Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBAD6ECA27CA11EFAE9C54E37CDC24C2.roa
File: DBAD6ECA27CA11EFAE9C54E37CDC24C2.roa (raw, json)
Hash identifier: DiHNZH9YlMEXj1wIXeDxpN930N5bM6QguX+ics4Fm+U=
Subject key identifier: 4B:FB:A8:F6:0A:F1:59:A6:DC:AF:07:CD:6E:BE:14:70:B9:1A:3E:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBAD6ECA27CA11EFAE9C54E37CDC24C2.roa
Signing time: Tue 11 Jun 2024 08:16:09 +0000
ROA not before: Tue 11 Jun 2024 08:16:06 +0000
ROA not after: Sun 15 Jun 2025 08:16:06 +0000
asID: 138678
IP address blocks: 154.88.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49578 (0xc1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 08:16:06 2024 GMT
Not After : Jun 15 08:16:06 2025 GMT
Subject: CN=666807c9-1653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:0a:40:63:ee:38:1b:af:b8:e1:fa:c2:85:
b9:1b:6c:94:8e:e5:ca:28:d6:16:e4:37:f5:51:13:
65:fa:00:63:56:65:56:28:44:f2:3c:12:b7:71:be:
85:97:23:0b:fa:c7:57:8e:ed:93:56:cf:e3:e0:4b:
0d:61:c0:64:c6:aa:03:52:45:d6:0f:25:9c:4a:d6:
1c:70:ea:f8:d1:c2:dc:d2:bd:b1:8f:66:ae:f4:9b:
6a:f8:ba:7c:20:f5:02:b3:ee:38:2c:71:14:6c:73:
62:73:56:cb:b2:5a:c8:da:31:46:c9:b4:75:46:e1:
fc:61:e2:ab:00:04:a9:dc:80:fa:ab:e1:c9:d4:8a:
fe:8a:0d:95:90:08:2d:f2:b1:9e:26:8c:63:ef:c8:
b5:10:25:3d:ca:c5:a0:1a:7d:5b:37:fe:85:09:9e:
83:65:a3:14:3f:57:8a:4f:bb:be:6a:dd:3c:29:aa:
47:5a:42:f0:06:7d:c2:8f:36:12:71:8e:1a:4e:cd:
b5:a8:31:ea:75:ee:27:c4:26:aa:b6:17:f2:87:64:
b6:e7:07:b2:71:9a:cf:19:22:7e:74:5e:34:5e:66:
4e:75:79:ec:c8:df:b8:31:17:0d:4b:24:15:dd:01:
a5:ae:0f:a3:3d:07:f7:ba:57:a6:ec:ec:7c:49:fb:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FB:A8:F6:0A:F1:59:A6:DC:AF:07:CD:6E:BE:14:70:B9:1A:3E:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBAD6ECA27CA11EFAE9C54E37CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.2.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1b:d1:25:41:f4:88:d1:a6:a6:fe:dc:a0:cb:3c:9c:3f:e1:
56:e9:74:8a:e6:01:cb:20:35:06:b5:8b:5b:c9:9e:3d:8c:7e:
72:d5:55:09:db:7d:f2:d7:1e:fc:82:7a:2d:c6:e3:84:f6:95:
5a:2d:b1:53:81:ce:c9:2d:80:9f:90:ad:0b:92:58:af:fd:af:
e3:a3:da:5b:68:3f:0a:70:e6:32:a9:a0:33:51:a0:c1:a7:2e:
29:ea:b8:ae:98:8a:95:7a:91:0a:09:3f:93:03:5d:58:a8:1b:
77:2f:31:25:42:50:d6:c2:e2:4b:fa:a2:b3:f5:c9:a6:1f:0e:
dc:9c:aa:10:94:7a:a3:9f:be:9a:d8:84:54:57:ae:2b:0f:1a:
42:d2:01:e4:4c:f1:05:a1:8f:2f:e7:5a:b2:4b:5e:99:01:9e:
c2:58:a0:a0:f9:14:fa:58:97:1d:4b:8a:0a:d2:52:7f:c6:03:
e7:1e:0b:93:51:95:66:ea:78:49:e6:3c:b2:e1:e7:ff:d8:e7:
e6:c0:e9:fa:28:63:d4:ec:80:e1:95:34:90:d4:27:da:b8:83:
38:67:6e:d7:2b:3e:e0:51:61:c3:f1:c4:22:c0:b7:06:fb:79:
49:3e:e6:56:5c:dc:56:4c:9a:87:7e:a2:86:29:8f:db:50:95:
c8:fc:79:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMGqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjExMDgxNjA2WhcNMjUwNjE1MDgxNjA2WjAYMRYw
FAYDVQQDEw02NjY4MDdjOS0xNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApvUKQGPuOBuvuOH6woW5G2yUjuXKKNYW5Df1URNl+gBjVmVWKETyPBK3
cb6FlyML+sdXju2TVs/j4EsNYcBkxqoDUkXWDyWcStYccOr40cLc0r2xj2au9Jtq
+Lp8IPUCs+44LHEUbHNic1bLslrI2jFGybR1RuH8YeKrAASp3ID6q+HJ1Ir+ig2V
kAgt8rGeJoxj78i1ECU9ysWgGn1bN/6FCZ6DZaMUP1eKT7u+at08KapHWkLwBn3C
jzYScY4aTs21qDHqde4nxCaqthfyh2S25weycZrPGSJ+dF40XmZOdXnsyN+4MRcN
SyQV3QGlrg+jPQf3ulem7Ox8SftQTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEv7
qPYK8Vmm3K8HzW6+FHC5Gj5wMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQkFENkVDQTI3Q0ExMUVGQUU5QzU0RTM3Q0RDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlgCMA0GCSqGSIb3DQEB
CwUAA4IBAQA7G9ElQfSI0aam/tygyzycP+FW6XSK5gHLIDUGtYtbyZ49jH5y1VUJ
233y1x78gnotxuOE9pVaLbFTgc7JLYCfkK0Lkliv/a/jo9pbaD8KcOYyqaAzUaDB
py4p6riumIqVepEKCT+TA11YqBt3LzElQlDWwuJL+qKz9cmmHw7cnKoQlHqjn76a
2IRUV64rDxpC0gHkTPEFoY8v51qyS16ZAZ7CWKCg+RT6WJcdS4oK0lJ/xgPnHguT
UZVm6nhJ5jyy4ef/2OfmwOn6KGPU7IDhlTSQ1CfauIM4Z27XKz7gUWHD8cQiwLcG
+3lJPuZWXNxWTJqHfqKGKY/bUJXI/HlS
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:27 2024 by rpki-client on console-fra.rpki-client.org