Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/978D31AA8F8D11EFBF5CD153762E951A.roa
File: 978D31AA8F8D11EFBF5CD153762E951A.roa (raw, json)
Hash identifier: Xgjq+C5kDpiTJr2MKV+1AIk9gU1Bb8XS71lqcV7Fa8o=
Subject key identifier: 3B:40:1F:8F:6D:91:72:64:C3:AE:CB:8D:31:54:92:57:47:C6:D8:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010050
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/978D31AA8F8D11EFBF5CD153762E951A.roa
Signing time: Mon 21 Oct 2024 09:19:37 +0000
ROA not before: Mon 21 Oct 2024 09:19:33 +0000
ROA not after: Tue 26 Nov 2024 09:19:33 +0000
asID: 62240
IP address blocks: 154.195.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65616 (0x10050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 09:19:33 2024 GMT
Not After : Nov 26 09:19:33 2024 GMT
Subject: CN=67161ca9-5b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:1f:e6:99:df:1e:07:04:86:e4:4d:e6:bc:
55:3a:61:51:6e:e4:12:d0:f8:b5:37:31:30:70:de:
20:a8:88:81:bc:ed:0d:ef:74:22:30:7c:b5:78:45:
8a:7c:18:21:8a:89:4a:fd:19:7b:26:69:df:59:1a:
98:87:e8:e7:ef:7c:80:2a:2c:06:77:89:06:50:da:
60:80:af:79:6e:b8:5f:27:95:ee:a4:b4:32:ea:49:
3e:24:60:c7:8f:9d:db:2c:78:4c:16:b1:b3:68:32:
cc:4e:88:37:bc:f7:d3:5d:c1:fe:c1:c0:02:c9:d9:
e3:d7:76:29:80:4e:34:d8:95:54:c2:6e:67:37:9c:
f6:63:e3:a1:0b:40:1f:be:b9:62:eb:36:64:20:59:
36:0d:db:60:5d:9c:d5:3e:65:a7:33:89:48:e4:3d:
29:5c:f8:d9:b9:12:69:69:b0:30:b7:ac:52:41:e0:
b3:06:bc:16:91:0d:fb:91:7b:69:a8:2b:37:77:33:
1e:9b:bd:8e:65:fe:f8:aa:0d:73:f0:b4:7c:ab:9b:
8d:f0:55:50:9b:e5:d4:f3:e1:69:de:20:f8:15:8f:
e2:48:dc:fa:73:58:c5:ad:8f:8e:8a:e7:ff:59:e6:
b5:48:d3:c5:52:4b:55:6c:98:14:55:e5:9d:60:5f:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:1F:8F:6D:91:72:64:C3:AE:CB:8D:31:54:92:57:47:C6:D8:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/978D31AA8F8D11EFBF5CD153762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.16.0/20
Signature Algorithm: sha256WithRSAEncryption
08:a7:50:92:e9:99:f3:d0:50:e4:4f:ac:b7:3f:89:43:d1:46:
26:39:85:e9:58:b5:a0:9d:ef:d7:4a:61:fb:1b:f4:5f:9b:13:
9b:a6:11:93:bb:e7:ee:f0:ae:3e:2b:03:03:fb:71:b3:fe:17:
45:26:7d:cb:42:d6:c7:70:9a:5d:8b:fa:a0:b6:66:ea:d6:46:
e6:48:27:70:f6:2b:9b:4d:e9:e7:cd:c5:5b:07:04:f6:b5:d9:
04:e1:a7:7c:77:26:5d:4f:68:52:af:a2:37:08:7f:48:94:16:
95:dc:78:f0:98:d2:fb:19:d2:09:91:54:04:0d:14:cd:4e:87:
3d:53:58:dc:9e:18:ad:b2:d6:81:31:2f:d7:de:b4:f2:a6:f6:
be:9c:2c:f8:d1:5a:ed:90:31:9b:3f:97:ff:d2:f0:53:e3:07:
75:0f:56:fa:67:ef:75:6c:d2:32:53:94:ef:7e:0d:50:06:a9:
61:fd:c3:cc:3d:88:e9:1c:08:f1:83:03:ee:f1:37:6a:a2:2a:
4a:73:ea:2f:37:c3:79:0e:30:4c:d4:2a:cf:c9:54:59:24:79:
ed:24:ed:95:4f:22:fe:1a:11:ef:f8:5a:27:f7:6b:8c:48:1a:
74:ea:bf:f9:55:6e:b0:6b:d0:1b:ad:d8:b2:f3:be:1d:f5:40:
45:6d:52:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQBQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIxMDkxOTMzWhcNMjQxMTI2MDkxOTMzWjAYMRYw
FAYDVQQDEw02NzE2MWNhOS01YjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAneMf5pnfHgcEhuRN5rxVOmFRbuQS0Pi1NzEwcN4gqIiBvO0N73QiMHy1
eEWKfBghiolK/Rl7JmnfWRqYh+jn73yAKiwGd4kGUNpggK95brhfJ5XupLQy6kk+
JGDHj53bLHhMFrGzaDLMTog3vPfTXcH+wcACydnj13YpgE402JVUwm5nN5z2Y+Oh
C0Afvrli6zZkIFk2DdtgXZzVPmWnM4lI5D0pXPjZuRJpabAwt6xSQeCzBrwWkQ37
kXtpqCs3dzMem72OZf74qg1z8LR8q5uN8FVQm+XU8+Fp3iD4FY/iSNz6c1jFrY+O
iuf/Wea1SNPFUktVbJgUVeWdYF/u7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDtA
H49tkXJkw67LjTFUkldHxtiMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NzhEMzFBQThGOEQxMUVGQkY1Q0QxNTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsMQMA0GCSqGSIb3DQEB
CwUAA4IBAQAIp1CS6Znz0FDkT6y3P4lD0UYmOYXpWLWgne/XSmH7G/RfmxObphGT
u+fu8K4+KwMD+3Gz/hdFJn3LQtbHcJpdi/qgtmbq1kbmSCdw9iubTennzcVbBwT2
tdkE4ad8dyZdT2hSr6I3CH9IlBaV3HjwmNL7GdIJkVQEDRTNToc9U1jcnhitstaB
MS/X3rTypva+nCz40VrtkDGbP5f/0vBT4wd1D1b6Z+91bNIyU5Tvfg1QBqlh/cPM
PYjpHAjxgwPu8TdqoipKc+ovN8N5DjBM1CrPyVRZJHntJO2VTyL+GhHv+Fon92uM
SBp06r/5VW6wa9Abrdiy874d9UBFbVJW
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org