Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86479E0A953011EF85C63C51762E951A.roa
File: 86479E0A953011EF85C63C51762E951A.roa (raw, json)
Hash identifier: 9EXWN4Zfbd/etdJOYIC9cxyE9Ss1aEVrw0HL+1z/1iw=
Subject key identifier: 1D:90:3A:76:4F:FA:C8:98:78:5F:C1:78:8D:70:92:E0:3C:27:1F:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86479E0A953011EF85C63C51762E951A.roa
Signing time: Mon 28 Oct 2024 13:28:32 +0000
ROA not before: Mon 28 Oct 2024 13:28:28 +0000
ROA not after: Mon 25 Nov 2024 13:28:28 +0000
asID: 7018
IP address blocks: 154.206.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 13:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66283 (0x102eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:28:28 2024 GMT
Not After : Nov 25 13:28:28 2024 GMT
Subject: CN=671f917f-41d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:f1:f3:e8:e2:99:85:0b:8c:9e:d6:8c:e2:
b3:b0:19:3e:04:cc:a4:57:39:65:47:03:3a:0d:43:
a2:1e:13:ba:b4:39:74:19:52:41:13:bc:16:a5:90:
13:6d:be:4b:f2:2b:52:34:f1:8a:24:00:07:68:64:
72:f7:f6:bb:5c:03:52:ed:c4:9a:bf:ca:df:32:25:
9a:0a:60:bb:07:06:08:f2:a2:a1:41:b2:bd:63:e9:
e8:c2:19:a3:99:fc:83:44:36:a3:a5:a0:ae:61:b0:
31:15:ad:a9:a7:fd:d3:0a:5f:d3:20:4b:ff:a7:7b:
4e:62:31:6b:d9:20:34:a7:76:14:29:f1:90:f2:7e:
fe:e4:21:cb:07:0c:a5:0a:95:af:0e:93:ff:72:65:
af:74:27:b6:43:77:b4:69:d5:db:6d:ad:f1:8b:d2:
b5:c1:3b:4f:5a:f0:c9:33:3b:b1:82:31:f9:a4:51:
db:76:ab:51:40:8d:fe:01:c7:d2:d6:db:c3:63:f7:
51:b2:76:7f:a5:a9:69:43:20:44:bd:af:42:51:3a:
ef:d7:8c:3e:61:a0:a4:b2:e9:60:ae:db:ca:7e:a4:
61:99:bd:cc:d8:0d:66:e2:31:c9:93:cb:65:70:81:
f1:c1:e2:57:b3:73:61:81:d3:9d:76:35:0b:e2:2d:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:90:3A:76:4F:FA:C8:98:78:5F:C1:78:8D:70:92:E0:3C:27:1F:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86479E0A953011EF85C63C51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.48.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:99:cc:07:51:04:d9:87:5b:43:d2:bd:8d:38:4c:0f:14:80:
9f:a7:c4:b3:c2:6b:66:f5:c5:91:b3:90:a1:d4:77:a9:8d:c9:
52:d3:23:eb:f7:6a:bb:e5:a3:75:9c:4b:cb:cf:46:c7:2d:5c:
1a:cd:e6:bf:a5:e8:21:aa:d2:76:bc:39:88:5a:ec:77:74:4e:
f4:a8:65:d2:17:4c:97:3e:73:bd:f2:1f:53:46:97:54:2a:52:
2a:4d:b5:84:34:97:45:4d:c2:cd:ef:94:7b:0b:e1:93:1f:3c:
c2:a4:fb:af:62:ab:95:61:75:90:dc:cc:75:5c:ca:85:49:b3:
9f:ca:e3:7f:b6:14:4b:8e:0c:c5:e5:27:68:20:d6:a1:04:90:
5c:74:98:4e:91:98:78:b2:47:2f:f4:03:f1:50:ed:3c:44:88:
68:f5:e9:db:6f:8f:95:c2:6b:c1:cc:9a:c7:b6:d0:86:55:f5:
7f:0e:22:21:18:a7:bc:56:dd:8b:3a:2c:f9:22:86:be:68:6b:
18:e8:1e:1e:81:d8:e2:87:ba:af:64:c9:74:3d:d7:d6:26:91:
43:ac:68:a3:51:42:e2:a2:59:e5:67:51:c0:0a:c8:d1:df:bf:
6a:99:b0:03:ee:d0:8d:42:9b:0e:c3:e5:c9:b1:1d:10:87:a1:
50:2e:0b:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQLrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MTMyODI4WhcNMjQxMTI1MTMyODI4WjAYMRYw
FAYDVQQDEw02NzFmOTE3Zi00MWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArT/x8+jimYULjJ7WjOKzsBk+BMykVzllRwM6DUOiHhO6tDl0GVJBE7wW
pZATbb5L8itSNPGKJAAHaGRy9/a7XANS7cSav8rfMiWaCmC7BwYI8qKhQbK9Y+no
whmjmfyDRDajpaCuYbAxFa2pp/3TCl/TIEv/p3tOYjFr2SA0p3YUKfGQ8n7+5CHL
BwylCpWvDpP/cmWvdCe2Q3e0adXbba3xi9K1wTtPWvDJMzuxgjH5pFHbdqtRQI3+
AcfS1tvDY/dRsnZ/palpQyBEva9CUTrv14w+YaCksulgrtvKfqRhmb3M2A1m4jHJ
k8tlcIHxweJXs3NhgdOddjUL4i3hxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB2Q
OnZP+siYeF/BeI1wkuA8Jx/tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjQ3OUUwQTk1MzAxMUVGODVDNjNDNTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms4wMA0GCSqGSIb3DQEB
CwUAA4IBAQDGmcwHUQTZh1tD0r2NOEwPFICfp8Szwmtm9cWRs5Ch1HepjclS0yPr
92q75aN1nEvLz0bHLVwazea/peghqtJ2vDmIWux3dE70qGXSF0yXPnO98h9TRpdU
KlIqTbWENJdFTcLN75R7C+GTHzzCpPuvYquVYXWQ3Mx1XMqFSbOfyuN/thRLjgzF
5SdoINahBJBcdJhOkZh4skcv9APxUO08RIho9enbb4+VwmvBzJrHttCGVfV/DiIh
GKe8Vt2LOiz5Ioa+aGsY6B4egdjih7qvZMl0PdfWJpFDrGijUULiolnlZ1HACsjR
379qmbAD7tCNQpsOw+XJsR0Qh6FQLguL
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:42 2024 by rpki-client on console-ams.rpki-client.org