Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF5E781AA19111EF87D03786762E951A.roa
File: EF5E781AA19111EF87D03786762E951A.roa (raw, json)
Hash identifier: qwyuAMcgZk/4J43zhBN+Xp5lQLo5csraqWi/gBVsZFs=
Subject key identifier: 97:72:0C:F8:C5:43:62:0C:41:CE:1B:2A:1D:F6:D8:0B:DD:69:15:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF5E781AA19111EF87D03786762E951A.roa
Signing time: Wed 13 Nov 2024 07:36:03 +0000
ROA not before: Wed 13 Nov 2024 07:35:59 +0000
ROA not after: Mon 16 Dec 2024 07:35:59 +0000
asID: 18779
IP address blocks: 154.205.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68755 (0x10c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 07:35:59 2024 GMT
Not After : Dec 16 07:35:59 2024 GMT
Subject: CN=673456e3-bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:9b:bf:3f:3b:82:20:7f:f2:e5:73:12:d9:
f8:ee:18:22:f4:6a:8f:9d:a3:1c:3f:df:61:60:26:
af:41:50:13:d4:ad:0b:2c:18:75:62:41:82:4b:5f:
d6:c9:2a:4d:8a:a1:af:60:e2:b1:60:52:95:bf:61:
61:ac:00:ab:9b:65:c3:63:7b:18:3a:65:c6:d8:f0:
83:a8:04:8c:91:09:44:32:71:55:fb:f2:80:8c:b1:
98:f6:77:30:58:45:88:e6:0d:37:4e:8d:ec:4e:dc:
b7:57:f3:d8:bb:09:33:b7:02:29:0a:d2:66:b9:26:
3d:1e:52:1a:e2:18:df:df:68:a0:3e:52:cb:7f:05:
a3:cd:d7:17:c5:b9:0f:e1:b5:84:16:de:e3:60:46:
75:8c:17:ad:a1:b3:e6:0f:a4:99:ce:a0:f3:12:2f:
29:40:d8:42:7b:46:d0:5e:76:c7:fd:24:80:89:74:
91:54:6c:b4:1c:4d:eb:21:66:cd:d5:5f:13:a7:b8:
5a:ff:b8:32:e3:d4:a7:96:a6:64:4b:a7:40:81:4a:
05:8b:e2:a6:47:50:ae:12:1f:dc:1e:07:13:01:8a:
97:73:30:a1:e5:3c:c0:e5:95:ca:54:8b:69:29:b6:
44:ed:2c:6f:e9:1b:f1:b5:07:d9:ba:0f:88:81:7e:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:0C:F8:C5:43:62:0C:41:CE:1B:2A:1D:F6:D8:0B:DD:69:15:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF5E781AA19111EF87D03786762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.30.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:5c:13:2f:77:53:af:f2:08:60:c8:4e:2e:0f:94:31:1c:b0:
86:56:1d:7d:cb:af:e6:cc:b7:5f:47:ee:52:24:41:9c:9f:0a:
27:5a:1d:f6:9e:d1:4f:7e:f5:36:fe:ee:ef:73:4f:a8:1f:9b:
40:c0:59:7d:96:94:6d:f6:f1:01:85:a5:30:bb:49:b1:f0:36:
86:49:51:4d:6f:e4:7b:23:eb:bf:8e:e3:f5:9a:3e:85:16:5d:
99:b9:e9:3f:65:0d:ee:ff:b5:48:e1:2f:0d:0a:f3:db:39:29:
02:ad:ff:ec:53:7c:e2:c9:49:48:38:01:82:7d:32:38:5a:3d:
92:f9:c2:96:8c:80:1d:04:93:33:3e:7c:ff:7b:9b:4c:b7:d8:
ec:22:14:29:13:c8:55:72:f7:0d:39:f5:20:cc:91:04:f5:2b:
24:eb:b2:26:e5:e8:d0:69:c7:a7:ee:e0:96:19:29:53:a0:1e:
7d:7a:fa:cc:98:f0:c7:3e:37:df:fc:2b:62:ef:97:db:11:a1:
99:6e:86:45:97:60:59:1d:8a:28:ff:ec:4a:5a:cc:c6:8b:10:
1c:49:f7:fa:1b:ce:55:84:a5:52:7f:41:51:b3:cf:4e:45:8f:
21:20:ee:ce:98:40:79:8e:5e:c4:bd:c5:76:78:a1:ea:b3:d4:
43:84:39:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQyTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEzMDczNTU5WhcNMjQxMjE2MDczNTU5WjAYMRYw
FAYDVQQDEw02NzM0NTZlMy1iZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApRWbvz87giB/8uVzEtn47hgi9GqPnaMcP99hYCavQVAT1K0LLBh1YkGC
S1/WySpNiqGvYOKxYFKVv2FhrACrm2XDY3sYOmXG2PCDqASMkQlEMnFV+/KAjLGY
9ncwWEWI5g03To3sTty3V/PYuwkztwIpCtJmuSY9HlIa4hjf32igPlLLfwWjzdcX
xbkP4bWEFt7jYEZ1jBetobPmD6SZzqDzEi8pQNhCe0bQXnbH/SSAiXSRVGy0HE3r
IWbN1V8Tp7ha/7gy49SnlqZkS6dAgUoFi+KmR1CuEh/cHgcTAYqXczCh5TzA5ZXK
VItpKbZE7Sxv6RvxtQfZug+IgX6yHwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJdy
DPjFQ2IMQc4bKh322AvdaRU3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FRjVFNzgxQUExOTExMUVGODdEMDM3ODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0eMA0GCSqGSIb3DQEB
CwUAA4IBAQBaXBMvd1Ov8ghgyE4uD5QxHLCGVh19y6/mzLdfR+5SJEGcnwonWh32
ntFPfvU2/u7vc0+oH5tAwFl9lpRt9vEBhaUwu0mx8DaGSVFNb+R7I+u/juP1mj6F
Fl2Zuek/ZQ3u/7VI4S8NCvPbOSkCrf/sU3ziyUlIOAGCfTI4Wj2S+cKWjIAdBJMz
Pnz/e5tMt9jsIhQpE8hVcvcNOfUgzJEE9Ssk67Im5ejQacen7uCWGSlToB59evrM
mPDHPjff/Cti75fbEaGZboZFl2BZHYoo/+xKWszGixAcSff6G85VhKVSf0FRs89O
RY8hIO7OmEB5jl7EvcV2eKHqs9RDhDl7
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:27 2024 by rpki-client on console-fra.rpki-client.org