Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE1E1CCAA45E11EF829C619F762E951A.roa
File: DE1E1CCAA45E11EF829C619F762E951A.roa (raw, json)
Hash identifier: /bIJgQp+URP9E23M/MnRjUKGOzTckWUIXfL7faUrXv4=
Subject key identifier: 65:2D:7B:A4:D1:26:9E:BD:5B:F6:D5:A6:16:21:7F:B5:88:05:DE:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE1E1CCAA45E11EF829C619F762E951A.roa
Signing time: Sat 16 Nov 2024 21:08:03 +0000
ROA not before: Sat 16 Nov 2024 21:08:00 +0000
ROA not after: Sat 30 Nov 2024 21:08:00 +0000
asID: 39600
IP address blocks: 154.91.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69203 (0x10e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 21:08:00 2024 GMT
Not After : Nov 30 21:08:00 2024 GMT
Subject: CN=673909b3-c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:11:b4:66:bf:d9:9a:32:ab:d3:67:fc:c3:
25:a4:bc:68:27:83:f6:16:5d:eb:97:91:03:24:38:
98:0c:a7:62:05:86:88:3a:58:bc:76:25:1b:bc:9c:
15:fa:58:1f:fb:ef:31:24:17:35:7f:1a:0e:71:19:
f0:91:e7:2f:28:14:f7:8f:97:d9:15:72:98:a9:00:
ea:88:32:8e:b5:f9:d9:fe:50:73:19:86:e3:c8:2c:
d4:d6:2a:34:f7:3c:91:c0:37:01:d6:f6:83:ee:1c:
24:6a:cd:de:dd:c0:44:ec:0b:66:66:fa:f8:26:55:
7e:d0:74:f9:f5:62:af:88:2c:fa:da:b9:f8:88:62:
b7:67:56:31:71:09:59:f1:fa:f5:2a:ba:03:d7:cc:
13:ef:da:b4:85:28:cf:6f:d8:f0:86:db:dc:08:b0:
99:34:3f:a1:db:80:76:cb:40:a6:c5:c8:12:11:52:
85:38:65:8e:64:3c:21:a0:05:81:13:91:e4:f2:b5:
1b:ea:cf:c0:9b:42:9c:51:de:ad:3d:16:75:1f:5c:
f3:c3:d9:3d:78:5d:03:04:a4:70:b5:7e:b3:fd:19:
71:59:ce:09:a0:8a:94:2c:7a:c0:86:5e:b2:8d:6f:
ac:22:9f:86:ad:aa:84:32:92:12:20:54:06:ed:16:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:7B:A4:D1:26:9E:BD:5B:F6:D5:A6:16:21:7F:B5:88:05:DE:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE1E1CCAA45E11EF829C619F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.128.0/21
Signature Algorithm: sha256WithRSAEncryption
29:50:43:48:6d:37:28:10:20:92:98:3b:bd:a1:0e:1b:0f:a0:
ee:a9:79:5e:b7:c8:72:ea:7e:2e:40:94:34:c9:df:d8:2f:77:
39:b5:ac:70:53:0f:ab:86:2e:47:d6:25:73:50:f1:5f:ce:0f:
6f:71:cc:52:1e:c8:87:21:40:3c:71:d7:54:02:50:f5:5e:03:
dc:aa:25:1f:16:ff:77:d6:05:d6:f4:65:c2:b3:71:f7:67:00:
d3:c7:92:5c:ac:60:b2:62:79:b9:0f:d0:ad:14:85:33:94:60:
16:e2:bb:a1:93:7a:1b:2b:1b:29:33:93:22:d2:00:60:39:bd:
3f:3b:a1:6c:21:8d:11:58:7f:34:d7:bd:db:35:6f:e4:02:9b:
e7:d1:26:9a:0f:98:ca:30:79:24:4a:3d:62:9f:0c:ae:7b:48:
81:b8:26:96:d3:8a:4b:a5:07:ed:3c:55:f6:56:8d:b7:d1:67:
ca:48:47:5c:b9:81:b6:ba:f8:34:bd:28:2e:76:ec:58:48:04:
aa:50:b0:de:5d:91:3f:62:a8:cd:f6:ca:1f:10:b1:7e:46:06:
31:06:7e:13:16:6b:ec:bb:7b:10:9c:78:fe:fd:e7:3c:fb:2c:
a3:3a:12:0f:ab:16:20:77:10:2a:69:6a:e9:3d:92:87:7a:39:
19:f6:cd:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ5TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MjEwODAwWhcNMjQxMTMwMjEwODAwWjAYMRYw
FAYDVQQDEw02NzM5MDliMy1jNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4EQRtGa/2Zoyq9Nn/MMlpLxoJ4P2Fl3rl5EDJDiYDKdiBYaIOli8diUb
vJwV+lgf++8xJBc1fxoOcRnwkecvKBT3j5fZFXKYqQDqiDKOtfnZ/lBzGYbjyCzU
1io09zyRwDcB1vaD7hwkas3e3cBE7AtmZvr4JlV+0HT59WKviCz62rn4iGK3Z1Yx
cQlZ8fr1KroD18wT79q0hSjPb9jwhtvcCLCZND+h24B2y0CmxcgSEVKFOGWOZDwh
oAWBE5Hk8rUb6s/Am0KcUd6tPRZ1H1zzw9k9eF0DBKRwtX6z/RlxWc4JoIqULHrA
hl6yjW+sIp+GraqEMpISIFQG7RaOVQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGUt
e6TRJp69W/bVphYhf7WIBd5CMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ERTFFMUNDQUE0NUUxMUVGODI5QzYxOUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmluAMA0GCSqGSIb3DQEB
CwUAA4IBAQApUENIbTcoECCSmDu9oQ4bD6DuqXlet8hy6n4uQJQ0yd/YL3c5taxw
Uw+rhi5H1iVzUPFfzg9vccxSHsiHIUA8cddUAlD1XgPcqiUfFv931gXW9GXCs3H3
ZwDTx5JcrGCyYnm5D9CtFIUzlGAW4ruhk3obKxspM5Mi0gBgOb0/O6FsIY0RWH80
173bNW/kApvn0SaaD5jKMHkkSj1inwyue0iBuCaW04pLpQftPFX2Vo230WfKSEdc
uYG2uvg0vSguduxYSASqULDeXZE/YqjN9sofELF+RgYxBn4TFmvsu3sQnHj+/ec8
+yyjOhIPqxYgdxAqaWrpPZKHejkZ9s0b
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:28 2024 by rpki-client on console-fra.rpki-client.org