Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AC12289D4A11EE9FC86135D25BE465.roa
File: C8AC12289D4A11EE9FC86135D25BE465.roa (raw, json)
Hash identifier: oxjHkh50qrQZhZp6VNQXkLr4f1Zw8wwvu+VZ67KohO8=
Subject key identifier: D1:4D:EC:EC:80:62:3B:AB:F3:F3:BD:2A:CE:24:8B:26:E2:48:E1:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 61EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AC12289D4A11EE9FC86135D25BE465.roa
Signing time: Mon 18 Dec 2023 02:11:41 +0000
ROA not before: Mon 18 Dec 2023 02:11:38 +0000
ROA not after: Wed 18 Dec 2024 02:11:38 +0000
asID: 201411
IP address blocks: 154.202.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25067 (0x61eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 18 02:11:38 2023 GMT
Not After : Dec 18 02:11:38 2024 GMT
Subject: CN=657faa5d-62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9b:73:3f:31:52:22:a0:61:17:b8:cc:45:6d:
71:5d:16:ea:12:58:83:1f:1c:a1:41:dc:08:27:51:
c8:b7:c2:0b:b5:1b:37:b2:7e:d4:63:4c:54:08:25:
9b:7f:f9:f5:f6:7c:7a:ea:47:a6:45:d8:fe:a1:ce:
81:14:db:6b:df:55:f0:01:68:b8:02:eb:a4:ff:71:
b8:f4:04:f1:af:13:39:ef:26:a9:4e:5d:18:38:8b:
f2:b3:4e:40:05:0d:7d:bd:63:86:29:dc:57:ac:4f:
ee:05:66:11:24:c1:a6:71:09:c0:69:fd:77:08:e8:
9e:91:22:88:2e:df:f5:22:0f:10:34:33:38:da:35:
df:7d:ca:1a:d7:ec:6e:bd:48:81:7a:5e:de:f3:c8:
35:e6:e6:13:2b:90:fc:72:7f:67:c0:c4:87:96:36:
d9:6a:c6:22:31:c5:5c:48:8d:0d:f6:30:ba:ed:21:
15:c4:31:60:23:79:b8:0c:36:bf:91:24:01:ce:79:
ef:c6:a5:05:3d:d3:40:51:96:79:7c:06:32:24:3f:
d5:4d:86:11:a3:72:1f:06:56:aa:e8:b6:fd:7e:a2:
23:e0:90:93:32:b9:a3:ee:ed:f0:0e:43:0c:03:91:
29:97:fe:8b:cc:72:d3:03:82:27:0b:02:f8:5e:d1:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:EC:EC:80:62:3B:AB:F3:F3:BD:2A:CE:24:8B:26:E2:48:E1:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8AC12289D4A11EE9FC86135D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.10.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1d:ec:51:4d:e6:88:d8:ec:10:c3:78:2e:6e:6c:30:a5:c2:
58:3d:77:df:30:8f:e8:45:ba:2a:a3:b6:e1:d1:66:9c:f4:c3:
e4:a1:d9:e6:b0:44:55:e7:64:82:60:13:29:46:4f:cc:0a:ea:
3c:8e:85:67:f1:ec:4f:5c:4a:51:52:ce:f9:7f:92:8f:4d:64:
47:db:eb:95:38:99:6e:c5:83:1e:e8:c7:07:fa:6d:b0:79:f0:
d3:26:2b:d3:aa:87:db:3c:3c:bb:34:37:2d:c9:87:1e:ea:2b:
b5:79:3e:98:db:24:96:06:6b:d3:6a:e7:0f:37:0b:1d:16:c9:
d1:79:ce:c3:3c:24:11:95:4f:a1:2c:2d:10:ce:8d:20:0f:40:
55:bb:a5:b1:cb:23:9f:f0:47:39:42:c0:20:4c:66:0f:03:72:
c0:ce:ad:1f:ef:25:56:13:b5:4d:97:63:62:c2:9d:0c:95:a8:
b6:95:31:4c:e7:0f:3b:76:71:d9:8b:72:8f:11:36:2f:25:a5:
4f:08:0b:5f:65:cb:9f:35:f5:0c:1f:fb:1c:70:6f:f0:33:46:
f3:2c:f2:66:ce:c9:fd:21:f1:89:73:21:14:28:75:39:f9:ca:
ff:78:d2:16:37:6d:78:9a:ca:0a:d4:8d:41:5c:21:52:c5:af:
e6:26:00:eb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICYeswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMTgwMjExMzhaFw0yNDEyMTgwMjExMzhaMBgxFjAU
BgNVBAMTDTY1N2ZhYTVkLTYyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxm3M/MVIioGEXuMxFbXFdFuoSWIMfHKFB3AgnUci3wgu1GzeyftRjTFQI
JZt/+fX2fHrqR6ZF2P6hzoEU22vfVfABaLgC66T/cbj0BPGvEznvJqlOXRg4i/Kz
TkAFDX29Y4Yp3FesT+4FZhEkwaZxCcBp/XcI6J6RIogu3/UiDxA0MzjaNd99yhrX
7G69SIF6Xt7zyDXm5hMrkPxyf2fAxIeWNtlqxiIxxVxIjQ32MLrtIRXEMWAjebgM
Nr+RJAHOee/GpQU900BRlnl8BjIkP9VNhhGjch8GVqrotv1+oiPgkJMyuaPu7fAO
QwwDkSmX/ovMctMDgicLAvhe0TWVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0U3s
7IBiO6vz870qziSLJuJI4TwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M4QUMxMjI4OUQ0QTExRUU5RkM4NjEzNUQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaygowDQYJKoZIhvcNAQEL
BQADggEBABYd7FFN5ojY7BDDeC5ubDClwlg9d98wj+hFuiqjtuHRZpz0w+Sh2eaw
RFXnZIJgEylGT8wK6jyOhWfx7E9cSlFSzvl/ko9NZEfb65U4mW7Fgx7oxwf6bbB5
8NMmK9Oqh9s8PLs0Ny3Jhx7qK7V5PpjbJJYGa9Nq5w83Cx0WydF5zsM8JBGVT6Es
LRDOjSAPQFW7pbHLI5/wRzlCwCBMZg8DcsDOrR/vJVYTtU2XY2LCnQyVqLaVMUzn
Dzt2cdmLco8RNi8lpU8IC19ly5819Qwf+xxwb/AzRvMs8mbOyf0h8YlzIRQodTn5
yv940hY3bXiaygrUjUFcIVLFr+YmAOs=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org