Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98277BAA25C11EF87B0F77C762E951A.roa
File: C98277BAA25C11EF87B0F77C762E951A.roa (raw, json)
Hash identifier: BwWFgMykT+96BJuvLhchwguvT5VQXZbyGh6fQX9SwJg=
Subject key identifier: 19:29:8B:19:90:2A:A1:05:3F:73:82:35:34:18:A8:40:DE:99:48:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98277BAA25C11EF87B0F77C762E951A.roa
Signing time: Thu 14 Nov 2024 07:48:07 +0000
ROA not before: Thu 14 Nov 2024 07:48:04 +0000
ROA not after: Tue 10 Dec 2024 07:48:04 +0000
asID: 397630
IP address blocks: 154.83.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68834 (0x10ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:48:04 2024 GMT
Not After : Dec 10 07:48:04 2024 GMT
Subject: CN=6735ab37-d447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:4a:71:dc:fd:bb:41:1d:c4:20:35:7b:c7:
2a:d6:e2:95:11:08:ea:00:d5:f0:f4:50:d0:ac:23:
4d:44:e3:a1:7a:d2:f9:50:bc:fc:4e:d1:ca:71:78:
9b:0e:d7:00:09:7e:30:05:c6:6d:b2:44:1c:b5:f0:
8c:87:64:48:d8:d8:37:54:96:b6:6f:17:8f:9b:bd:
52:1f:1a:8d:17:d3:c8:55:3a:bf:52:dc:90:6b:f5:
91:ca:9b:91:a5:20:3f:d1:53:26:35:e5:c8:48:c7:
51:f1:77:26:28:f5:6e:64:45:ea:d7:58:1e:c1:1a:
98:24:f4:bb:ff:44:85:e0:d6:8f:20:88:76:85:e5:
79:00:3c:c7:82:cf:7b:7e:71:bb:0a:c5:ad:dd:de:
31:7a:e5:47:2e:88:77:e4:4a:4b:84:6e:6c:be:2b:
63:32:f1:bc:f5:f8:86:25:e5:bb:09:13:f0:68:a4:
fb:a9:48:f0:20:2b:7f:30:1a:ec:8a:f8:10:2c:3b:
41:2f:11:eb:71:dc:e4:0f:2a:b1:cb:c9:8e:28:80:
c5:98:4e:b4:8e:4f:6f:a2:80:45:67:a8:f1:dd:da:
57:ea:97:5f:bc:7d:d6:eb:1b:13:28:7f:af:cc:b4:
d1:92:39:a1:18:48:6a:ff:78:5a:a3:ce:25:9b:f4:
4c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:29:8B:19:90:2A:A1:05:3F:73:82:35:34:18:A8:40:DE:99:48:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C98277BAA25C11EF87B0F77C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.44.0/22
Signature Algorithm: sha256WithRSAEncryption
11:16:9e:8d:a8:94:7a:ba:1a:a8:5e:1c:a7:03:22:81:81:3f:
a8:03:aa:11:a4:80:12:9f:0f:e4:7e:93:21:c4:8b:6c:2c:38:
22:0f:c6:28:59:61:25:b2:bf:2b:97:da:40:6c:0d:d4:c4:11:
d5:2a:a9:3b:21:98:a8:68:cc:fe:36:37:9c:ed:0d:d0:82:a3:
f4:43:f5:ad:ec:36:aa:f1:38:74:77:b4:a1:9d:7b:2a:bf:39:
10:e3:a2:05:e3:0c:e4:b1:e6:f0:2f:ef:d6:79:2e:94:39:fe:
88:fa:58:f1:dc:2a:c6:70:89:95:52:10:9d:b9:cc:d4:30:f7:
64:a7:98:52:05:02:b9:2d:6e:61:8c:97:4c:58:3e:b1:d8:e1:
6f:ad:4d:11:74:66:02:5c:a2:f4:d6:20:d0:e8:41:2f:b6:fd:
6e:67:bb:5d:7c:aa:58:86:a1:55:74:25:e2:6f:27:97:27:0a:
c9:49:a3:c1:1c:53:c4:34:a6:f7:dd:cd:b6:cd:4c:c1:c3:f3:
7d:5e:47:4c:f4:56:de:e6:47:f6:15:5c:dc:14:a6:a2:ed:27:
4f:d8:82:9d:6d:40:a4:c0:c8:84:9b:fa:43:18:2e:73:10:c8:
06:a8:a3:39:d8:55:11:d2:c0:50:45:29:75:71:b7:dd:9f:fc:
01:df:42:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQziMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE0MDc0ODA0WhcNMjQxMjEwMDc0ODA0WjAYMRYw
FAYDVQQDEw02NzM1YWIzNy1kNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr4dKcdz9u0EdxCA1e8cq1uKVEQjqANXw9FDQrCNNROOhetL5ULz8TtHK
cXibDtcACX4wBcZtskQctfCMh2RI2Ng3VJa2bxePm71SHxqNF9PIVTq/UtyQa/WR
ypuRpSA/0VMmNeXISMdR8XcmKPVuZEXq11gewRqYJPS7/0SF4NaPIIh2heV5ADzH
gs97fnG7CsWt3d4xeuVHLoh35EpLhG5svitjMvG89fiGJeW7CRPwaKT7qUjwICt/
MBrsivgQLDtBLxHrcdzkDyqxy8mOKIDFmE60jk9vooBFZ6jx3dpX6pdfvH3W6xsT
KH+vzLTRkjmhGEhq/3hao84lm/RMQQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBkp
ixmQKqEFP3OCNTQYqEDemUjWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOTgyNzdCQUEyNUMxMUVGODdCMEY3N0M3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlMsMA0GCSqGSIb3DQEB
CwUAA4IBAQARFp6NqJR6uhqoXhynAyKBgT+oA6oRpIASnw/kfpMhxItsLDgiD8Yo
WWElsr8rl9pAbA3UxBHVKqk7IZioaMz+Njec7Q3QgqP0Q/Wt7Daq8Th0d7ShnXsq
vzkQ46IF4wzksebwL+/WeS6UOf6I+ljx3CrGcImVUhCduczUMPdkp5hSBQK5LW5h
jJdMWD6x2OFvrU0RdGYCXKL01iDQ6EEvtv1uZ7tdfKpYhqFVdCXibyeXJwrJSaPB
HFPENKb33c22zUzBw/N9XkdM9Fbe5kf2FVzcFKai7SdP2IKdbUCkwMiEm/pDGC5z
EMgGqKM52FUR0sBQRSl1cbfdn/wB30KX
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:46 2024 by rpki-client on console-fra.rpki-client.org