Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/893D6D826AA211EFB4A7F874762E951A.roa
File: 893D6D826AA211EFB4A7F874762E951A.roa (raw, json)
Hash identifier: SU3yCZnIl31qZbmFFAjMJyjgeTJ+bN8MbdcJpypGXNI=
Subject key identifier: 60:07:40:B5:40:97:0A:08:0A:E8:7C:54:58:E8:C5:2B:6C:C1:7D:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/893D6D826AA211EFB4A7F874762E951A.roa
Signing time: Wed 04 Sep 2024 09:46:19 +0000
ROA not before: Wed 04 Sep 2024 09:46:16 +0000
ROA not after: Thu 24 Apr 2025 09:46:16 +0000
asID: 63888
IP address blocks: 154.207.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59963 (0xea3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:46:16 2024 GMT
Not After : Apr 24 09:46:16 2025 GMT
Subject: CN=66d82c6b-17f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:bd:72:57:a8:14:b3:23:37:c6:a0:82:16:
11:03:97:e3:85:76:13:51:8c:7a:4d:f8:f5:e7:9e:
3c:27:2f:d7:c4:f6:10:91:9f:e3:97:5a:85:eb:10:
cf:58:2b:81:5c:4e:26:6e:25:2d:94:05:b4:0c:c7:
12:34:2c:19:22:f2:69:72:95:67:7a:c9:a2:4a:6a:
01:5b:5c:8e:7a:93:72:09:ac:f2:76:a9:14:88:4a:
0b:ae:99:80:e8:4f:ab:0d:f5:f3:84:82:7f:09:85:
dc:83:0a:e2:ea:17:df:fd:08:72:40:b3:e0:8a:a3:
19:fc:59:bd:cf:0d:eb:78:3e:07:88:42:59:5a:a1:
06:78:06:e6:d9:69:d7:04:81:3e:3d:8e:eb:2f:16:
22:d8:03:71:26:66:c6:86:98:23:30:a6:13:e2:94:
d0:c8:15:c2:cb:e3:5e:af:06:07:c2:e1:3a:4c:42:
cb:10:7f:4e:04:35:ae:d7:bf:99:c1:fb:37:f6:8a:
aa:75:34:19:24:cb:2b:b4:b7:67:2d:4b:5e:cf:7b:
87:82:ce:f6:f8:7b:89:96:0f:a1:8b:2d:19:ec:57:
2f:b8:d2:92:c8:fe:0c:ed:9e:a3:21:75:35:96:06:
da:6f:3a:ba:b6:ee:00:58:7b:bf:e6:08:cb:b5:25:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:40:B5:40:97:0A:08:0A:E8:7C:54:58:E8:C5:2B:6C:C1:7D:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/893D6D826AA211EFB4A7F874762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:df:77:1d:95:36:19:d0:59:51:9c:b9:d2:5e:63:09:a9:83:
13:ba:29:68:fc:4d:9b:02:78:fe:f5:55:0a:ae:15:68:02:1e:
d0:77:36:d7:bc:f6:2e:a4:a0:6f:07:62:bc:d5:0c:8b:ee:a0:
46:6c:84:f5:29:1c:b4:9d:c2:fa:02:65:e7:37:e0:0f:05:7b:
3d:d9:2c:80:9d:08:6f:06:88:94:59:b2:db:de:ca:be:83:70:
f9:c6:66:55:1c:7e:ac:7d:82:f9:39:af:27:b8:fb:94:40:22:
52:45:d4:2b:b7:11:5f:7a:d9:1a:19:8e:7d:79:26:ae:b1:47:
05:ef:3f:bd:ff:58:c1:fe:ed:09:d0:f2:b4:5d:31:7d:a4:2b:
b5:ad:15:b9:9b:91:07:fc:ec:ec:f0:d5:83:c8:ff:27:ad:28:
eb:06:65:41:91:38:13:1e:e7:54:df:3c:8e:72:75:06:2c:f6:
ec:69:61:51:8a:0d:42:ef:05:15:0f:5a:99:e0:24:77:b1:d6:
09:03:e4:d7:1f:10:a0:80:6f:90:87:af:10:01:1d:7c:3c:b8:
97:ec:23:69:30:2b:3b:42:62:ba:57:18:25:54:7b:74:4d:2c:
77:93:92:b3:d0:0b:8e:23:b2:40:5b:27:4a:2c:a7:43:e6:e3:
13:0c:0b:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOo7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTA0MDk0NjE2WhcNMjUwNDI0MDk0NjE2WjAYMRYw
FAYDVQQDEw02NmQ4MmM2Yi0xN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0qC9cleoFLMjN8agghYRA5fjhXYTUYx6Tfj15548Jy/XxPYQkZ/jl1qF
6xDPWCuBXE4mbiUtlAW0DMcSNCwZIvJpcpVnesmiSmoBW1yOepNyCazydqkUiEoL
rpmA6E+rDfXzhIJ/CYXcgwri6hff/QhyQLPgiqMZ/Fm9zw3reD4HiEJZWqEGeAbm
2WnXBIE+PY7rLxYi2ANxJmbGhpgjMKYT4pTQyBXCy+NerwYHwuE6TELLEH9OBDWu
17+Zwfs39oqqdTQZJMsrtLdnLUtez3uHgs72+HuJlg+hiy0Z7FcvuNKSyP4M7Z6j
IXU1lgbabzq6tu4AWHu/5gjLtSUo4wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGAH
QLVAlwoICuh8VFjoxStswX2DMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTNENkQ4MjZBQTIxMUVGQjRBN0Y4NzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms/cMA0GCSqGSIb3DQEB
CwUAA4IBAQB633cdlTYZ0FlRnLnSXmMJqYMTuilo/E2bAnj+9VUKrhVoAh7QdzbX
vPYupKBvB2K81QyL7qBGbIT1KRy0ncL6AmXnN+APBXs92SyAnQhvBoiUWbLb3sq+
g3D5xmZVHH6sfYL5Oa8nuPuUQCJSRdQrtxFfetkaGY59eSausUcF7z+9/1jB/u0J
0PK0XTF9pCu1rRW5m5EH/Ozs8NWDyP8nrSjrBmVBkTgTHudU3zyOcnUGLPbsaWFR
ig1C7wUVD1qZ4CR3sdYJA+TXHxCggG+Qh68QAR18PLiX7CNpMCs7QmK6VxglVHt0
TSx3k5Kz0AuOI7JAWydKLKdD5uMTDAtZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org