Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFDF7C6A64D11EFA560304E762E951A.roa
File: AEFDF7C6A64D11EFA560304E762E951A.roa (raw, json)
Hash identifier: I6SMrnCLPvR1KQCw5gkdKplk8AdQIT85HQnQs31t2mM=
Subject key identifier: EB:54:92:FE:3A:A4:58:B5:09:E4:64:2F:0E:D6:DE:97:62:A8:D6:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFDF7C6A64D11EFA560304E762E951A.roa
Signing time: Tue 19 Nov 2024 08:10:05 +0000
ROA not before: Tue 19 Nov 2024 08:10:01 +0000
ROA not after: Sun 15 Dec 2024 08:10:01 +0000
asID: 51396
IP address blocks: 154.213.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69398 (0x10f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:10:01 2024 GMT
Not After : Dec 15 08:10:01 2024 GMT
Subject: CN=673c47dd-bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:60:12:76:d0:d7:73:50:a2:22:ed:ad:0b:
cc:0e:3f:ed:e4:a1:26:85:eb:78:34:be:c0:e5:b5:
87:fb:2d:31:66:0b:d2:87:44:12:a8:b5:97:d8:0b:
cb:70:cf:22:68:96:22:98:bc:aa:c8:b5:07:b2:f3:
9d:b7:6e:31:ab:b3:da:b2:b8:96:bb:4b:d4:28:00:
03:01:19:73:0c:7c:e5:59:69:e3:d8:56:60:78:19:
5e:02:7c:21:80:66:a6:40:47:88:24:11:b8:66:a2:
54:35:42:47:b1:e8:3e:d7:37:39:83:0b:b2:ba:5f:
07:5c:17:15:f5:be:56:6e:ba:6d:2b:a9:8b:dd:54:
4c:16:56:f8:af:28:e0:5b:f3:54:04:35:2e:6c:a0:
19:2e:57:bd:c7:78:d4:dc:9b:58:c6:05:3a:33:ae:
d8:2e:58:66:49:3c:77:15:bf:0d:13:d2:b8:07:ef:
31:fa:da:8a:b2:46:40:bb:6b:b3:c5:20:37:34:aa:
2a:b2:c4:ac:d8:92:98:1a:17:a6:a1:48:8b:0d:4d:
c1:af:8d:aa:d4:0c:6b:79:01:1b:94:68:71:8f:6a:
ba:56:d5:11:f9:f4:bb:80:0b:0d:59:16:46:ee:7d:
f2:18:f3:30:6e:f9:b8:46:07:58:e1:00:70:c7:9d:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:54:92:FE:3A:A4:58:B5:09:E4:64:2F:0E:D6:DE:97:62:A8:D6:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEFDF7C6A64D11EFA560304E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.189.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6d:63:4f:71:c3:b1:90:24:85:c8:5b:b4:66:e7:96:d1:0d:
5f:43:c5:df:30:45:be:97:f6:49:92:ca:a5:37:c2:da:c1:d0:
8f:be:23:01:5c:ee:b9:e8:0d:09:a9:bb:b8:c0:0d:7f:31:d9:
83:6d:5b:a5:b9:62:2c:5c:ec:74:9c:3e:af:0d:1e:c5:7b:9d:
b2:6d:7b:6a:eb:a8:c4:c1:29:0b:30:6e:09:37:6d:2c:67:33:
15:bb:42:8d:28:ae:f5:d1:f4:8f:b3:6d:cf:8a:8d:26:ff:21:
23:3c:2b:99:55:5c:ac:17:e4:17:ad:56:0a:cf:65:d6:4e:f3:
97:4f:d8:0d:a1:77:5b:ae:05:2e:43:5f:c2:1f:87:40:0d:bf:
5a:6b:60:72:8b:b5:08:79:88:81:be:f0:b6:ea:0c:2a:46:1e:
e8:a6:e9:79:64:c3:2e:29:19:af:56:98:fb:99:6f:30:11:b1:
90:2e:3f:3d:39:8e:39:9b:e4:f9:6e:16:8b:48:e9:7d:c5:49:
25:25:a4:7a:58:bb:fa:86:f3:58:d0:25:0e:d5:98:3b:0e:04:
80:1f:c4:0f:f6:43:ff:8a:ad:dc:b9:48:1b:14:83:74:33:5f:
c7:ea:82:89:90:8c:9e:d5:de:39:bc:0a:27:8f:b9:0e:d3:fe:
15:f7:ad:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ8WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE5MDgxMDAxWhcNMjQxMjE1MDgxMDAxWjAYMRYw
FAYDVQQDEw02NzNjNDdkZC1iYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtkdgEnbQ13NQoiLtrQvMDj/t5KEmhet4NL7A5bWH+y0xZgvSh0QSqLWX
2AvLcM8iaJYimLyqyLUHsvOdt24xq7PasriWu0vUKAADARlzDHzlWWnj2FZgeBle
AnwhgGamQEeIJBG4ZqJUNUJHseg+1zc5gwuyul8HXBcV9b5WbrptK6mL3VRMFlb4
ryjgW/NUBDUubKAZLle9x3jU3JtYxgU6M67YLlhmSTx3Fb8NE9K4B+8x+tqKskZA
u2uzxSA3NKoqssSs2JKYGhemoUiLDU3Br42q1AxreQEblGhxj2q6VtUR+fS7gAsN
WRZG7n3yGPMwbvm4RgdY4QBwx53/uwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOtU
kv46pFi1CeRkLw7W3pdiqNYkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRUZERjdDNkE2NEQxMUVGQTU2MDMwNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtW9MA0GCSqGSIb3DQEB
CwUAA4IBAQAibWNPccOxkCSFyFu0ZueW0Q1fQ8XfMEW+l/ZJksqlN8LawdCPviMB
XO656A0Jqbu4wA1/MdmDbVuluWIsXOx0nD6vDR7Fe52ybXtq66jEwSkLMG4JN20s
ZzMVu0KNKK710fSPs23Pio0m/yEjPCuZVVysF+QXrVYKz2XWTvOXT9gNoXdbrgUu
Q1/CH4dADb9aa2Byi7UIeYiBvvC26gwqRh7opul5ZMMuKRmvVpj7mW8wEbGQLj89
OY45m+T5bhaLSOl9xUklJaR6WLv6hvNY0CUO1Zg7DgSAH8QP9kP/iq3cuUgbFIN0
M1/H6oKJkIye1d45vAonj7kO0/4V963i
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:00 2024 by rpki-client on console-ams.rpki-client.org