Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADB4146A8F011EF9C550561762E951A.roa
File: DADB4146A8F011EF9C550561762E951A.roa (raw, json)
Hash identifier: gGM7UG3MNIyHMCv6FLBTOLRWiHg1d1p3og4QAg9pKng=
Subject key identifier: 2A:B9:5E:55:A4:8A:E2:34:A2:31:A4:1F:64:B7:9E:40:59:33:52:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011151
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADB4146A8F011EF9C550561762E951A.roa
Signing time: Fri 22 Nov 2024 16:43:09 +0000
ROA not before: Fri 22 Nov 2024 16:43:05 +0000
ROA not after: Tue 03 Dec 2024 16:43:05 +0000
asID: 62240
IP address blocks: 154.195.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69969 (0x11151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:43:05 2024 GMT
Not After : Dec 3 16:43:05 2024 GMT
Subject: CN=6740b49d-4206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:82:5b:18:12:a5:6f:94:f2:9f:6c:87:e2:
92:20:4a:c0:8a:ec:41:67:6d:fb:ec:82:54:81:b3:
db:62:2b:ae:ca:34:33:d3:c7:51:d1:7c:ce:65:46:
0c:6e:f4:88:80:0a:14:b6:c6:f4:85:48:bb:00:d6:
67:26:6e:74:c7:82:63:cc:96:d7:93:32:77:48:9b:
16:ad:02:53:47:a3:17:bc:6f:45:9f:af:b8:1c:e2:
76:5f:ff:7d:ba:1b:46:29:e6:a9:b3:c0:8c:cd:47:
94:d5:18:94:83:24:ae:f6:a2:2a:3e:3b:01:bb:27:
3f:e6:26:63:69:12:b1:85:73:b0:75:e4:c2:4c:33:
76:96:6a:1b:19:e2:cb:a0:c1:d4:e6:ba:ad:24:cf:
ed:88:a8:56:04:04:38:3c:f9:a9:b5:dd:80:a6:32:
ca:6c:f0:aa:5a:19:0a:0e:5a:73:de:89:7a:45:7d:
7b:d1:af:1e:d4:6e:be:7c:e5:7c:68:85:8d:70:f3:
ea:9b:18:05:6d:b0:2b:f1:79:13:b1:9c:b8:d8:23:
83:cf:7a:52:76:c8:da:90:ec:e1:e7:94:26:9a:14:
fe:c8:5e:4b:48:00:77:e1:9f:32:e8:43:0d:23:99:
72:d6:4e:d3:d8:f8:1e:5c:02:8f:ef:2c:8f:9b:03:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:5E:55:A4:8A:E2:34:A2:31:A4:1F:64:B7:9E:40:59:33:52:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DADB4146A8F011EF9C550561762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.163.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7e:f5:63:14:5b:81:6b:62:8c:4c:f9:9a:12:b9:1d:fd:21:
cf:77:b3:2e:b2:16:53:47:70:43:77:68:ff:13:be:65:b9:e8:
f7:85:5a:54:3e:33:ae:5b:3c:3e:ee:af:ec:25:14:a3:58:f8:
6d:57:de:97:d9:8b:34:9d:b6:82:74:c9:7b:76:b1:da:82:a1:
18:66:56:8b:72:21:05:fe:90:30:cf:46:0b:0d:45:c7:e2:a8:
5e:d9:9e:4b:93:3b:42:c0:e6:c6:13:7b:87:23:d7:e3:ed:a8:
72:1d:67:17:39:1e:84:f2:27:f0:47:53:e3:36:b0:f7:04:1b:
c4:b9:08:64:51:7c:c2:af:41:68:20:11:a4:db:c7:f4:e2:58:
51:70:ed:f1:23:9d:7f:ba:04:f1:8c:d0:b7:5f:c4:43:53:be:
7d:b2:02:02:88:af:ec:57:21:10:29:32:ad:52:7e:47:9f:10:
78:f2:0f:cf:78:0d:58:25:c3:1b:a6:2d:2d:d3:43:b5:9c:ed:
70:20:3a:f0:10:dc:85:1c:dd:91:9f:49:82:69:9a:8b:25:d7:
db:7f:e9:cc:41:39:76:db:b8:6a:7f:32:a7:d4:c7:fd:a8:f9:
2f:62:7c:ad:e8:be:c7:6e:bd:1f:01:9f:45:fc:30:9f:49:c5:
4f:42:51:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARFRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTY0MzA1WhcNMjQxMjAzMTY0MzA1WjAYMRYw
FAYDVQQDEw02NzQwYjQ5ZC00MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvAWCWxgSpW+U8p9sh+KSIErAiuxBZ2377IJUgbPbYiuuyjQz08dR0XzO
ZUYMbvSIgAoUtsb0hUi7ANZnJm50x4JjzJbXkzJ3SJsWrQJTR6MXvG9Fn6+4HOJ2
X/99uhtGKeaps8CMzUeU1RiUgySu9qIqPjsBuyc/5iZjaRKxhXOwdeTCTDN2lmob
GeLLoMHU5rqtJM/tiKhWBAQ4PPmptd2ApjLKbPCqWhkKDlpz3ol6RX170a8e1G6+
fOV8aIWNcPPqmxgFbbAr8XkTsZy42CODz3pSdsjakOzh55QmmhT+yF5LSAB34Z8y
6EMNI5ly1k7T2PgeXAKP7yyPmwOOxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCq5
XlWkiuI0ojGkH2S3nkBZM1KnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQURCNDE0NkE4RjAxMUVGOUM1NTA1NjE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOjMA0GCSqGSIb3DQEB
CwUAA4IBAQBUfvVjFFuBa2KMTPmaErkd/SHPd7MushZTR3BDd2j/E75luej3hVpU
PjOuWzw+7q/sJRSjWPhtV96X2Ys0nbaCdMl7drHagqEYZlaLciEF/pAwz0YLDUXH
4qhe2Z5LkztCwObGE3uHI9fj7ahyHWcXOR6E8ifwR1PjNrD3BBvEuQhkUXzCr0Fo
IBGk28f04lhRcO3xI51/ugTxjNC3X8RDU759sgICiK/sVyEQKTKtUn5HnxB48g/P
eA1YJcMbpi0t00O1nO1wIDrwENyFHN2Rn0mCaZqLJdfbf+nMQTl227hqfzKn1Mf9
qPkvYnyt6L7Hbr0fAZ9F/DCfScVPQlHn
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:49 2024 by rpki-client on console-fra.rpki-client.org