Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDB4E64653A111EEBEBDC2654AD9E6FC.roa
File: EDB4E64653A111EEBEBDC2654AD9E6FC.roa (raw, json)
Hash identifier: jEwfMxRb4D6ItXWTD5xQ3E90/kOsobg1wMN6V8mqYgk=
Subject key identifier: BA:BD:28:F0:C0:10:DF:AD:D0:B6:7A:BC:CD:5F:ED:25:42:5C:8A:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D97
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDB4E64653A111EEBEBDC2654AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:29:04 +0000
ROA not before: Fri 15 Sep 2023 08:29:01 +0000
ROA not after: Sat 08 Jun 2024 08:29:01 +0000
asID: 142403
IP address blocks: 154.221.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15767 (0x3d97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:29:01 2023 GMT
Not After : Jun 8 08:29:01 2024 GMT
Subject: CN=650415d0-8d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:64:a7:81:1d:3a:85:2d:57:63:23:53:8e:
65:6b:d2:e5:4d:53:bf:c5:f0:18:e6:a4:d3:0c:cf:
1b:a5:87:4a:39:a4:5b:da:0f:ee:f5:2e:04:b6:2e:
f5:e1:fa:43:34:cf:35:f9:bd:3b:91:71:49:55:5f:
e0:e2:07:b8:dd:37:0a:62:e2:84:02:22:6a:71:92:
56:58:e6:37:7d:ac:c7:f2:be:d1:79:56:aa:63:3c:
6f:bc:4f:35:37:16:4b:8f:70:ac:56:6b:12:ff:c0:
f5:90:b5:ee:2b:3c:17:7e:1e:9a:3c:da:ca:a1:3a:
f0:97:7b:f7:31:fa:a8:5b:a3:96:56:b1:25:95:e9:
da:aa:4c:30:c1:5b:13:21:f2:00:9e:62:55:be:56:
6f:88:3f:7c:0a:ce:09:59:d3:f8:32:ba:1d:ce:4a:
78:8d:15:61:23:83:b6:2f:10:26:33:f1:a6:52:25:
54:6a:43:1f:3f:72:f4:cf:d0:ff:16:7b:e9:97:81:
41:bc:bc:3d:94:82:a6:e8:30:f3:c4:da:72:2c:6c:
4f:10:4c:78:87:a5:3a:3f:4f:b3:3b:40:d1:70:90:
cd:da:ad:9e:e5:ab:f2:af:f5:be:35:e1:91:3d:c1:
0c:dc:b3:ca:2f:92:5c:b4:02:eb:b4:32:75:1d:fc:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:28:F0:C0:10:DF:AD:D0:B6:7A:BC:CD:5F:ED:25:42:5C:8A:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDB4E64653A111EEBEBDC2654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.19.0/24
Signature Algorithm: sha256WithRSAEncryption
50:33:bc:35:60:ef:da:2b:eb:12:b3:36:2f:62:0f:80:64:b4:
c3:9d:b9:92:fe:09:84:2d:1c:1e:33:03:27:5f:cb:e0:e2:55:
da:97:89:a7:25:8c:3a:00:14:26:10:5c:93:4e:47:32:77:fa:
69:36:01:3d:e1:f9:0e:5f:7a:f0:c4:83:22:05:25:7f:69:ac:
da:79:8e:72:d5:14:39:17:97:71:ff:8f:55:e9:87:23:0f:66:
f1:94:a9:85:39:43:10:5c:53:a1:b5:33:10:b6:48:8f:db:26:
c1:b1:47:a4:95:4d:fc:00:94:6e:0a:24:ea:92:36:b9:e6:cd:
65:e4:2d:a6:e7:7e:6b:71:f3:77:3a:20:7a:d6:50:dc:fa:c0:
b3:6d:61:2a:1d:d3:5b:de:65:0e:68:f1:e7:bf:db:c2:b1:11:
b1:9e:f9:7d:ba:24:18:fd:0e:20:bd:6f:48:1c:2c:9b:eb:fc:
9c:d3:b1:a9:c3:ff:d1:cd:98:b5:c0:ea:c6:2a:2a:ef:d2:1b:
71:6b:81:f3:aa:75:69:62:d7:22:ae:d3:2e:8f:44:3c:c1:c4:
48:80:84:9b:d9:06:2c:38:7d:02:13:29:5a:e1:07:05:05:04:
57:5d:19:b3:b3:3b:ca:62:70:fe:e7:b0:de:b9:5b:c2:35:c8:
8a:4e:d6:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPZcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwODI5MDFaFw0yNDA2MDgwODI5MDFaMBgxFjAU
BgNVBAMTDTY1MDQxNWQwLThkNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJB2SngR06hS1XYyNTjmVr0uVNU7/F8BjmpNMMzxulh0o5pFvaD+71LgS2
LvXh+kM0zzX5vTuRcUlVX+DiB7jdNwpi4oQCImpxklZY5jd9rMfyvtF5VqpjPG+8
TzU3FkuPcKxWaxL/wPWQte4rPBd+Hpo82sqhOvCXe/cx+qhbo5ZWsSWV6dqqTDDB
WxMh8gCeYlW+Vm+IP3wKzglZ0/gyuh3OSniNFWEjg7YvECYz8aZSJVRqQx8/cvTP
0P8We+mXgUG8vD2UgqboMPPE2nIsbE8QTHiHpTo/T7M7QNFwkM3arZ7lq/Kv9b41
4ZE9wQzcs8ovkly0Auu0MnUd/NGbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUur0o
8MAQ363Qtnq8zV/tJUJcijEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0VEQjRFNjQ2NTNBMTExRUVCRUJEQzI2NTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3RMwDQYJKoZIhvcNAQEL
BQADggEBAFAzvDVg79or6xKzNi9iD4BktMOduZL+CYQtHB4zAydfy+DiVdqXiacl
jDoAFCYQXJNORzJ3+mk2AT3h+Q5fevDEgyIFJX9prNp5jnLVFDkXl3H/j1XphyMP
ZvGUqYU5QxBcU6G1MxC2SI/bJsGxR6SVTfwAlG4KJOqSNrnmzWXkLabnfmtx83c6
IHrWUNz6wLNtYSod01veZQ5o8ee/28KxEbGe+X26JBj9DiC9b0gcLJvr/JzTsanD
/9HNmLXA6sYqKu/SG3FrgfOqdWli1yKu0y6PRDzBxEiAhJvZBiw4fQITKVrhBwUF
BFddGbOzO8picP7nsN65W8I1yIpO1i0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:23 2024 by rpki-client on console-ams.rpki-client.org