Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF9101F074CF11EFAF25AA55762E951A.roa
File: BF9101F074CF11EFAF25AA55762E951A.roa (raw, json)
Hash identifier: vBEWZDO6cTVJMVwafljkRMxS3/NMq8daVy/qhQbFLhk=
Subject key identifier: C8:2B:02:0D:65:AA:9A:70:0E:FE:EB:64:0D:1D:BF:FE:E2:10:81:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F014
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF9101F074CF11EFAF25AA55762E951A.roa
Signing time: Tue 17 Sep 2024 08:35:09 +0000
ROA not before: Tue 17 Sep 2024 08:35:06 +0000
ROA not after: Sat 30 Nov 2024 08:35:06 +0000
asID: 138152
IP address blocks: 154.92.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61460 (0xf014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:35:06 2024 GMT
Not After : Nov 30 08:35:06 2024 GMT
Subject: CN=66e93f3d-f379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:2d:8b:b0:57:cf:1a:df:73:74:02:02:b3:
56:11:dd:54:73:59:55:26:e3:27:ae:f2:fb:53:6c:
44:67:0f:55:f2:8b:0e:3b:aa:71:fa:c7:a7:41:69:
71:66:e4:53:6b:b5:6d:49:8f:95:7e:e5:2c:44:d3:
55:d7:04:14:a6:c2:fb:2f:d4:a3:b4:32:ec:8a:50:
35:a6:9f:70:cf:e8:5a:49:d4:1c:b3:0d:24:23:43:
ed:30:4c:1d:2e:da:f8:f0:ea:41:05:aa:07:cf:6e:
73:d8:62:bb:10:58:3e:2d:f2:9e:00:cd:4c:5b:73:
51:e2:e1:26:0d:76:22:37:9a:ee:be:6a:51:4a:41:
af:75:74:0e:b8:ff:f5:5b:76:24:28:13:b6:af:70:
38:89:56:7a:86:cc:db:41:bf:e6:11:1a:38:47:f9:
4e:1c:eb:ad:32:a8:60:df:86:d6:01:70:cd:97:d9:
aa:eb:1f:d9:e4:cc:66:29:11:f0:32:f1:f9:90:2e:
49:47:04:b8:03:64:18:cf:bb:c5:0d:e5:ef:bc:da:
41:3c:f8:18:67:f5:c9:43:c6:98:2b:ea:2d:1c:e7:
c3:36:45:81:e9:14:80:3f:ee:bf:3e:03:f4:0c:5e:
e3:ca:f1:7a:a1:c8:0c:10:ca:ff:f2:3c:53:aa:41:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:02:0D:65:AA:9A:70:0E:FE:EB:64:0D:1D:BF:FE:E2:10:81:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF9101F074CF11EFAF25AA55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.23.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c4:62:d4:91:1a:b9:7d:b5:2d:04:b7:5c:1c:6c:8e:19:5c:
81:33:d9:13:5f:16:d0:2f:b8:b4:cc:99:e0:ad:f3:55:0d:f1:
30:aa:f0:0c:81:be:5b:84:d5:89:30:18:f9:a6:64:5a:be:5e:
1a:88:82:3f:07:37:a9:e6:db:8f:d2:3b:d0:78:ed:5b:37:92:
64:02:95:d6:80:b6:c4:13:5f:a0:d4:71:f0:75:18:2b:07:17:
7d:e8:c7:4f:4b:f5:f5:0f:6f:e1:5a:2d:aa:1b:3e:a0:2d:4a:
19:49:de:d2:d1:93:f8:05:80:89:cc:ba:89:f3:3f:2f:bc:1a:
16:e6:a6:1b:a5:70:e5:5a:65:7f:db:f8:27:c4:d9:d5:da:53:
1e:32:41:14:5e:f0:23:70:89:5c:bd:0b:a4:6d:21:e3:f9:54:
fa:5c:54:1d:e6:80:0c:4a:d7:bc:84:8b:7d:73:71:c5:2f:41:
5c:6f:12:27:33:df:e0:56:8f:bb:c2:0c:71:19:9c:ec:56:a9:
56:06:d7:3a:c1:d4:bb:52:a3:cd:a1:91:e5:e9:f6:75:b0:03:
b7:8c:ff:e6:8c:8f:21:f4:aa:72:92:16:41:d0:4f:56:ee:36:
77:4f:2b:0e:01:a3:46:00:cf:c1:ca:fb:6d:bd:63:49:87:cb:
11:a2:61:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPAUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDgzNTA2WhcNMjQxMTMwMDgzNTA2WjAYMRYw
FAYDVQQDEw02NmU5M2YzZC1mMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt80ti7BXzxrfc3QCArNWEd1Uc1lVJuMnrvL7U2xEZw9V8osOO6px+sen
QWlxZuRTa7VtSY+VfuUsRNNV1wQUpsL7L9SjtDLsilA1pp9wz+haSdQcsw0kI0Pt
MEwdLtr48OpBBaoHz25z2GK7EFg+LfKeAM1MW3NR4uEmDXYiN5ruvmpRSkGvdXQO
uP/1W3YkKBO2r3A4iVZ6hszbQb/mERo4R/lOHOutMqhg34bWAXDNl9mq6x/Z5Mxm
KRHwMvH5kC5JRwS4A2QYz7vFDeXvvNpBPPgYZ/XJQ8aYK+otHOfDNkWB6RSAP+6/
PgP0DF7jyvF6ocgMEMr/8jxTqkHgBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMgr
Ag1lqppwDv7rZA0dv/7iEIF+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjkxMDFGMDc0Q0YxMUVGQUYyNUFBNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwXMA0GCSqGSIb3DQEB
CwUAA4IBAQCIxGLUkRq5fbUtBLdcHGyOGVyBM9kTXxbQL7i0zJngrfNVDfEwqvAM
gb5bhNWJMBj5pmRavl4aiII/Bzep5tuP0jvQeO1bN5JkApXWgLbEE1+g1HHwdRgr
Bxd96MdPS/X1D2/hWi2qGz6gLUoZSd7S0ZP4BYCJzLqJ8z8vvBoW5qYbpXDlWmV/
2/gnxNnV2lMeMkEUXvAjcIlcvQukbSHj+VT6XFQd5oAMSte8hIt9c3HFL0FcbxIn
M9/gVo+7wgxxGZzsVqlWBtc6wdS7UqPNoZHl6fZ1sAO3jP/mjI8h9KpykhZB0E9W
7jZ3TysOAaNGAM/ByvttvWNJh8sRomH7
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:23 2024 by rpki-client on console-fra.rpki-client.org