Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4345D66A4BC11EFBD299A79762E951A.roa
File: C4345D66A4BC11EFBD299A79762E951A.roa (raw, json)
Hash identifier: 4iuzvODrJhIv+x7Vw3Cq96GTsbuLUM6+ue2VlrImn4s=
Subject key identifier: D4:F0:CB:99:88:82:D4:79:94:B3:EF:9D:D2:8D:18:D7:E8:4D:F4:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4345D66A4BC11EFBD299A79762E951A.roa
Signing time: Sun 17 Nov 2024 08:20:12 +0000
ROA not before: Sun 17 Nov 2024 08:20:09 +0000
ROA not after: Wed 18 Dec 2024 08:20:09 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69208 (0x10e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 08:20:09 2024 GMT
Not After : Dec 18 08:20:09 2024 GMT
Subject: CN=6739a73c-9bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:fc:91:ce:3f:a8:72:df:04:c9:45:5b:77:
5e:c0:10:09:d9:b6:b1:a9:5c:58:4b:7c:5a:23:24:
8c:e2:3f:a5:ac:9e:5b:00:45:57:a1:1c:2c:7b:25:
23:cf:b0:c0:23:88:98:87:d0:22:d8:fd:3d:7d:ea:
03:80:e1:24:8c:83:5d:a8:ab:6a:90:10:8c:a6:c6:
a4:d5:53:3e:6f:2b:67:0b:5f:1d:92:f2:6e:c5:25:
b0:e5:d2:48:1a:e0:e5:db:bf:4c:ae:f5:21:20:ae:
f4:6f:17:f5:65:73:4c:7e:22:3c:01:7c:87:d3:34:
a8:43:55:55:83:5d:6f:87:60:89:f6:31:3d:56:5b:
e0:b2:79:fb:74:25:68:62:6f:1c:7d:c6:9e:24:ac:
56:9f:75:ad:74:71:01:68:e9:58:38:29:0e:bc:8f:
0b:1d:c5:ca:a2:60:63:74:95:44:35:21:3d:72:cb:
33:0d:cd:d1:58:a2:9a:f6:9e:e8:ec:9c:ca:45:2d:
62:47:81:e1:2d:32:ec:3a:e4:f5:65:1b:73:32:c5:
cf:aa:0f:ca:00:3c:80:99:77:cf:38:94:fa:db:3b:
f1:19:0f:ab:6c:b7:09:36:51:c3:60:fb:9c:d3:51:
b0:6a:2f:18:b1:5c:48:b5:57:96:14:e8:56:70:ac:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:CB:99:88:82:D4:79:94:B3:EF:9D:D2:8D:18:D7:E8:4D:F4:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4345D66A4BC11EFBD299A79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d5:8d:6c:d3:63:4e:cd:f0:58:7e:4c:b0:c8:dd:78:70:c4:
aa:aa:82:62:0a:09:5d:4c:c9:39:7b:7c:db:54:f7:40:50:a1:
f7:b5:a1:5b:a9:8e:f8:c3:12:2f:cf:e8:d0:f5:9f:e9:04:f5:
4f:07:81:d0:93:50:3c:18:92:4d:0e:68:4e:a0:90:7c:e3:df:
48:68:25:6b:46:75:a2:38:6c:de:10:6d:c3:4f:e4:09:b2:e9:
c0:27:67:3e:0d:9c:fb:fb:7c:1c:aa:5a:4c:b4:3e:17:9a:91:
c3:d2:c5:6b:0a:d6:d3:0b:18:31:d4:93:3b:24:ba:da:15:78:
d3:cc:ab:79:14:8e:54:92:2f:14:77:5b:c4:f6:b3:93:1c:99:
13:3a:55:e6:fc:a3:60:f4:07:70:6b:a5:31:56:00:4d:a2:2d:
1b:37:2f:27:c9:c9:a3:5d:d0:92:f5:27:48:32:6e:bc:33:64:
50:60:f6:07:35:5f:57:02:3a:26:52:61:45:51:cd:6d:16:37:
bd:c9:4f:d5:3f:c8:05:29:ad:9f:03:34:fa:cf:52:40:35:17:
18:89:17:10:ad:04:6b:24:15:6c:8d:63:89:1e:f6:02:d6:bc:
fe:35:45:48:bf:32:0a:ee:3a:c0:c7:30:97:c5:49:d7:e7:7c:
ec:0d:57:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ5YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MDgyMDA5WhcNMjQxMjE4MDgyMDA5WjAYMRYw
FAYDVQQDEw02NzM5YTczYy05YmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz7r8kc4/qHLfBMlFW3dewBAJ2baxqVxYS3xaIySM4j+lrJ5bAEVXoRws
eyUjz7DAI4iYh9Ai2P09feoDgOEkjINdqKtqkBCMpsak1VM+bytnC18dkvJuxSWw
5dJIGuDl279MrvUhIK70bxf1ZXNMfiI8AXyH0zSoQ1VVg11vh2CJ9jE9Vlvgsnn7
dCVoYm8cfcaeJKxWn3WtdHEBaOlYOCkOvI8LHcXKomBjdJVENSE9csszDc3RWKKa
9p7o7JzKRS1iR4HhLTLsOuT1ZRtzMsXPqg/KADyAmXfPOJT62zvxGQ+rbLcJNlHD
YPuc01Gwai8YsVxItVeWFOhWcKxvqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNTw
y5mIgtR5lLPvndKNGNfoTfRQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNDM0NUQ2NkE0QkMxMUVGQkQyOTlBNzk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIyMA0GCSqGSIb3DQEB
CwUAA4IBAQCB1Y1s02NOzfBYfkywyN14cMSqqoJiCgldTMk5e3zbVPdAUKH3taFb
qY74wxIvz+jQ9Z/pBPVPB4HQk1A8GJJNDmhOoJB8499IaCVrRnWiOGzeEG3DT+QJ
sunAJ2c+DZz7+3wcqlpMtD4XmpHD0sVrCtbTCxgx1JM7JLraFXjTzKt5FI5Uki8U
d1vE9rOTHJkTOlXm/KNg9Adwa6UxVgBNoi0bNy8nycmjXdCS9SdIMm68M2RQYPYH
NV9XAjomUmFFUc1tFje9yU/VP8gFKa2fAzT6z1JANRcYiRcQrQRrJBVsjWOJHvYC
1rz+NUVIvzIK7jrAxzCXxUnX53zsDVdL
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:34 2024 by rpki-client on console-ams.rpki-client.org