Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7CA29F8736711EF97A6A648762E951A.roa
File: E7CA29F8736711EF97A6A648762E951A.roa (raw, json)
Hash identifier: y5IK2RUdw06JmeXA0lYZ5W2YhoIqNpuSj/5FYwW4qZw=
Subject key identifier: 3F:4C:7B:C4:FA:EE:7E:D7:25:A7:61:49:6F:C5:80:C9:43:10:74:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF26
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7CA29F8736711EF97A6A648762E951A.roa
Signing time: Sun 15 Sep 2024 13:39:18 +0000
ROA not before: Sun 15 Sep 2024 13:39:15 +0000
ROA not after: Sat 30 Nov 2024 13:39:15 +0000
asID: 138152
IP address blocks: 154.92.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61222 (0xef26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:39:15 2024 GMT
Not After : Nov 30 13:39:15 2024 GMT
Subject: CN=66e6e386-a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:16:b5:28:fa:15:89:61:50:8a:28:20:a4:
68:9e:72:a5:f5:f5:4e:20:f9:0b:e2:9d:53:c8:1b:
bf:59:ab:4d:ea:c7:41:eb:89:d2:af:3f:5b:0e:c7:
eb:3f:48:09:41:ba:c9:13:e5:b7:29:1d:67:08:99:
e0:e6:7d:73:c0:43:4d:80:52:dd:31:c2:0a:e9:aa:
c2:4e:39:f0:34:90:b9:4e:ad:c0:4f:e2:04:a7:3e:
d8:d7:15:e4:ae:9c:fa:39:59:ba:c4:f7:b2:95:5d:
bf:8d:91:4b:57:8b:66:f5:8b:99:2d:df:1d:9f:bd:
20:85:87:30:f2:e8:2e:4d:9d:d6:7e:18:df:70:b4:
8d:b4:c7:5d:2d:02:b3:97:eb:99:aa:ff:11:ef:7b:
c0:fa:d3:ad:9e:60:6b:51:44:f6:7a:e1:cd:1c:d3:
b2:f6:db:5c:fa:ad:5e:3e:73:5f:43:2c:79:63:9f:
6d:6a:3d:c2:f6:7d:5d:8b:12:60:96:72:c3:b3:fa:
ec:ea:b1:bd:9f:1e:d6:db:92:e3:86:3b:6d:55:07:
86:f7:dd:ff:85:4b:da:4e:85:1d:87:af:82:70:2a:
31:12:90:e3:12:d0:2c:83:23:27:fe:fe:67:b1:87:
3d:f9:8b:5e:3c:61:d6:bb:51:16:74:b5:17:8d:13:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:7B:C4:FA:EE:7E:D7:25:A7:61:49:6F:C5:80:C9:43:10:74:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7CA29F8736711EF97A6A648762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.23.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:f5:e2:9a:d7:62:64:e8:64:01:0a:20:c3:5c:cf:29:a9:f7:
fa:97:43:67:2d:5a:bc:14:6a:31:10:87:d3:ab:5c:c6:ef:40:
f5:22:9a:44:be:f2:7d:bf:6c:ad:32:9e:b6:62:b1:82:8f:7d:
d6:da:85:04:13:da:f6:b6:8b:81:2d:1d:ce:9d:93:2a:b0:9e:
14:45:7c:a8:38:f0:87:0e:5e:3f:fb:03:68:b2:f6:18:bb:a1:
96:13:d3:ba:a2:15:66:cb:42:75:48:d0:cc:2c:b7:3f:88:c6:
f6:67:74:9b:72:bd:04:4d:58:f0:0d:76:de:5f:22:cc:94:8a:
e7:91:08:d4:b4:f9:be:33:d4:d5:05:82:f1:2e:7e:01:74:64:
11:98:ec:c6:aa:53:5c:1f:f1:03:4e:79:b0:cb:c0:43:89:59:
87:d7:1e:a6:46:63:1d:08:4a:69:47:56:a6:30:6f:16:b9:f3:
68:81:07:0f:92:9d:40:50:a6:bc:01:83:f0:0a:75:ba:e2:3c:
8e:23:89:72:0e:40:59:e4:3d:16:75:f9:b3:b2:cd:3c:9e:e0:
79:75:bb:58:6d:ce:4f:22:7b:7e:14:94:a4:d9:87:29:ff:23:
9c:79:e6:c7:ef:2d:24:a3:47:38:51:bb:a3:27:be:a0:90:b5:
7a:b3:6a:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO8mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE1MTMzOTE1WhcNMjQxMTMwMTMzOTE1WjAYMRYw
FAYDVQQDEw02NmU2ZTM4Ni1hMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzJAWtSj6FYlhUIooIKRonnKl9fVOIPkL4p1TyBu/WatN6sdB64nSrz9b
DsfrP0gJQbrJE+W3KR1nCJng5n1zwENNgFLdMcIK6arCTjnwNJC5Tq3AT+IEpz7Y
1xXkrpz6OVm6xPeylV2/jZFLV4tm9YuZLd8dn70ghYcw8uguTZ3WfhjfcLSNtMdd
LQKzl+uZqv8R73vA+tOtnmBrUUT2euHNHNOy9ttc+q1ePnNfQyx5Y59taj3C9n1d
ixJglnLDs/rs6rG9nx7W25LjhjttVQeG993/hUvaToUdh6+CcCoxEpDjEtAsgyMn
/v5nsYc9+YtePGHWu1EWdLUXjROZLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD9M
e8T67n7XJadhSW/FgMlDEHRdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FN0NBMjlGODczNjcxMUVGOTdBNkE2NDg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwXMA0GCSqGSIb3DQEB
CwUAA4IBAQDD9eKa12Jk6GQBCiDDXM8pqff6l0NnLVq8FGoxEIfTq1zG70D1IppE
vvJ9v2ytMp62YrGCj33W2oUEE9r2touBLR3OnZMqsJ4URXyoOPCHDl4/+wNosvYY
u6GWE9O6ohVmy0J1SNDMLLc/iMb2Z3Sbcr0ETVjwDXbeXyLMlIrnkQjUtPm+M9TV
BYLxLn4BdGQRmOzGqlNcH/EDTnmwy8BDiVmH1x6mRmMdCEppR1amMG8WufNogQcP
kp1AUKa8AYPwCnW64jyOI4lyDkBZ5D0Wdfmzss08nuB5dbtYbc5PInt+FJSk2Ycp
/yOceebH7y0ko0c4UbujJ76gkLV6s2rF
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:32 2024 by rpki-client on console-ams.rpki-client.org