Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB63B130986111EF987AD272762E951A.roa
File: BB63B130986111EF987AD272762E951A.roa (raw, json)
Hash identifier: wtEmTe5SlXJxr+gFC5QqB+Gi6RDAcRJBtTx4CCDZkIk=
Subject key identifier: 50:E6:11:5F:20:EB:76:C2:24:2A:F5:73:23:83:47:6B:71:63:B0:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB63B130986111EF987AD272762E951A.roa
Signing time: Fri 01 Nov 2024 14:58:20 +0000
ROA not before: Fri 01 Nov 2024 14:58:16 +0000
ROA not after: Tue 03 Dec 2024 14:58:16 +0000
asID: 203020
IP address blocks: 154.207.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66809 (0x104f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:58:16 2024 GMT
Not After : Dec 3 14:58:16 2024 GMT
Subject: CN=6724ec8b-64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:8e:58:e7:54:6e:6e:3c:1b:32:7d:e1:17:
ee:23:c1:2a:9f:d2:d2:88:cf:f8:fa:c7:43:85:60:
1e:42:8f:1b:e7:35:c5:f0:de:e8:2e:1f:4e:23:f1:
78:49:05:c8:df:a3:a5:10:b0:6d:70:7d:72:92:6a:
12:d8:a6:fa:c7:aa:27:a7:eb:7e:c1:2e:67:5a:d2:
12:16:a4:e7:a0:ad:76:c7:02:d3:86:61:93:48:e6:
ac:05:38:f9:3f:55:92:55:d2:5f:0f:47:a5:b5:b9:
27:fc:b9:bd:22:57:0b:0c:b5:8a:8b:89:5e:63:36:
c3:f0:5b:fe:e5:ca:48:fc:dc:5d:66:90:85:5e:98:
ac:2f:2d:25:4a:ed:f5:65:87:73:17:81:96:ed:fb:
19:da:f6:12:4b:a4:2b:1b:b0:ba:cf:f7:19:83:af:
8c:1f:29:26:28:33:6d:52:7e:42:97:89:fb:c9:c5:
65:bb:06:40:9e:54:c9:c7:89:73:1e:77:a4:37:de:
8f:33:b7:35:75:a6:08:b8:48:fc:2c:6f:36:c7:f6:
65:df:48:0b:a8:a9:ee:28:49:3b:46:8b:3c:aa:a2:
6f:47:32:e1:83:6b:c7:c4:87:bd:25:65:50:cd:35:
01:48:59:df:60:51:9d:cd:4b:07:45:c6:83:09:2e:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E6:11:5F:20:EB:76:C2:24:2A:F5:73:23:83:47:6B:71:63:B0:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB63B130986111EF987AD272762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:46:6a:fc:33:c4:01:97:f2:02:a7:07:6b:03:23:86:12:a6:
33:21:95:74:ef:77:a3:67:93:bf:c8:92:05:59:cc:0b:11:46:
d1:57:b5:60:42:69:aa:77:5d:7d:49:06:3d:86:f6:f5:d8:9a:
e0:41:cc:c8:c4:7c:39:ed:fd:06:0e:4c:3e:cd:73:1f:3f:7d:
fe:4d:a4:76:ca:35:d2:3b:24:28:b8:11:4c:19:d0:0f:6e:59:
b2:5e:50:f4:32:a3:b9:ac:77:ca:13:3c:cd:a2:d6:2a:a0:4d:
3a:2e:30:c1:e8:50:ac:20:8d:f2:c7:b6:74:2b:04:fa:27:9f:
ec:f5:52:25:4f:fb:3b:58:7a:ca:07:e9:1b:58:68:85:76:ba:
e8:ea:13:f7:cf:f8:c4:27:d1:98:70:26:3a:92:8a:e7:80:8b:
08:5b:19:d9:77:71:6c:fb:96:95:86:e1:8f:0e:dd:75:4a:fa:
91:35:4e:81:b6:a2:06:ea:87:3c:e4:9b:bc:e1:70:ff:d8:44:
51:55:2d:c3:dc:af:db:24:f1:cc:47:20:c7:d7:66:9b:9d:38:
a7:02:ab:63:db:9e:a0:dd:f5:38:cb:eb:1e:a4:35:3a:eb:24:
86:c0:29:31:5f:8c:35:74:45:e9:52:61:8b:89:f5:22:c2:81:
e3:8d:65:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQT5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTAxMTQ1ODE2WhcNMjQxMjAzMTQ1ODE2WjAYMRYw
FAYDVQQDEw02NzI0ZWM4Yi02NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAubaOWOdUbm48GzJ94RfuI8Eqn9LSiM/4+sdDhWAeQo8b5zXF8N7oLh9O
I/F4SQXI36OlELBtcH1ykmoS2Kb6x6onp+t+wS5nWtISFqTnoK12xwLThmGTSOas
BTj5P1WSVdJfD0eltbkn/Lm9IlcLDLWKi4leYzbD8Fv+5cpI/NxdZpCFXpisLy0l
Su31ZYdzF4GW7fsZ2vYSS6QrG7C6z/cZg6+MHykmKDNtUn5Cl4n7ycVluwZAnlTJ
x4lzHnekN96PM7c1daYIuEj8LG82x/Zl30gLqKnuKEk7Ros8qqJvRzLhg2vHxIe9
JWVQzTUBSFnfYFGdzUsHRcaDCS4/swIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFDm
EV8g63bCJCr1cyODR2txY7D6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjYzQjEzMDk4NjExMUVGOTg3QUQyNzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDms/wMA0GCSqGSIb3DQEB
CwUAA4IBAQANRmr8M8QBl/ICpwdrAyOGEqYzIZV073ejZ5O/yJIFWcwLEUbRV7Vg
Qmmqd119SQY9hvb12JrgQczIxHw57f0GDkw+zXMfP33+TaR2yjXSOyQouBFMGdAP
blmyXlD0MqO5rHfKEzzNotYqoE06LjDB6FCsII3yx7Z0KwT6J5/s9VIlT/s7WHrK
B+kbWGiFdrro6hP3z/jEJ9GYcCY6korngIsIWxnZd3Fs+5aVhuGPDt11SvqRNU6B
tqIG6oc85Ju84XD/2ERRVS3D3K/bJPHMRyDH12abnTinAqtj256g3fU4y+sepDU6
6ySGwCkxX4w1dEXpUmGLifUiwoHjjWX8
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:24 2024 by rpki-client on console-ams.rpki-client.org