Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92CEAAF6239D11EF8E2F98E97CDC24C2.roa
File: 92CEAAF6239D11EF8E2F98E97CDC24C2.roa (raw, json)
Hash identifier: LWk2Ls1Zn5s3M1/KO02RKIzTkhr20bxYVHz/buZpKkk=
Subject key identifier: A0:48:C6:CC:2B:02:70:CE:AD:9C:20:EB:02:9D:46:95:38:53:F8:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C060
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92CEAAF6239D11EF8E2F98E97CDC24C2.roa
Signing time: Thu 06 Jun 2024 00:41:55 +0000
ROA not before: Thu 06 Jun 2024 00:00:52 +0000
ROA not after: Tue 06 May 2025 00:00:52 +0000
asID: 63199
IP address blocks: 154.204.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49248 (0xc060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 00:00:52 2024 GMT
Not After : May 6 00:00:52 2025 GMT
Subject: CN=666105d3-a402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:c5:72:f0:10:75:f6:33:90:fe:4f:f7:ae:
ef:71:f9:19:ea:ac:85:c0:0e:d0:2e:e3:10:6f:40:
38:bd:ca:a5:f8:25:33:ea:e7:54:20:7f:d0:2a:dd:
f9:51:20:48:a8:cc:7d:4c:ed:67:dd:69:8e:cb:90:
48:62:3e:40:3f:7d:7f:46:5d:52:7f:34:c1:ac:e2:
85:30:63:2c:d5:ed:c9:6a:78:8e:18:d1:34:b2:ba:
b7:bd:94:e5:8a:71:9f:92:f3:12:23:bc:3b:1d:3f:
13:6f:bc:f7:57:f0:13:b2:f7:8b:83:b1:fc:17:60:
11:7e:32:4b:39:26:2c:3d:98:e3:e1:5c:c6:60:16:
2f:ce:d8:5c:bb:63:73:02:cf:22:38:a4:11:bb:0d:
df:ba:74:21:14:8b:b7:e9:88:bf:7a:4b:f7:5b:0c:
8e:68:dd:46:96:37:d1:77:67:7e:58:62:7b:2c:6a:
cf:64:0e:e4:0b:e4:16:8b:2b:56:46:57:d5:04:cd:
f2:d5:6c:61:01:54:16:98:44:15:55:51:84:71:1b:
c6:bd:bf:eb:07:94:15:2f:ba:b3:2b:19:0f:07:23:
a0:a9:ca:d7:15:e8:79:d2:4b:d5:12:83:9d:fa:fd:
4d:04:b6:6d:8a:f8:31:5a:b0:8c:eb:18:4f:ef:1b:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:C6:CC:2B:02:70:CE:AD:9C:20:EB:02:9D:46:95:38:53:F8:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92CEAAF6239D11EF8E2F98E97CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.2.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:c2:b8:1b:b4:06:d8:46:dc:15:41:4b:7f:d1:a1:f8:76:2e:
7e:8e:2f:ad:b7:eb:78:68:26:d8:52:37:72:c9:49:49:d2:42:
d3:51:47:0d:f3:3c:c0:0a:81:7e:b9:9b:fe:34:9d:f7:f9:47:
17:db:9b:88:06:3b:6f:02:7b:41:cb:07:0a:e4:bf:31:ce:1e:
a9:84:00:01:5b:4f:00:5c:18:cc:e1:a5:c5:3a:9e:ac:ee:64:
2f:05:59:b5:61:cc:90:77:b6:06:60:67:ac:e0:50:e1:5c:df:
db:f6:b0:f7:2e:d2:55:a1:8a:35:4c:67:0b:f1:e1:b2:78:de:
fe:0f:96:4e:d4:b6:d9:f5:80:74:1e:fd:ec:ce:c4:c2:c4:85:
e8:b5:a6:f5:c8:cf:20:32:e7:8c:20:3c:c0:37:24:7d:dd:69:
2a:11:e4:dc:69:d0:f9:7b:bd:f8:83:d0:e5:52:c1:a0:3f:4b:
f3:6e:46:9e:65:41:67:ec:41:ff:6f:57:67:6d:19:89:f1:90:
c5:3c:43:03:03:6c:da:94:39:bc:d9:0f:72:5d:29:38:b3:32:
60:e9:06:34:dd:6b:9d:05:6e:c2:ba:0d:be:23:2c:b4:7c:59:
cd:39:1e:d0:43:03:cf:02:0d:d8:fd:cf:b0:bf:76:50:88:d5:
86:14:50:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMBgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjA2MDAwMDUyWhcNMjUwNTA2MDAwMDUyWjAYMRYw
FAYDVQQDEw02NjYxMDVkMy1hNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzTTFcvAQdfYzkP5P967vcfkZ6qyFwA7QLuMQb0A4vcql+CUz6udUIH/Q
Kt35USBIqMx9TO1n3WmOy5BIYj5AP31/Rl1SfzTBrOKFMGMs1e3JaniOGNE0srq3
vZTlinGfkvMSI7w7HT8Tb7z3V/ATsveLg7H8F2ARfjJLOSYsPZjj4VzGYBYvzthc
u2NzAs8iOKQRuw3funQhFIu36Yi/ekv3WwyOaN1GljfRd2d+WGJ7LGrPZA7kC+QW
iytWRlfVBM3y1WxhAVQWmEQVVVGEcRvGvb/rB5QVL7qzKxkPByOgqcrXFeh50kvV
EoOd+v1NBLZtivgxWrCM6xhP7xvxWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKBI
xswrAnDOrZwg6wKdRpU4U/hQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MkNFQUFGNjIzOUQxMUVGOEUyRjk4RTk3Q0RDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmswCMA0GCSqGSIb3DQEB
CwUAA4IBAQDSwrgbtAbYRtwVQUt/0aH4di5+ji+tt+t4aCbYUjdyyUlJ0kLTUUcN
8zzACoF+uZv+NJ33+UcX25uIBjtvAntBywcK5L8xzh6phAABW08AXBjM4aXFOp6s
7mQvBVm1YcyQd7YGYGes4FDhXN/b9rD3LtJVoYo1TGcL8eGyeN7+D5ZO1LbZ9YB0
Hv3szsTCxIXotab1yM8gMueMIDzANyR93WkqEeTcadD5e734g9DlUsGgP0vzbkae
ZUFn7EH/b1dnbRmJ8ZDFPEMDA2zalDm82Q9yXSk4szJg6QY03WudBW7Cug2+Iyy0
fFnNOR7QQwPPAg3Y/c+wv3ZQiNWGFFA/
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:15 2024 by rpki-client on console-ams.rpki-client.org