Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E135A20091E111EFBC64997D762E951A.roa
File: E135A20091E111EFBC64997D762E951A.roa (raw, json)
Hash identifier: Pwgjeo7+Pu8Za7WTODAGaQAm7hg8sc4H8trI5NLL/Q4=
Subject key identifier: 2D:1E:40:35:C7:AB:5D:24:D4:03:9A:45:F4:A5:F5:40:8F:59:96:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01011D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E135A20091E111EFBC64997D762E951A.roa
Signing time: Thu 24 Oct 2024 08:28:01 +0000
ROA not before: Thu 24 Oct 2024 08:27:57 +0000
ROA not after: Sun 26 Jan 2025 08:27:57 +0000
asID: 9009
IP address blocks: 154.218.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65821 (0x1011d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 08:27:57 2024 GMT
Not After : Jan 26 08:27:57 2025 GMT
Subject: CN=671a0510-c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:c6:98:ff:dd:ae:de:e7:b8:4b:57:b5:5a:
4a:95:c8:39:f9:b3:72:b3:7e:99:ef:bc:48:d9:b5:
15:56:20:4a:4e:a4:f0:d2:ac:47:f8:44:6a:85:8a:
6c:f0:79:b5:63:57:55:b3:c0:fd:d6:d7:31:f4:2e:
1e:d9:21:de:26:0e:58:85:32:04:3f:6d:97:0c:98:
42:0d:cc:12:24:6e:bd:c7:24:06:ee:6e:9b:7b:a1:
78:98:84:9e:ff:da:9f:21:13:8f:7d:25:99:7b:79:
2b:a8:66:11:8b:94:74:50:69:23:7e:f3:48:1b:76:
91:65:d4:0f:88:65:50:c3:ed:92:c6:f5:90:06:8f:
e3:bb:ef:15:23:70:1f:2b:e9:a5:46:69:82:c5:ef:
28:05:25:83:da:83:88:7e:cc:df:2c:24:65:cf:d8:
a7:6f:3d:04:6a:d4:2c:e3:03:63:c0:f7:51:0b:3e:
5b:25:3f:80:f5:7b:f0:e9:35:2c:d3:d9:48:31:2e:
89:99:8d:10:8b:51:d9:d7:c0:f6:e1:45:38:51:18:
bd:2f:c8:a4:17:89:75:4b:b8:1f:45:d4:fa:02:7e:
ea:f1:c9:ee:9f:72:17:a5:ed:52:5d:a5:31:b4:95:
62:3a:68:68:c2:6e:22:51:15:c5:8d:29:e9:a7:06:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:40:35:C7:AB:5D:24:D4:03:9A:45:F4:A5:F5:40:8F:59:96:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E135A20091E111EFBC64997D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:59:39:c1:85:5d:2d:50:3e:2e:b5:3a:4f:34:f3:6a:8c:53:
f4:99:c4:9f:36:8d:e0:b2:4a:6a:12:36:76:24:24:bd:f8:b1:
f9:4c:da:04:5a:67:5a:bd:e6:43:65:be:8e:d6:f6:ea:06:6f:
50:63:9d:f3:31:27:aa:82:94:ef:7e:c1:e9:a4:1c:29:0e:a7:
33:c6:54:65:5c:a9:52:63:33:17:90:e0:6b:f6:4a:71:49:5a:
4a:39:99:5f:76:40:13:c7:1b:4e:30:99:02:a5:6f:aa:bc:a1:
24:ec:bf:7e:7c:33:40:41:a7:8c:9a:26:59:b1:61:46:56:3a:
96:43:ed:de:da:47:d0:1c:52:68:ed:05:6b:01:44:6d:0a:15:
ca:d2:1d:44:81:06:a7:c7:f7:92:04:00:ef:e4:43:d5:ad:5e:
ee:36:9f:99:10:1b:17:d6:fe:5c:a6:93:98:8f:ca:0d:21:d5:
5b:7d:e3:47:5b:54:ad:3f:e3:19:c5:2e:9c:dc:9b:7d:f3:8c:
60:b8:24:77:b3:ee:cb:8c:f1:80:33:89:32:2e:c7:92:21:d1:
b4:cc:56:59:6a:82:91:8b:c5:16:54:83:dd:94:1f:bb:42:a4:
59:0b:c5:35:e9:31:99:cc:e8:e8:dd:f2:ae:7f:02:43:eb:d4:
f0:04:e1:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQEdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI0MDgyNzU3WhcNMjUwMTI2MDgyNzU3WjAYMRYw
FAYDVQQDEw02NzFhMDUxMC1jNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwoLGmP/drt7nuEtXtVpKlcg5+bNys36Z77xI2bUVViBKTqTw0qxH+ERq
hYps8Hm1Y1dVs8D91tcx9C4e2SHeJg5YhTIEP22XDJhCDcwSJG69xyQG7m6be6F4
mISe/9qfIROPfSWZe3krqGYRi5R0UGkjfvNIG3aRZdQPiGVQw+2SxvWQBo/ju+8V
I3AfK+mlRmmCxe8oBSWD2oOIfszfLCRlz9inbz0EatQs4wNjwPdRCz5bJT+A9Xvw
6TUs09lIMS6JmY0Qi1HZ18D24UU4URi9L8ikF4l1S7gfRdT6An7q8cnun3IXpe1S
XaUxtJViOmhowm4iURXFjSnppwZxywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC0e
QDXHq10k1AOaRfSl9UCPWZb9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMTM1QTIwMDkxRTExMUVGQkM2NDk5N0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtrAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7WTnBhV0tUD4utTpPNPNqjFP0mcSfNo3gskpqEjZ2JCS9+LH5TNoE
WmdaveZDZb6O1vbqBm9QY53zMSeqgpTvfsHppBwpDqczxlRlXKlSYzMXkOBr9kpx
SVpKOZlfdkATxxtOMJkCpW+qvKEk7L9+fDNAQaeMmiZZsWFGVjqWQ+3e2kfQHFJo
7QVrAURtChXK0h1EgQanx/eSBADv5EPVrV7uNp+ZEBsX1v5cppOYj8oNIdVbfeNH
W1StP+MZxS6c3Jt984xguCR3s+7LjPGAM4kyLseSIdG0zFZZaoKRi8UWVIPdlB+7
QqRZC8U16TGZzOjo3fKufwJD69TwBOF0
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:11 2024 by rpki-client on console-ams.rpki-client.org