Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF35929E014D11EFB9F95804017001B1.roa
File: AF35929E014D11EFB9F95804017001B1.roa (raw, json)
Hash identifier: XHkV597budfzEzieCAKWmAZGiGgDEDlYWovg8qjwUic=
Subject key identifier: 62:CA:66:42:7E:C8:AF:67:50:B3:11:B0:F0:A8:12:C4:6A:EE:A8:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF35929E014D11EFB9F95804017001B1.roa
Signing time: Tue 23 Apr 2024 08:44:24 +0000
ROA not before: Tue 23 Apr 2024 08:44:20 +0000
ROA not after: Sat 11 May 2024 08:44:20 +0000
asID: 9009
IP address blocks: 154.92.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44850 (0xaf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:44:20 2024 GMT
Not After : May 11 08:44:20 2024 GMT
Subject: CN=662774e7-410b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:1f:84:70:59:ea:9e:6a:ff:73:8d:a8:7d:
35:15:a6:ca:ba:dd:18:4b:3e:57:2b:a4:6b:10:a4:
4f:2b:b6:c6:91:76:f2:ab:eb:52:82:9e:92:ca:b5:
af:8a:1d:1f:bd:65:bb:15:0e:42:82:0b:52:3c:67:
4c:77:aa:00:59:f6:60:9a:e7:35:43:df:58:50:49:
31:c1:37:68:01:c9:fc:a2:09:73:77:38:8f:9e:24:
87:eb:96:05:8e:7f:d9:6d:32:d2:b9:75:dc:9c:d0:
45:6f:2d:c4:ce:c0:18:53:c9:9c:3f:88:0c:a1:0a:
79:cf:5e:1b:61:68:b1:70:81:e7:14:28:33:3c:c7:
ee:31:5d:18:08:cc:2c:2f:79:a6:88:e9:c3:24:48:
e1:57:3f:05:8a:c6:77:8e:4c:e3:47:5f:bc:67:59:
9a:67:79:17:37:cd:0d:c0:a6:2f:12:a0:43:d3:39:
56:ca:c1:cd:6d:70:ef:44:55:9d:4d:2f:3b:70:cf:
25:66:a8:5c:9a:9b:7e:fe:bf:da:bf:78:ad:a5:d8:
52:33:4d:9e:98:98:a3:82:eb:36:25:6d:d3:11:3b:
35:d2:74:ca:3b:ee:c7:92:59:b6:2e:91:00:d5:a0:
03:24:66:f2:32:e7:1c:9d:2c:df:d5:36:2c:e2:c5:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CA:66:42:7E:C8:AF:67:50:B3:11:B0:F0:A8:12:C4:6A:EE:A8:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF35929E014D11EFB9F95804017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.126.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b5:40:f1:bb:ed:3a:37:b4:ca:a3:8f:55:a1:8a:8d:d3:f5:
19:4d:03:8d:8e:4f:09:47:36:6c:a9:d4:25:20:de:60:42:63:
c6:aa:d5:de:bc:03:1a:26:2e:b5:4b:f4:d6:b6:31:2c:ee:8f:
42:3f:31:b8:27:61:a9:bd:bf:ea:a6:01:b6:2e:3d:e5:ab:74:
d3:71:29:42:b7:88:00:77:72:9d:97:04:86:bc:7d:d5:7a:23:
fe:a8:31:47:49:c8:8d:3b:71:1b:30:71:43:bf:d5:15:2c:1d:
99:50:ff:66:de:ae:4f:29:99:eb:ae:6e:b0:36:0b:95:9c:df:
4a:4b:b0:8a:8c:f8:6a:2c:5e:92:7b:38:53:40:5b:8e:c8:30:
93:6c:da:8a:43:47:be:fc:c5:bd:bf:43:a2:e3:fa:45:6a:04:
d2:10:96:d5:23:4c:f9:03:4b:ab:3a:11:bd:6b:bb:e3:bb:5c:
2a:3d:bb:65:86:08:4d:ba:ca:54:0e:ad:42:4a:88:c3:0f:91:
f3:e9:d1:26:3f:ab:07:29:4b:5d:1a:34:8a:4b:f9:10:d4:73:
49:19:3b:ca:32:b4:33:64:fc:61:b3:57:be:74:86:bf:40:ff:
2c:4f:96:24:87:68:a1:b4:6a:03:36:15:bb:23:cf:31:62:cf:
0b:87:87:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK8yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMDg0NDIwWhcNMjQwNTExMDg0NDIwWjAYMRYw
FAYDVQQDEw02NjI3NzRlNy00MTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxdEfhHBZ6p5q/3ONqH01FabKut0YSz5XK6RrEKRPK7bGkXbyq+tSgp6S
yrWvih0fvWW7FQ5CggtSPGdMd6oAWfZgmuc1Q99YUEkxwTdoAcn8oglzdziPniSH
65YFjn/ZbTLSuXXcnNBFby3EzsAYU8mcP4gMoQp5z14bYWixcIHnFCgzPMfuMV0Y
CMwsL3mmiOnDJEjhVz8FisZ3jkzjR1+8Z1maZ3kXN80NwKYvEqBD0zlWysHNbXDv
RFWdTS87cM8lZqhcmpt+/r/av3itpdhSM02emJijgus2JW3TETs10nTKO+7Hklm2
LpEA1aADJGbyMuccnSzf1TYs4sVyiwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGLK
ZkJ+yK9nULMRsPCoEsRq7qjJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRjM1OTI5RTAxNEQxMUVGQjlGOTU4MDQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlx+MA0GCSqGSIb3DQEB
CwUAA4IBAQAZtUDxu+06N7TKo49VoYqN0/UZTQONjk8JRzZsqdQlIN5gQmPGqtXe
vAMaJi61S/TWtjEs7o9CPzG4J2Gpvb/qpgG2Lj3lq3TTcSlCt4gAd3KdlwSGvH3V
eiP+qDFHSciNO3EbMHFDv9UVLB2ZUP9m3q5PKZnrrm6wNguVnN9KS7CKjPhqLF6S
ezhTQFuOyDCTbNqKQ0e+/MW9v0Oi4/pFagTSEJbVI0z5A0urOhG9a7vju1wqPbtl
hghNuspUDq1CSojDD5Hz6dEmP6sHKUtdGjSKS/kQ1HNJGTvKMrQzZPxhs1e+dIa/
QP8sT5Ykh2ihtGoDNhW7I88xYs8Lh4fq
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:41 2024 by rpki-client on console-ams.rpki-client.org