Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6892C87F0F11EFB8515657762E951A.roa
File: CB6892C87F0F11EFB8515657762E951A.roa (raw, json)
Hash identifier: M+hvxR6xIwQ4ASPELpw/uMApJ7gRLLF6sH84HkBhQU4=
Subject key identifier: 5D:17:A2:ED:EE:7F:56:76:41:A4:4D:7B:B9:EC:6E:ED:EE:6E:A0:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6892C87F0F11EFB8515657762E951A.roa
Signing time: Mon 30 Sep 2024 09:38:48 +0000
ROA not before: Mon 30 Sep 2024 09:38:45 +0000
ROA not after: Sat 30 Nov 2024 09:38:45 +0000
asID: 138915
IP address blocks: 154.93.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62906 (0xf5ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:38:45 2024 GMT
Not After : Nov 30 09:38:45 2024 GMT
Subject: CN=66fa71a8-eaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:3c:97:79:3f:10:72:a1:d8:21:27:aa:ed:
26:0d:57:8c:ca:51:b4:eb:a5:58:47:5b:1e:8b:7d:
b6:f1:37:06:d9:5e:ea:e0:9b:a0:21:bd:5e:45:a3:
a9:1a:36:3b:96:c2:ac:70:ca:3d:0d:f1:e2:22:16:
20:eb:d1:42:40:23:ee:42:49:32:ca:e6:a2:c6:fb:
62:a1:7b:40:df:b3:34:26:b6:52:a6:cc:74:40:65:
d3:73:9e:c7:50:43:3c:cb:00:dc:a4:50:86:02:01:
38:de:c3:11:f1:a3:7e:30:1f:0b:b9:8e:23:45:a9:
99:13:b7:b3:05:f1:c7:3b:ed:45:13:de:77:f5:b2:
79:24:43:d5:fd:a9:2d:c8:31:26:05:a9:8e:c0:72:
29:89:4d:ab:22:ee:5b:f2:b4:8f:c7:c8:b4:7c:07:
32:14:69:6c:6a:4b:b4:c8:4f:f9:05:70:62:69:49:
56:6b:b7:61:d3:ed:bc:aa:6c:75:f6:32:c9:e6:33:
0c:b0:f4:0a:25:df:e9:c9:3b:32:ec:93:80:88:58:
81:05:89:ed:2a:03:92:63:db:55:c6:cb:c8:db:a7:
59:c9:94:ef:49:86:4b:e8:5a:f8:79:7a:42:38:42:
52:70:3e:23:ed:25:c2:36:aa:3e:1a:e1:48:23:8f:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:A2:ED:EE:7F:56:76:41:A4:4D:7B:B9:EC:6E:ED:EE:6E:A0:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6892C87F0F11EFB8515657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.106.0/23
Signature Algorithm: sha256WithRSAEncryption
70:6e:93:1a:c9:97:f4:ae:0d:74:33:bd:68:22:15:b7:e3:95:
38:1d:19:21:20:3f:6a:6e:f3:2f:d8:a7:e0:2d:0a:0a:2c:85:
d1:ad:95:a8:3b:f9:0c:79:fd:70:1f:2c:52:ed:73:f7:ff:22:
06:3b:cf:60:fd:2a:d1:d1:26:f9:c6:1d:ed:c3:d7:20:5b:4e:
87:3c:6f:8e:06:37:9a:76:7e:66:f7:24:d7:88:c2:ff:91:18:
f4:d9:fc:14:e5:ab:84:64:9d:68:4a:32:49:73:89:7b:1e:75:
55:72:40:0f:d4:39:00:e9:5e:7a:1d:c4:fc:94:68:3f:b0:52:
23:7f:f6:08:6a:0a:89:7d:be:06:ac:4f:0b:5e:eb:7b:e3:37:
cc:09:5a:d1:56:6f:31:cf:19:12:00:6f:37:b1:ff:fe:77:69:
59:fe:f7:85:7c:cf:4f:cc:5d:d5:58:6b:4e:6e:41:25:e6:d9:
24:75:54:76:d3:c1:aa:7a:10:0d:b3:06:ba:8d:64:24:d3:5f:
d7:37:3d:a2:57:37:ed:19:18:05:3b:ac:86:42:13:66:f0:4f:
94:d1:5c:ed:76:2f:94:cf:b7:f8:d2:fd:2c:72:f1:ba:38:ad:
de:13:3f:f5:9c:64:a0:be:e4:71:c4:25:a4:cb:d9:20:ae:f0:
d1:ee:ed:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPW6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTMwMDkzODQ1WhcNMjQxMTMwMDkzODQ1WjAYMRYw
FAYDVQQDEw02NmZhNzFhOC1lYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8gs8l3k/EHKh2CEnqu0mDVeMylG066VYR1sei3228TcG2V7q4JugIb1e
RaOpGjY7lsKscMo9DfHiIhYg69FCQCPuQkkyyuaixvtioXtA37M0JrZSpsx0QGXT
c57HUEM8ywDcpFCGAgE43sMR8aN+MB8LuY4jRamZE7ezBfHHO+1FE9539bJ5JEPV
/aktyDEmBamOwHIpiU2rIu5b8rSPx8i0fAcyFGlsaku0yE/5BXBiaUlWa7dh0+28
qmx19jLJ5jMMsPQKJd/pyTsy7JOAiFiBBYntKgOSY9tVxsvI26dZyZTvSYZL6Fr4
eXpCOEJScD4j7SXCNqo+GuFII4/iTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF0X
ou3uf1Z2QaRNe7nsbu3ubqDyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjY4OTJDODdGMEYxMUVGQjg1MTU2NTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml1qMA0GCSqGSIb3DQEB
CwUAA4IBAQBwbpMayZf0rg10M71oIhW345U4HRkhID9qbvMv2KfgLQoKLIXRrZWo
O/kMef1wHyxS7XP3/yIGO89g/SrR0Sb5xh3tw9cgW06HPG+OBjeadn5m9yTXiML/
kRj02fwU5auEZJ1oSjJJc4l7HnVVckAP1DkA6V56HcT8lGg/sFIjf/YIagqJfb4G
rE8LXut74zfMCVrRVm8xzxkSAG83sf/+d2lZ/veFfM9PzF3VWGtObkEl5tkkdVR2
08GqehANswa6jWQk01/XNz2iVzftGRgFO6yGQhNm8E+U0Vztdi+Uz7f40v0scvG6
OK3eEz/1nGSgvuRxxCWky9kgrvDR7u1E
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:36 2024 by rpki-client on console-ams.rpki-client.org