBfoQQ0N
WY+v0B2LDa7VSkP3veCVuePlJU9Dlt19KuA8Qnrff3BU41UrpMAf6lgkQRb8UBQc
5NgWaXhFuOzLlCYr3GKglwVmgnNsiDx7AZspXTXvT3Yz+uPostduErX69NIkesEN
8IoV6JkbFkKJTA8LcQoo3EOexr2cqzUEruw/axK6Zcv/vqXas3hz3+Mn6Q1HEogz
PYA+2u/7Dr0DgeuUX6lsboA4v4wqhIG2wV1py9Em07zlc8uE+Lv1M/lBnxDnAlcD
IqJVRYuxPskFb1eMuPV5HUYEFE5lTkSI
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:20 2024 by rpki-client on console-fra.rpki-client.org