Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9028B342A62E11EE9732B69D775412E6.roa
File: 9028B342A62E11EE9732B69D775412E6.roa (raw, json)
Hash identifier: R8HqblY+FZKUOJafRxpRxMb+6khgnQcaei/ovgPjgi8=
Subject key identifier: 44:4D:30:5A:B6:3F:21:53:6E:6F:32:BC:12:17:8A:13:E6:DF:2E:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6A1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9028B342A62E11EE9732B69D775412E6.roa
Signing time: Fri 29 Dec 2023 09:42:21 +0000
ROA not before: Fri 29 Dec 2023 09:42:18 +0000
ROA not after: Mon 04 Nov 2024 09:42:18 +0000
asID: 5065
IP address blocks: 154.86.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27164 (0x6a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 09:42:18 2023 GMT
Not After : Nov 4 09:42:18 2024 GMT
Subject: CN=658e947d-17ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:79:3e:e0:77:a4:1d:1a:f1:3c:1a:65:20:
44:5d:dc:59:7d:79:c5:90:63:78:92:74:2d:f4:90:
e0:ee:ae:de:1a:78:e7:ea:3d:22:8a:80:0e:55:12:
8e:be:75:bd:ef:c6:62:59:78:4b:27:d3:6e:29:3d:
0e:8f:62:76:db:0a:17:33:e3:28:62:09:74:68:00:
31:26:30:46:63:4f:af:2b:43:0b:3e:ac:ea:7a:4a:
12:df:4c:5e:69:d5:f5:90:6b:e4:7d:5a:22:9e:bb:
94:11:af:48:fc:a8:3d:c9:b4:a1:a4:41:b2:e1:ba:
cf:b9:e9:a6:23:fe:c6:ac:de:14:95:56:1c:b6:f6:
4b:fe:aa:94:5e:3b:21:d3:da:fc:10:23:cb:0b:4a:
08:8d:35:c8:1e:c6:6c:7f:f4:8e:6e:c2:9b:ad:ac:
72:29:56:b5:42:e5:f2:1a:29:3e:15:d2:07:33:d1:
d7:62:8a:12:b3:3b:b2:29:9b:6f:29:34:c8:6a:6c:
44:db:2f:f6:f1:4b:c0:61:c5:ee:61:4e:cf:80:07:
12:0a:15:36:e3:c3:3d:19:4e:be:35:bb:8c:e0:1a:
91:a7:c4:36:54:35:c9:5f:5d:da:3b:ea:b7:e0:96:
bc:66:10:fe:c0:82:33:bc:16:7d:e2:06:cc:ae:a1:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:30:5A:B6:3F:21:53:6E:6F:32:BC:12:17:8A:13:E6:DF:2E:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9028B342A62E11EE9732B69D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.10.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c4:05:52:23:5b:4b:95:be:91:01:73:5e:be:f4:6e:da:39:
6c:2b:4f:9b:09:69:20:2f:b5:7f:cb:f0:26:8a:f9:5b:c7:ca:
aa:44:11:59:d5:6f:9e:d1:ec:a5:48:0d:80:40:6e:4d:62:94:
c4:3e:e3:a3:cc:a9:33:aa:e7:ac:ab:f5:7e:df:2e:6e:4a:64:
98:ba:00:1c:d2:be:b4:9a:9b:2e:8c:e1:92:13:08:16:d4:91:
5c:5c:49:f8:85:21:33:24:49:13:e9:69:ff:4d:33:c8:e9:b5:
ac:83:51:bb:89:3d:bc:55:a6:84:1f:5f:3c:61:ce:29:4d:2a:
f7:cd:bb:51:84:10:25:36:48:ef:22:2c:5d:90:e7:b1:fe:4c:
45:9d:4c:62:ad:b7:f0:f3:9a:8f:d9:02:4a:35:d2:dd:52:49:
b4:41:4a:fe:c0:f0:ed:76:ff:52:6b:61:17:1a:4a:ff:bd:3c:
96:9c:cf:b5:bc:c6:0d:61:ac:9c:61:cc:12:02:ab:d6:e8:58:
c7:65:4e:e7:df:df:a1:00:eb:8c:e0:3b:9a:47:e6:cc:f9:0e:
fc:52:b4:3c:60:b8:69:95:af:a7:c3:9f:fe:4b:33:88:62:ae:
d3:7f:66:50:65:fc:7c:93:b9:db:b2:10:35:80:7e:98:47:d1:
b8:64:8b:16
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICahwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMjkwOTQyMThaFw0yNDExMDQwOTQyMThaMBgxFjAU
BgNVBAMTDTY1OGU5NDdkLTE3Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcCnk+4HekHRrxPBplIERd3Fl9ecWQY3iSdC30kODurt4aeOfqPSKKgA5V
Eo6+db3vxmJZeEsn024pPQ6PYnbbChcz4yhiCXRoADEmMEZjT68rQws+rOp6ShLf
TF5p1fWQa+R9WiKeu5QRr0j8qD3JtKGkQbLhus+56aYj/sas3hSVVhy29kv+qpRe
OyHT2vwQI8sLSgiNNcgexmx/9I5uwputrHIpVrVC5fIaKT4V0gcz0ddiihKzO7Ip
m28pNMhqbETbL/bxS8Bhxe5hTs+ABxIKFTbjwz0ZTr41u4zgGpGnxDZUNclfXdo7
6rfglrxmEP7AgjO8Fn3iBsyuoeD1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURE0w
WrY/IVNubzK8EheKE+bfLigwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzkwMjhCMzQyQTYyRTExRUU5NzMyQjY5RDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVgowDQYJKoZIhvcNAQEL
BQADggEBADfEBVIjW0uVvpEBc16+9G7aOWwrT5sJaSAvtX/L8CaK+VvHyqpEEVnV
b57R7KVIDYBAbk1ilMQ+46PMqTOq56yr9X7fLm5KZJi6ABzSvrSamy6M4ZITCBbU
kVxcSfiFITMkSRPpaf9NM8jptayDUbuJPbxVpoQfXzxhzilNKvfNu1GEECU2SO8i
LF2Q57H+TEWdTGKtt/Dzmo/ZAko10t1SSbRBSv7A8O12/1JrYRcaSv+9PJacz7W8
xg1hrJxhzBICq9boWMdlTuff36EA64zgO5pH5sz5DvxStDxguGmVr6fDn/5LM4hi
rtN/ZlBl/HyTuduyEDWAfphH0bhkixY=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org