Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E83DD0B6E75C11EEAEFB7F73775412E6.roa
File: E83DD0B6E75C11EEAEFB7F73775412E6.roa (raw, json)
Hash identifier: 8fbr+3YtOJO7paA07FXQ5bUt4H3kIWeB2ftYQFK3WX8=
Subject key identifier: 83:A5:33:CA:DF:61:E3:52:AF:A8:4C:C2:23:BC:62:C7:13:EF:43:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E83DD0B6E75C11EEAEFB7F73775412E6.roa
Signing time: Thu 21 Mar 2024 08:27:51 +0000
ROA not before: Thu 21 Mar 2024 08:27:48 +0000
ROA not after: Tue 23 Apr 2024 08:27:48 +0000
asID: 44559
IP address blocks: 154.211.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42211 (0xa4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:27:48 2024 GMT
Not After : Apr 23 08:27:48 2024 GMT
Subject: CN=65fbef87-50a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:86:40:cd:92:9d:5d:78:c6:54:c8:df:a8:
b0:d1:4e:4e:ca:c7:2f:9c:bf:1b:ce:ca:62:af:a8:
3e:dc:bd:bd:c9:81:a7:a1:f9:5f:9a:1f:ac:64:a6:
74:f0:e7:be:1b:5b:ac:51:0f:e5:f1:74:e4:de:f0:
ad:42:00:9f:cc:20:a7:51:21:5e:56:05:71:fd:56:
de:68:13:be:7f:77:e6:50:73:36:0c:9a:6e:89:07:
10:6c:6e:6b:d9:89:db:65:b6:92:62:e5:8d:1e:35:
1c:48:47:86:aa:ee:ee:90:4c:1c:12:a1:5e:a8:c2:
64:a1:62:ef:d5:30:4b:4d:23:c1:0b:0d:73:77:1e:
0d:59:f6:93:b5:5b:32:52:dc:3b:d2:32:03:bd:13:
9e:05:f9:c3:86:53:0c:2c:66:1d:a2:4e:48:fa:57:
1b:91:e5:15:61:a6:5f:8d:d1:f1:db:4e:50:b7:cb:
ad:93:09:40:1e:b9:b8:d6:ac:2e:22:74:97:e7:d1:
ac:53:62:a2:d4:92:6d:b7:c5:f6:da:ad:f9:32:91:
03:7b:4e:2e:0b:b7:d0:f5:f7:ac:8d:97:e4:49:fb:
58:b1:14:49:d9:57:d8:e7:14:5e:5a:27:da:4e:a5:
fd:30:29:ca:b6:53:28:0e:29:a9:22:57:e4:fb:51:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A5:33:CA:DF:61:E3:52:AF:A8:4C:C2:23:BC:62:C7:13:EF:43:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E83DD0B6E75C11EEAEFB7F73775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.39.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c2:00:d5:13:ef:29:76:bd:6c:f1:b9:24:81:44:06:be:7b:
f3:b0:15:c1:d5:b2:63:99:d1:82:c3:a6:77:5c:e2:d0:03:8d:
43:3f:83:4d:ab:87:fa:f9:d8:dc:0d:c1:f4:e3:9c:1c:3f:4f:
66:81:bc:37:94:c6:fc:89:e5:a7:33:3b:30:d2:75:fb:ca:62:
75:ec:0b:f4:ce:7b:38:b7:57:ec:ad:1d:ce:d1:3a:40:43:90:
e2:10:a4:00:d7:ad:7d:fe:8a:81:07:4d:d0:60:54:cd:2a:e6:
e8:c6:7d:52:a5:b6:ae:b5:1b:89:16:c9:3d:8b:87:96:27:f1:
cb:82:46:3a:7f:01:13:51:5a:2c:61:82:33:56:16:8d:33:0c:
24:43:65:31:6e:84:b2:87:54:1f:cb:1d:dd:28:bd:cb:fa:3c:
1e:b9:ac:74:d1:10:cc:71:1f:0c:3e:0c:34:59:f7:2b:90:08:
82:bb:73:2b:1c:ac:ea:48:30:68:94:80:88:f1:f4:db:ff:df:
25:47:76:a3:4f:e2:65:5a:bb:17:67:2c:04:93:d9:1e:0e:e3:
5f:bc:d7:47:07:4d:36:06:65:27:18:3d:4f:7f:5d:1b:6f:19:
9a:c3:59:79:35:ec:5d:3d:c1:0b:fc:75:9f:6c:f0:2d:67:bb:
ee:a8:3c:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKTjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDgyNzQ4WhcNMjQwNDIzMDgyNzQ4WjAYMRYw
FAYDVQQDEw02NWZiZWY4Ny01MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2rSGQM2SnV14xlTI36iw0U5OyscvnL8bzspir6g+3L29yYGnoflfmh+s
ZKZ08Oe+G1usUQ/l8XTk3vCtQgCfzCCnUSFeVgVx/VbeaBO+f3fmUHM2DJpuiQcQ
bG5r2YnbZbaSYuWNHjUcSEeGqu7ukEwcEqFeqMJkoWLv1TBLTSPBCw1zdx4NWfaT
tVsyUtw70jIDvROeBfnDhlMMLGYdok5I+lcbkeUVYaZfjdHx205Qt8utkwlAHrm4
1qwuInSX59GsU2Ki1JJtt8X22q35MpEDe04uC7fQ9fesjZfkSftYsRRJ2VfY5xRe
WifaTqX9MCnKtlMoDimpIlfk+1HpAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIOl
M8rfYeNSr6hMwiO8YscT70PhMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODNERDBCNkU3NUMxMUVFQUVGQjdGNzM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMnMA0GCSqGSIb3DQEB
CwUAA4IBAQA8wgDVE+8pdr1s8bkkgUQGvnvzsBXB1bJjmdGCw6Z3XOLQA41DP4NN
q4f6+djcDcH045wcP09mgbw3lMb8ieWnMzsw0nX7ymJ17Av0zns4t1fsrR3O0TpA
Q5DiEKQA1619/oqBB03QYFTNKuboxn1SpbautRuJFsk9i4eWJ/HLgkY6fwETUVos
YYIzVhaNMwwkQ2UxboSyh1Qfyx3dKL3L+jweuax00RDMcR8MPgw0WfcrkAiCu3Mr
HKzqSDBolICI8fTb/98lR3ajT+JlWrsXZywEk9keDuNfvNdHB002BmUnGD1Pf10b
bxmaw1l5NexdPcEL/HWfbPAtZ7vuqDxY
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org