Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CBC82292DC11EFA60E2CA7762E951A.roa
File: F2CBC82292DC11EFA60E2CA7762E951A.roa (raw, json)
Hash identifier: gO3fKgmAVbJspYiFkr8bKGmCg4bRjzBvXI33HtZETzw=
Subject key identifier: 5B:0D:00:A4:8A:A0:48:88:F5:04:AC:71:19:2E:DF:6E:44:DE:2C:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010228
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CBC82292DC11EFA60E2CA7762E951A.roa
Signing time: Fri 25 Oct 2024 14:25:14 +0000
ROA not before: Fri 25 Oct 2024 14:25:10 +0000
ROA not after: Sun 01 Dec 2024 14:25:10 +0000
asID: 44559
IP address blocks: 154.209.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66088 (0x10228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:25:10 2024 GMT
Not After : Dec 1 14:25:10 2024 GMT
Subject: CN=671baa49-3389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:4d:56:b7:b7:42:81:04:8b:6d:73:4d:30:
15:3e:d5:5f:73:28:73:d6:26:5b:b9:fd:32:b3:fc:
ef:b4:72:06:f8:bd:b3:e1:ba:ab:7d:dd:90:55:4d:
ca:b1:3d:71:fd:ca:31:1a:72:32:a8:46:47:a4:22:
3a:b6:37:99:ab:73:62:59:12:6d:58:f2:b2:60:60:
87:6f:81:ac:1c:07:b0:80:7c:f4:92:c3:a7:37:b4:
89:77:4e:67:0d:9b:8d:1c:9f:66:ec:15:49:8a:d7:
4a:e2:f6:11:40:bc:80:27:92:13:62:90:8d:0b:c1:
47:e1:a6:fb:a6:f7:e2:d7:c0:e3:2d:b4:b5:34:15:
83:90:72:04:09:dc:37:a2:b9:50:d1:47:db:3e:01:
9f:aa:0a:8a:ff:1c:bc:1c:07:54:e5:fc:ef:90:4e:
8d:6d:b9:48:4c:17:b9:ce:12:ee:74:b8:2d:44:f8:
cd:2c:c2:ba:36:b3:be:09:ce:53:c9:a8:07:57:0d:
18:59:5f:37:b0:10:02:90:85:30:2d:52:b3:f4:a2:
59:e4:4e:a1:fa:fe:75:3c:89:97:f5:d6:2e:6d:31:
97:61:17:10:84:8a:d6:4c:4e:70:dd:84:9d:51:ac:
0d:40:93:43:d3:43:97:3b:8a:8a:95:55:f6:5a:c9:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:00:A4:8A:A0:48:88:F5:04:AC:71:19:2E:DF:6E:44:DE:2C:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2CBC82292DC11EFA60E2CA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.147.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5c:5c:65:36:13:1d:03:f6:a4:47:13:5f:26:2b:f2:83:6e:
c5:fc:aa:f2:cd:5f:5d:6f:9c:d6:67:ba:4f:d5:08:62:65:94:
8c:ce:85:74:4b:5f:41:75:aa:e5:a0:34:6c:da:6e:a0:9a:f2:
00:f6:ad:d7:ed:40:22:0d:65:76:d7:ea:10:72:a3:84:44:20:
fd:40:de:ab:a0:08:35:28:67:2c:db:0a:98:b7:c7:c6:9b:4f:
e6:70:88:cf:c1:22:3a:8e:c3:0b:67:0e:a4:cc:bb:ce:b2:b3:
29:51:da:b5:c4:c1:9d:3d:d8:01:68:8e:c3:23:9a:39:6d:7f:
b8:bd:33:08:ee:c1:ed:f7:48:99:99:13:8d:3f:a5:21:3c:10:
81:2d:a4:a9:8a:7c:9d:a6:c9:91:52:1f:11:26:40:03:86:f6:
7f:44:36:b9:8a:84:a5:12:0d:26:90:12:25:8e:34:86:6f:53:
59:70:a4:bd:08:13:d8:e1:f0:a0:0c:9e:ff:bd:52:d4:fb:59:
94:8c:71:dc:2b:4e:00:ba:a7:19:fb:b3:9b:d8:2f:0c:a7:3a:
9a:fd:39:67:7f:6a:38:f9:0a:e1:57:e4:08:f3:89:1d:94:da:
c0:de:2a:b1:a1:30:3a:af:6d:6d:35:a3:e1:f4:cd:79:fd:6d:
49:fb:96:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQIoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MTQyNTEwWhcNMjQxMjAxMTQyNTEwWjAYMRYw
FAYDVQQDEw02NzFiYWE0OS0zMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvXdNVre3QoEEi21zTTAVPtVfcyhz1iZbuf0ys/zvtHIG+L2z4bqrfd2Q
VU3KsT1x/coxGnIyqEZHpCI6tjeZq3NiWRJtWPKyYGCHb4GsHAewgHz0ksOnN7SJ
d05nDZuNHJ9m7BVJitdK4vYRQLyAJ5ITYpCNC8FH4ab7pvfi18DjLbS1NBWDkHIE
Cdw3orlQ0UfbPgGfqgqK/xy8HAdU5fzvkE6NbblITBe5zhLudLgtRPjNLMK6NrO+
Cc5TyagHVw0YWV83sBACkIUwLVKz9KJZ5E6h+v51PImX9dYubTGXYRcQhIrWTE5w
3YSdUawNQJND00OXO4qKlVX2WsmSuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFsN
AKSKoEiI9QSscRku325E3iwJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GMkNCQzgyMjkyREMxMUVGQTYwRTJDQTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGTMA0GCSqGSIb3DQEB
CwUAA4IBAQCSXFxlNhMdA/akRxNfJivyg27F/KryzV9db5zWZ7pP1QhiZZSMzoV0
S19BdarloDRs2m6gmvIA9q3X7UAiDWV21+oQcqOERCD9QN6roAg1KGcs2wqYt8fG
m0/mcIjPwSI6jsMLZw6kzLvOsrMpUdq1xMGdPdgBaI7DI5o5bX+4vTMI7sHt90iZ
mRONP6UhPBCBLaSpinydpsmRUh8RJkADhvZ/RDa5ioSlEg0mkBIljjSGb1NZcKS9
CBPY4fCgDJ7/vVLU+1mUjHHcK04AuqcZ+7Ob2C8Mpzqa/Tlnf2o4+QrhV+QI84kd
lNrA3iqxoTA6r21tNaPh9M15/W1J+5Z/
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:34 2024 by rpki-client on console-ams.rpki-client.org