Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80CEBC1E09B911EE9D120A7E4AD9E6FC.roa
File: 80CEBC1E09B911EE9D120A7E4AD9E6FC.roa (raw, json)
Hash identifier: +RX3avG1q8p1uyXDsT1QeSqImLFb2cW5BslUnf5J4a8=
Subject key identifier: 96:87:3C:A1:D6:93:0B:5F:3D:AD:EE:52:F7:E1:84:FB:2F:3D:9A:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2B7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80CEBC1E09B911EE9D120A7E4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:11:23 +0000
ROA not before: Tue 13 Jun 2023 07:11:19 +0000
ROA not after: Sat 15 Jun 2024 07:11:19 +0000
asID: 134687
IP address blocks: 154.197.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11131 (0x2b7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 13 07:11:19 2023 GMT
Not After : Jun 15 07:11:19 2024 GMT
Subject: CN=6488169b-8b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:96:f9:d4:c2:70:34:14:7a:67:8a:74:aa:
0e:95:60:ba:4f:f1:6c:55:4c:2a:7e:7e:32:ea:55:
b7:15:95:0a:07:2b:df:05:84:77:a1:da:7f:d7:03:
a8:92:ae:45:bb:3b:9a:04:4c:c3:f8:f6:20:49:b8:
6b:68:8f:c8:74:81:c2:00:6d:ff:af:76:b9:3d:84:
99:6e:c8:71:e4:0b:b7:fa:ce:16:32:aa:26:6e:9c:
69:34:c5:eb:ce:15:69:ae:08:2b:4f:36:7b:55:1c:
cd:f7:14:23:bd:49:2f:fe:6e:31:e2:3e:9b:b2:1a:
4c:5c:c6:64:72:b6:69:08:04:f9:5c:6f:7a:1f:44:
f6:93:d8:07:11:b3:b0:34:cd:75:98:ee:c3:9e:39:
5b:61:20:2b:03:25:e5:db:96:2d:42:78:3a:3c:09:
43:c2:07:be:46:09:b4:5a:fa:7f:6d:95:79:5e:71:
e2:6f:40:8b:4f:be:7e:dd:b7:9c:91:b0:a8:23:40:
bf:be:ae:0f:05:f6:f6:da:43:ad:40:a9:81:4b:38:
1f:51:c3:83:71:a1:4a:98:75:76:35:b6:53:48:53:
72:48:f1:4c:bb:44:e3:46:03:07:99:74:ac:2c:44:
b3:70:f7:bc:7f:21:af:dd:3d:d1:f3:a4:6b:34:81:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:3C:A1:D6:93:0B:5F:3D:AD:EE:52:F7:E1:84:FB:2F:3D:9A:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80CEBC1E09B911EE9D120A7E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.37.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:ca:e6:2f:a3:13:44:cb:d9:76:dd:14:b8:0e:b7:1d:dc:6e:
86:f6:9f:f4:3c:c9:17:b5:e9:eb:5f:59:23:f5:00:84:b7:68:
93:05:c9:17:72:75:14:81:e6:46:ed:96:e0:ae:84:de:ce:46:
fa:30:d8:06:ce:57:f6:e3:58:73:bd:ec:55:61:cf:fd:bd:27:
e8:c4:86:09:0b:0f:16:32:30:71:68:33:9e:6c:28:ff:1a:97:
94:9b:b1:ce:6b:0b:f6:28:f4:dc:22:af:44:d8:1b:95:fa:8e:
e9:90:e0:dc:39:6a:c1:de:4a:3b:23:7a:6d:74:f6:bb:32:8d:
9e:83:8e:b9:7f:54:46:12:11:1c:8f:35:63:30:45:4b:98:95:
8c:a0:13:11:fc:5b:54:22:b3:13:8e:47:11:8c:4f:48:bd:f8:
6e:a0:24:c1:c4:68:cd:90:3d:02:ff:d6:39:b8:86:7b:d9:e5:
30:1e:f3:60:80:1c:21:c5:6e:98:86:1d:78:52:26:36:d2:37:
6a:a9:0c:52:2d:77:55:6b:35:26:db:b3:df:26:ee:f9:d7:cf:
35:58:5b:2e:93:f6:34:e2:77:47:08:cf:e9:05:1b:00:b6:0d:
b0:ab:9e:a4:07:f5:1f:be:fa:65:65:07:9f:f1:ed:68:46:72:
98:b8:20:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICK3swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MTMwNzExMTlaFw0yNDA2MTUwNzExMTlaMBgxFjAU
BgNVBAMTDTY0ODgxNjliLThiODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKQJb51MJwNBR6Z4p0qg6VYLpP8WxVTCp+fjLqVbcVlQoHK98FhHeh2n/X
A6iSrkW7O5oETMP49iBJuGtoj8h0gcIAbf+vdrk9hJluyHHkC7f6zhYyqiZunGk0
xevOFWmuCCtPNntVHM33FCO9SS/+bjHiPpuyGkxcxmRytmkIBPlcb3ofRPaT2AcR
s7A0zXWY7sOeOVthICsDJeXbli1CeDo8CUPCB75GCbRa+n9tlXleceJvQItPvn7d
t5yRsKgjQL++rg8F9vbaQ61AqYFLOB9Rw4NxoUqYdXY1tlNIU3JI8Uy7RONGAweZ
dKwsRLNw97x/Ia/dPdHzpGs0gQZvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUloc8
odaTC189re5S9+GE+y89mlMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzgwQ0VCQzFFMDlCOTExRUU5RDEyMEE3RTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxSUwDQYJKoZIhvcNAQEL
BQADggEBANXK5i+jE0TL2XbdFLgOtx3cbob2n/Q8yRe16etfWSP1AIS3aJMFyRdy
dRSB5kbtluCuhN7ORvow2AbOV/bjWHO97FVhz/29J+jEhgkLDxYyMHFoM55sKP8a
l5Sbsc5rC/Yo9Nwir0TYG5X6jumQ4Nw5asHeSjsjem109rsyjZ6Djrl/VEYSERyP
NWMwRUuYlYygExH8W1QisxOORxGMT0i9+G6gJMHEaM2QPQL/1jm4hnvZ5TAe82CA
HCHFbpiGHXhSJjbSN2qpDFItd1VrNSbbs98m7vnXzzVYWy6T9jTid0cIz+kFGwC2
DbCrnqQH9R+++mVlB5/x7WhGcpi4INI=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org