Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEAB234CA8E711EFB1BC67A5762E951A.roa
File: AEAB234CA8E711EFB1BC67A5762E951A.roa (raw, json)
Hash identifier: yEXRgASDsHs8zywD1PJOCztXSa+TxNTNwWCaNFyp/+4=
Subject key identifier: 05:C4:37:2B:36:0A:37:A7:96:D7:D8:D8:7D:E0:BB:9E:0A:CA:78:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEAB234CA8E711EFB1BC67A5762E951A.roa
Signing time: Fri 22 Nov 2024 15:37:29 +0000
ROA not before: Fri 22 Nov 2024 15:37:26 +0000
ROA not after: Tue 03 Dec 2024 15:37:26 +0000
asID: 62240
IP address blocks: 154.194.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69859 (0x110e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:37:26 2024 GMT
Not After : Dec 3 15:37:26 2024 GMT
Subject: CN=6740a539-5235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:91:16:60:28:1f:31:48:38:06:a2:7a:a6:
d9:29:7d:93:0f:fd:ff:37:dc:63:be:92:9b:31:94:
8d:aa:67:4d:c3:d6:c3:82:3a:77:39:f2:89:0b:15:
80:6e:13:7c:be:51:d3:87:55:54:52:d8:44:9a:e0:
23:83:09:8a:9b:f8:73:49:3d:73:05:10:f0:be:10:
5c:be:9b:95:c3:bf:51:16:70:bc:9c:b1:4e:d6:b2:
03:d9:55:22:9b:c6:6e:c9:ec:19:21:a6:28:10:ef:
85:a6:7c:cf:fc:42:8b:cc:e1:dc:f6:fc:6e:d6:a9:
8e:03:e3:b6:ce:70:78:33:af:79:35:f1:15:f2:0e:
f5:65:3a:19:18:d3:63:e5:17:82:c2:a8:46:3d:e2:
1a:a4:83:5d:e9:bd:65:4c:11:7c:c7:ba:9a:57:29:
6f:68:75:a0:82:34:dc:e7:e8:48:70:69:e5:d9:05:
65:24:ad:fa:f3:36:40:ff:74:d9:9c:43:5a:f1:67:
a8:7e:b7:63:5a:99:94:a0:51:2b:bf:de:bd:39:a5:
21:69:8b:1c:27:8c:a8:3b:93:60:a7:e3:dc:27:39:
dc:cf:0c:0f:3f:c3:95:59:49:04:a3:39:f0:4d:b6:
be:a0:36:09:8c:21:c4:6e:13:64:9a:d6:70:0d:dc:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C4:37:2B:36:0A:37:A7:96:D7:D8:D8:7D:E0:BB:9E:0A:CA:78:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEAB234CA8E711EFB1BC67A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c1:57:ab:d7:32:7e:07:e2:32:9f:d7:97:0b:81:8f:d5:72:
c6:05:ea:25:1e:3e:7b:10:2c:dd:7f:5a:17:36:02:15:02:1e:
ca:c9:85:ff:38:80:e4:54:e6:34:84:bd:39:da:e8:a5:04:7d:
54:6b:a1:cb:a6:b1:31:46:b6:5c:a5:b5:dc:e7:47:3e:6b:fe:
46:c4:95:ac:38:29:f0:51:e5:e9:6d:46:5b:79:c5:31:1e:f4:
fc:d3:36:1a:10:14:06:53:40:29:a0:0c:f6:bd:b8:21:9c:14:
58:e9:e9:58:bc:39:ae:31:ce:35:d8:e6:7f:4f:df:85:83:d5:
b2:30:75:1a:a2:7b:1c:f5:2e:31:c0:2e:47:0e:d4:3c:a4:52:
d0:a0:a5:07:9a:52:f1:21:76:02:cf:b4:0f:fb:e1:25:86:2e:
3d:b1:b9:53:0f:d0:8a:4d:2e:f0:75:b9:f5:2c:b7:08:9c:e8:
c6:b9:b5:b8:b6:07:7e:b0:55:5d:a3:f9:f3:0d:4e:70:f4:d7:
d9:a3:25:1b:b5:93:90:42:5b:ee:dc:23:bf:76:87:1c:e7:48:
62:f2:73:eb:3e:ed:1c:d3:59:d1:61:5d:cb:4d:39:95:93:30:
d4:82:ca:be:7f:a4:d2:79:cf:26:76:6a:a7:d0:6e:41:a5:30:
8a:76:99:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARDjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTUzNzI2WhcNMjQxMjAzMTUzNzI2WjAYMRYw
FAYDVQQDEw02NzQwYTUzOS01MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0rqRFmAoHzFIOAaieqbZKX2TD/3/N9xjvpKbMZSNqmdNw9bDgjp3OfKJ
CxWAbhN8vlHTh1VUUthEmuAjgwmKm/hzST1zBRDwvhBcvpuVw79RFnC8nLFO1rID
2VUim8ZuyewZIaYoEO+FpnzP/EKLzOHc9vxu1qmOA+O2znB4M695NfEV8g71ZToZ
GNNj5ReCwqhGPeIapINd6b1lTBF8x7qaVylvaHWggjTc5+hIcGnl2QVlJK368zZA
/3TZnENa8WeofrdjWpmUoFErv969OaUhaYscJ4yoO5Ngp+PcJznczwwPP8OVWUkE
oznwTba+oDYJjCHEbhNkmtZwDdxleQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAXE
Nys2CjenltfY2H3gu54KynjwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRUFCMjM0Q0E4RTcxMUVGQjFCQzY3QTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJyMA0GCSqGSIb3DQEB
CwUAA4IBAQCxwVer1zJ+B+Iyn9eXC4GP1XLGBeolHj57ECzdf1oXNgIVAh7KyYX/
OIDkVOY0hL052uilBH1Ua6HLprExRrZcpbXc50c+a/5GxJWsOCnwUeXpbUZbecUx
HvT80zYaEBQGU0ApoAz2vbghnBRY6elYvDmuMc412OZ/T9+Fg9WyMHUaonsc9S4x
wC5HDtQ8pFLQoKUHmlLxIXYCz7QP++Elhi49sblTD9CKTS7wdbn1LLcInOjGubW4
tgd+sFVdo/nzDU5w9NfZoyUbtZOQQlvu3CO/docc50hi8nPrPu0c01nRYV3LTTmV
kzDUgsq+f6TSec8mdmqn0G5BpTCKdpk7
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:29 2024 by rpki-client on console-ams.rpki-client.org