Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9B935F074CD11EF9282C048762E951A.roa
File: C9B935F074CD11EF9282C048762E951A.roa (raw, json)
Hash identifier: cOJ64jgpREU/R5m5NwMA/3EXS9SSCHwNRaQksTlmLCM=
Subject key identifier: C2:14:BB:10:87:7A:23:CF:7B:91:41:5B:69:1C:EF:78:6F:DB:0E:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9B935F074CD11EF9282C048762E951A.roa
Signing time: Tue 17 Sep 2024 08:21:07 +0000
ROA not before: Tue 17 Sep 2024 08:21:04 +0000
ROA not after: Sat 30 Nov 2024 08:21:04 +0000
asID: 142403
IP address blocks: 154.209.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61436 (0xeffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:21:04 2024 GMT
Not After : Nov 30 08:21:04 2024 GMT
Subject: CN=66e93bf3-5ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:1e:97:9b:c5:13:61:41:d6:ae:5b:9a:9b:
4b:8d:e1:7d:49:2c:a3:fc:eb:10:e0:5c:6c:a0:5a:
0c:e5:5c:7a:8c:87:26:24:04:6f:7e:13:a8:32:2c:
1c:75:00:75:f1:8d:a2:f5:1d:18:61:f4:f8:f9:09:
18:85:5c:68:aa:fd:a7:36:84:b4:ca:01:c6:91:99:
20:48:35:08:cb:c5:47:98:9e:92:ef:dd:71:81:5d:
88:6f:d0:90:5a:36:43:67:81:36:ce:1a:fb:9f:92:
2c:ec:aa:79:e3:b5:b7:99:fb:29:25:fc:95:6a:02:
dd:cf:5a:a7:8b:f9:7b:24:2a:c1:0d:67:4a:27:0e:
53:4e:1a:c0:24:76:67:b0:d0:91:50:aa:b3:2e:ea:
ee:88:52:c9:4a:68:11:2d:0a:01:e0:74:80:e8:ba:
1e:56:0f:50:f2:0f:c0:36:fa:b2:1a:3c:1e:a2:56:
4e:07:e5:13:f3:10:46:60:ff:3c:f5:8a:09:25:e1:
7e:6e:07:60:89:b3:5e:d4:6c:bb:fb:aa:88:19:b8:
a9:b8:40:0f:ab:84:b0:62:6e:f3:dc:49:37:49:f1:
ee:c7:a5:1a:f9:ef:a8:34:10:9e:77:63:c7:2d:ec:
30:26:f7:7f:32:14:d4:db:79:68:b0:87:d1:42:0c:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:BB:10:87:7A:23:CF:7B:91:41:5B:69:1C:EF:78:6F:DB:0E:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9B935F074CD11EF9282C048762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.5.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:3f:c0:86:dc:03:bd:1a:49:07:5a:0f:48:25:50:e6:4d:2d:
71:b2:d9:de:30:3d:ff:d7:f1:e5:4d:d6:c4:31:76:d0:b9:a7:
f6:43:50:db:34:43:af:2c:16:02:f0:b2:f9:99:e5:3e:9e:49:
cb:bc:69:ca:fb:2f:79:a1:a2:37:22:80:ed:c4:40:0f:b6:de:
2e:13:87:c3:19:23:99:33:7e:a4:8e:c8:d4:66:56:0f:e2:3b:
d8:22:b3:a1:da:25:f1:fb:34:93:06:15:23:8f:e6:65:e7:5d:
ad:74:32:ef:6d:4b:51:e5:b1:4d:82:95:41:51:eb:1f:85:dd:
0a:5d:d2:b2:9a:b7:f2:a4:c1:2b:19:b3:47:a0:8d:e2:99:ee:
4e:6f:b3:ad:af:8c:c3:a9:e9:ae:87:1a:34:a5:4e:a8:81:4e:
c4:84:8c:65:97:cd:2f:b9:d4:89:58:e4:db:a2:fd:e3:29:7f:
bb:a7:cf:15:2a:ee:a5:13:4e:0a:c0:c8:b7:31:b6:99:06:f4:
ac:e3:8b:f0:af:5c:ca:a4:e5:20:fc:62:95:de:71:b6:9e:52:
47:7a:63:b7:40:20:0f:73:8e:61:f6:62:f8:9a:9c:29:65:b2:
82:22:7e:4b:10:f9:a8:02:fd:4c:1a:22:59:68:a6:1d:d1:2c:
e6:cf:16:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO/8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDgyMTA0WhcNMjQxMTMwMDgyMTA0WjAYMRYw
FAYDVQQDEw02NmU5M2JmMy01YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAywYel5vFE2FB1q5bmptLjeF9SSyj/OsQ4FxsoFoM5Vx6jIcmJARvfhOo
MiwcdQB18Y2i9R0YYfT4+QkYhVxoqv2nNoS0ygHGkZkgSDUIy8VHmJ6S791xgV2I
b9CQWjZDZ4E2zhr7n5Is7Kp547W3mfspJfyVagLdz1qni/l7JCrBDWdKJw5TThrA
JHZnsNCRUKqzLuruiFLJSmgRLQoB4HSA6LoeVg9Q8g/ANvqyGjweolZOB+UT8xBG
YP889YoJJeF+bgdgibNe1Gy7+6qIGbipuEAPq4SwYm7z3Ek3SfHux6Ua+e+oNBCe
d2PHLewwJvd/MhTU23losIfRQgx1cQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMIU
uxCHeiPPe5FBW2kc73hv2w4EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOUI5MzVGMDc0Q0QxMUVGOTI4MkMwNDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtEFMA0GCSqGSIb3DQEB
CwUAA4IBAQDYP8CG3AO9GkkHWg9IJVDmTS1xstneMD3/1/HlTdbEMXbQuaf2Q1Db
NEOvLBYC8LL5meU+nknLvGnK+y95oaI3IoDtxEAPtt4uE4fDGSOZM36kjsjUZlYP
4jvYIrOh2iXx+zSTBhUjj+Zl512tdDLvbUtR5bFNgpVBUesfhd0KXdKymrfypMEr
GbNHoI3ime5Ob7Otr4zDqemuhxo0pU6ogU7EhIxll80vudSJWOTbov3jKX+7p88V
Ku6lE04KwMi3MbaZBvSs44vwr1zKpOUg/GKV3nG2nlJHemO3QCAPc45h9mL4mpwp
ZbKCIn5LEPmoAv1MGiJZaKYd0SzmzxbA
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:25 2024 by rpki-client on console-fra.rpki-client.org