Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06E6A369DA111EF85E23998762E951A.roa
File: C06E6A369DA111EF85E23998762E951A.roa (raw, json)
Hash identifier: iRI14+Je6hDfUiqNksv670CnCWxI+12UkRQzJsNikj4=
Subject key identifier: 6C:91:75:A6:01:97:E8:8D:EC:BB:52:4D:6A:D5:84:FB:2C:4B:C9:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0109AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06E6A369DA111EF85E23998762E951A.roa
Signing time: Fri 08 Nov 2024 07:19:11 +0000
ROA not before: Fri 08 Nov 2024 07:19:08 +0000
ROA not after: Sat 30 Nov 2024 07:19:08 +0000
asID: 46071
IP address blocks: 154.209.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68014 (0x109ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 8 07:19:08 2024 GMT
Not After : Nov 30 07:19:08 2024 GMT
Subject: CN=672dbb6f-47df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:87:b2:00:13:0e:7f:21:b2:d3:31:b4:9a:
7c:8d:59:a8:92:a3:e9:4c:e0:15:c6:d1:f9:d1:17:
e7:0e:9d:40:1a:19:65:19:16:1b:84:59:58:19:3f:
00:95:47:49:6c:01:51:7c:ea:6a:af:95:03:ad:56:
b3:68:df:23:6f:be:33:3e:5c:2c:15:87:56:3f:5c:
b5:1a:86:1a:58:26:70:1b:5a:ee:e3:42:dd:93:0a:
a7:27:9b:35:4a:b0:39:f6:aa:e8:5a:66:c2:bb:4d:
ff:f3:2b:70:d0:c2:a0:15:6e:2d:78:df:52:d5:0d:
6d:fb:36:c3:26:98:b2:2d:a9:66:8b:f9:cf:c3:7f:
e3:65:05:a4:ad:cf:fd:6f:81:a9:3d:73:7a:8c:e9:
af:20:9b:f6:0d:9c:55:08:e1:1d:47:dc:15:23:b6:
05:13:27:6f:f8:58:d3:c0:b2:97:77:76:0a:69:12:
df:23:ce:ee:89:98:a8:98:bf:65:24:48:5e:fd:7d:
21:5c:fd:97:b7:63:e3:be:87:39:36:04:4d:85:b6:
fa:31:1e:38:20:38:01:a4:31:66:80:dc:f3:0a:a8:
86:36:53:ab:12:f6:3c:0b:be:82:f9:52:fb:5a:67:
4c:16:96:29:a0:ac:8b:b6:64:4d:ea:fd:66:51:76:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:75:A6:01:97:E8:8D:EC:BB:52:4D:6A:D5:84:FB:2C:4B:C9:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06E6A369DA111EF85E23998762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.7.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4a:76:0d:43:9b:c6:36:41:88:88:39:df:82:10:01:cc:05:
6f:34:68:f1:7f:84:c9:a3:53:aa:f7:30:4c:ce:51:fe:75:80:
11:5c:2f:25:7d:44:69:ea:6d:0b:c6:48:f8:c3:c5:8b:10:00:
82:15:a3:85:2a:aa:64:ce:4b:d4:38:63:34:f4:5b:eb:fe:a6:
f9:4c:b8:f6:e1:7d:1b:f8:8a:c3:0f:3b:57:04:b4:1a:11:99:
2e:15:32:53:ae:d4:ad:c6:0b:6c:c0:9a:0f:83:22:d1:c7:7a:
f5:a1:bb:a7:3b:65:38:90:d9:27:eb:a8:5f:34:9b:4a:bb:59:
e9:25:7c:31:21:7e:1b:5b:e6:cd:5a:0b:ca:8d:f1:3a:49:73:
19:47:ca:a2:c3:e7:54:a6:b2:e4:91:6f:03:34:d3:9c:79:f0:
54:0a:72:5a:b5:71:56:35:0a:e7:32:60:66:a7:5c:8b:ec:00:
43:fb:e4:ce:21:f5:63:6b:63:d2:1e:77:d2:bb:a2:78:0e:57:
d2:2e:b9:1b:80:b5:84:0f:9a:04:77:23:00:4b:dc:a0:2a:69:
fb:26:9a:b9:04:88:14:b6:96:84:3f:16:2d:bc:05:5c:89:c1:
78:23:aa:aa:3c:f1:46:2b:79:dc:c8:47:e5:02:d0:c3:97:31:
e0:8e:de:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQmuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA4MDcxOTA4WhcNMjQxMTMwMDcxOTA4WjAYMRYw
FAYDVQQDEw02NzJkYmI2Zi00N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAznaHsgATDn8hstMxtJp8jVmokqPpTOAVxtH50RfnDp1AGhllGRYbhFlY
GT8AlUdJbAFRfOpqr5UDrVazaN8jb74zPlwsFYdWP1y1GoYaWCZwG1ru40Ldkwqn
J5s1SrA59qroWmbCu03/8ytw0MKgFW4teN9S1Q1t+zbDJpiyLalmi/nPw3/jZQWk
rc/9b4GpPXN6jOmvIJv2DZxVCOEdR9wVI7YFEydv+FjTwLKXd3YKaRLfI87uiZio
mL9lJEhe/X0hXP2Xt2Pjvoc5NgRNhbb6MR44IDgBpDFmgNzzCqiGNlOrEvY8C76C
+VL7WmdMFpYpoKyLtmRN6v1mUXYb9QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGyR
daYBl+iN7LtSTWrVhPssS8mbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDZFNkEzNjlEQTExMUVGODVFMjM5OTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtEHMA0GCSqGSIb3DQEB
CwUAA4IBAQBpSnYNQ5vGNkGIiDnfghABzAVvNGjxf4TJo1Oq9zBMzlH+dYARXC8l
fURp6m0Lxkj4w8WLEACCFaOFKqpkzkvUOGM09Fvr/qb5TLj24X0b+IrDDztXBLQa
EZkuFTJTrtStxgtswJoPgyLRx3r1obunO2U4kNkn66hfNJtKu1npJXwxIX4bW+bN
WgvKjfE6SXMZR8qiw+dUprLkkW8DNNOcefBUCnJatXFWNQrnMmBmp1yL7ABD++TO
IfVja2PSHnfSu6J4DlfSLrkbgLWED5oEdyMAS9ygKmn7Jpq5BIgUtpaEPxYtvAVc
icF4I6qqPPFGK3ncyEflAtDDlzHgjt78
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:33 2024 by rpki-client on console-ams.rpki-client.org