Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B6F396EA4BE11EF896C5483762E951A.roa
File: 7B6F396EA4BE11EF896C5483762E951A.roa (raw, json)
Hash identifier: bg2sZ98c/ZeSvUWWH6XfVT/l7nottk6fMPWJaXaLv2w=
Subject key identifier: FF:F7:CC:95:3C:45:D1:17:53:6F:36:E9:B2:36:79:35:A6:25:24:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B6F396EA4BE11EF896C5483762E951A.roa
Signing time: Sun 17 Nov 2024 08:32:29 +0000
ROA not before: Sun 17 Nov 2024 08:32:26 +0000
ROA not after: Tue 10 Dec 2024 08:32:26 +0000
asID: 397630
IP address blocks: 154.201.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69216 (0x10e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 08:32:26 2024 GMT
Not After : Dec 10 08:32:26 2024 GMT
Subject: CN=6739aa1d-f75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:ef:6d:53:76:ef:4a:1b:66:27:80:c7:7b:
90:f6:5d:44:4d:32:bf:03:4e:33:3e:ad:90:60:52:
d2:c3:45:f1:22:69:8f:c9:17:31:b6:5f:9b:cf:d9:
e2:b5:15:3c:14:d9:f0:1e:7c:57:6c:e8:79:09:bf:
3a:34:c7:3f:83:05:d2:2a:9b:3d:4c:1a:a8:f1:19:
4f:10:94:06:84:f1:18:3a:50:8d:8b:7d:79:d9:f7:
63:b2:28:b1:25:89:ab:c7:4e:ce:90:7c:96:08:cd:
7b:1e:ea:00:3c:99:66:13:5b:db:20:9a:15:23:5d:
7d:c0:53:1d:79:1f:21:59:d5:dc:e9:15:c6:e2:34:
65:da:70:3b:05:fc:27:e2:d2:e3:46:c4:5e:0e:df:
17:a3:a7:62:a4:60:e8:5d:d3:d4:da:dd:f6:3b:57:
b1:52:b8:56:d6:35:da:40:0f:2c:5b:5e:2e:fe:3c:
c9:ca:8e:d1:22:5d:25:ec:72:33:a7:16:c4:e5:23:
93:eb:2b:23:aa:49:50:17:2f:01:39:27:fb:c1:7d:
e5:ff:b7:20:53:5c:96:46:ca:c5:1d:91:c0:c3:cd:
e3:7d:95:ab:ad:61:6a:ac:b7:07:73:4f:00:7f:f0:
ba:22:33:b6:ad:92:ce:28:f2:1e:d0:11:bc:52:db:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:CC:95:3C:45:D1:17:53:6F:36:E9:B2:36:79:35:A6:25:24:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B6F396EA4BE11EF896C5483762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cb:be:75:fd:f3:9c:7c:bc:18:b1:53:a5:6c:b7:34:7b:db:
8a:fa:2e:84:b0:18:28:21:58:43:85:e3:ca:d4:35:f4:3f:b8:
d4:eb:04:3c:1e:12:e5:28:61:49:6d:4e:96:55:1e:b0:15:cb:
0c:31:55:2e:51:02:38:05:1c:78:43:9d:6f:61:4a:44:81:ad:
2b:4c:6d:db:12:bd:c3:7b:38:e4:2d:9e:90:e2:77:43:9a:85:
2f:02:04:fc:3d:14:f2:43:08:c2:4b:e7:51:70:65:f6:a7:e1:
2d:a0:12:7f:b5:a1:4a:60:d0:94:cf:5a:9a:a2:17:92:6b:df:
b9:c7:0d:c4:4b:b5:12:e4:01:06:b0:68:64:78:fe:ff:54:33:
f5:2a:ed:17:53:f6:df:0f:45:63:d3:88:a0:24:f6:57:6f:1f:
8f:bb:b2:95:ce:73:0b:f8:b2:f2:d8:4f:55:aa:32:d3:33:ff:
d1:d9:8d:d9:8b:30:a8:3e:d4:8e:2f:57:dd:64:ef:74:d7:3b:
24:49:93:ba:a3:20:7f:25:58:f3:c2:e2:a5:6d:fb:c8:41:50:
a9:0c:b1:56:66:2d:36:a5:04:32:da:4d:66:f8:5e:57:40:d9:
31:ad:71:91:24:9e:ca:51:09:5b:fb:3c:fb:f5:ee:9b:a7:e8:
46:01:bd:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ5gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MDgzMjI2WhcNMjQxMjEwMDgzMjI2WjAYMRYw
FAYDVQQDEw02NzM5YWExZC1mNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvxjvbVN270obZieAx3uQ9l1ETTK/A04zPq2QYFLSw0XxImmPyRcxtl+b
z9nitRU8FNnwHnxXbOh5Cb86NMc/gwXSKps9TBqo8RlPEJQGhPEYOlCNi3152fdj
siixJYmrx07OkHyWCM17HuoAPJlmE1vbIJoVI119wFMdeR8hWdXc6RXG4jRl2nA7
Bfwn4tLjRsReDt8Xo6dipGDoXdPU2t32O1exUrhW1jXaQA8sW14u/jzJyo7RIl0l
7HIzpxbE5SOT6ysjqklQFy8BOSf7wX3l/7cgU1yWRsrFHZHAw83jfZWrrWFqrLcH
c08Af/C6IjO2rZLOKPIe0BG8Utvz4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP/3
zJU8RdEXU2826bI2eTWmJSRpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QjZGMzk2RUE0QkUxMUVGODk2QzU0ODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmskjMA0GCSqGSIb3DQEB
CwUAA4IBAQC3y751/fOcfLwYsVOlbLc0e9uK+i6EsBgoIVhDhePK1DX0P7jU6wQ8
HhLlKGFJbU6WVR6wFcsMMVUuUQI4BRx4Q51vYUpEga0rTG3bEr3DezjkLZ6Q4ndD
moUvAgT8PRTyQwjCS+dRcGX2p+EtoBJ/taFKYNCUz1qaoheSa9+5xw3ES7US5AEG
sGhkeP7/VDP1Ku0XU/bfD0Vj04igJPZXbx+Pu7KVznML+LLy2E9VqjLTM//R2Y3Z
izCoPtSOL1fdZO901zskSZO6oyB/JVjzwuKlbfvIQVCpDLFWZi02pQQy2k1m+F5X
QNkxrXGRJJ7KUQlb+zz79e6bp+hGAb1o
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:19 2024 by rpki-client on console-ams.rpki-client.org