Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA084C89C1D11EF956CA488762E951A.roa
File: BCA084C89C1D11EF956CA488762E951A.roa (raw, json)
Hash identifier: zUJlhCxpL2OgaB/ps1BEcb+IP6lNisHCruICoCFJU/4=
Subject key identifier: AA:43:57:45:9D:AC:6D:86:25:60:A4:4C:1D:3D:15:E4:3D:B5:AC:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010878
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA084C89C1D11EF956CA488762E951A.roa
Signing time: Wed 06 Nov 2024 09:01:41 +0000
ROA not before: Wed 06 Nov 2024 09:01:37 +0000
ROA not after: Thu 09 Jan 2025 09:01:37 +0000
asID: 25818
IP address blocks: 154.91.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67704 (0x10878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 09:01:37 2024 GMT
Not After : Jan 9 09:01:37 2025 GMT
Subject: CN=672b3074-2dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:06:07:ba:85:a2:a5:68:ab:b7:40:69:df:
50:85:90:0b:66:f6:6a:26:c1:54:c9:f6:5e:2d:1b:
31:ba:6b:63:ed:f2:9a:33:7b:05:9d:18:dc:cc:db:
0f:a8:1f:7a:48:11:ae:27:62:43:9a:37:1c:e8:ac:
ee:78:97:70:2b:aa:7c:e0:79:a0:b6:51:f4:12:51:
8b:16:2d:1c:43:5f:a4:c4:23:b5:6c:1c:ad:08:35:
2e:48:ff:62:92:22:54:a7:bc:0c:dc:62:00:a9:af:
9d:ea:08:58:69:5e:39:02:b5:8b:fd:5a:48:a0:a8:
ea:c6:0c:e3:7d:24:31:13:38:6e:e2:c7:93:66:ee:
42:07:bc:83:c2:45:4a:f1:06:97:c5:6f:cb:c2:c3:
0b:9c:23:67:be:ce:8c:68:78:bd:e1:49:0b:cf:3b:
2c:4c:88:af:3d:2a:10:c7:b6:52:4a:51:03:13:1b:
33:f4:b3:1a:4f:9a:cd:b3:47:d6:46:90:09:02:ab:
56:b7:3a:d3:1f:64:b6:f7:08:45:25:cb:c8:b5:1c:
6b:a3:00:e3:d0:97:84:39:21:bd:78:9a:1b:75:84:
42:5a:3e:40:e7:0c:ba:68:d0:e6:a7:6e:9e:48:b3:
e8:12:5f:76:07:c4:0a:3f:0f:53:5a:b7:22:cc:ac:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:57:45:9D:AC:6D:86:25:60:A4:4C:1D:3D:15:E4:3D:B5:AC:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA084C89C1D11EF956CA488762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.208.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:79:9e:fd:f9:c4:70:f9:32:58:0d:4b:63:fd:d1:b5:7e:f7:
73:d5:c1:1b:0c:b5:0a:86:da:43:ca:95:15:f0:6c:d7:9b:0e:
46:77:9b:d1:50:c4:62:93:37:6a:cc:f7:39:62:da:dd:65:9f:
9d:b7:80:1c:d4:26:a7:34:ab:63:88:0a:3e:9d:a0:7b:dd:aa:
6f:87:b2:6d:17:7a:1f:3f:4c:c8:34:95:63:2e:c8:b5:57:e2:
33:95:d5:07:dc:f9:7a:1c:0b:29:93:35:54:81:a9:4c:4e:0c:
a3:a9:7c:ae:ae:5d:13:0b:f7:e0:b2:56:cd:26:1f:27:03:9d:
1e:98:9c:18:6b:11:25:3e:0b:d0:85:5a:85:45:cd:78:d0:28:
ef:a2:6d:ad:ab:a5:9b:0a:38:a3:19:34:b7:36:57:d3:38:5e:
4d:30:c4:f2:c0:7f:ab:a3:62:f9:25:d7:76:ee:fb:9d:a1:d8:
c6:66:20:0c:86:8c:99:b0:05:e6:c3:36:fb:3a:86:f4:19:fd:
dc:f0:cd:0f:21:f2:22:da:55:6f:e4:26:f4:98:1b:59:90:92:
a7:e3:44:8a:e2:f3:ae:7f:ec:dc:1b:e0:d3:f6:3f:f7:c5:9a:
f9:ed:3f:16:84:a5:9f:5b:8d:d5:ae:3a:17:8e:d8:bd:b4:0f:
3d:b6:b5:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQh4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA2MDkwMTM3WhcNMjUwMTA5MDkwMTM3WjAYMRYw
FAYDVQQDEw02NzJiMzA3NC0yZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzTgGB7qFoqVoq7dAad9QhZALZvZqJsFUyfZeLRsxumtj7fKaM3sFnRjc
zNsPqB96SBGuJ2JDmjcc6KzueJdwK6p84HmgtlH0ElGLFi0cQ1+kxCO1bBytCDUu
SP9ikiJUp7wM3GIAqa+d6ghYaV45ArWL/VpIoKjqxgzjfSQxEzhu4seTZu5CB7yD
wkVK8QaXxW/LwsMLnCNnvs6MaHi94UkLzzssTIivPSoQx7ZSSlEDExsz9LMaT5rN
s0fWRpAJAqtWtzrTH2S29whFJcvItRxrowDj0JeEOSG9eJobdYRCWj5A5wy6aNDm
p26eSLPoEl92B8QKPw9TWrcizKzhSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKpD
V0WdrG2GJWCkTB09FeQ9taxdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0EwODRDODlDMUQxMUVGOTU2Q0E0ODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlvQMA0GCSqGSIb3DQEB
CwUAA4IBAQAaeZ79+cRw+TJYDUtj/dG1fvdz1cEbDLUKhtpDypUV8GzXmw5Gd5vR
UMRikzdqzPc5YtrdZZ+dt4Ac1CanNKtjiAo+naB73apvh7JtF3ofP0zINJVjLsi1
V+IzldUH3Pl6HAspkzVUgalMTgyjqXyurl0TC/fgslbNJh8nA50emJwYaxElPgvQ
hVqFRc140Cjvom2tq6WbCjijGTS3NlfTOF5NMMTywH+ro2L5Jdd27vudodjGZiAM
hoyZsAXmwzb7Oob0Gf3c8M0PIfIi2lVv5Cb0mBtZkJKn40SK4vOuf+zcG+DT9j/3
xZr57T8WhKWfW43VrjoXjti9tA89trV1
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org