Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6F1FC8A45011EF8C23D349762E951A.roa
File: FE6F1FC8A45011EF8C23D349762E951A.roa (raw, json)
Hash identifier: ianvl48W+R6Cou1vNZQoUwdrZdDgiw/3X1f2i34qzHU=
Subject key identifier: 98:A4:B6:77:6A:B8:A7:5A:01:98:30:B4:F2:32:DB:96:D2:AC:B3:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6F1FC8A45011EF8C23D349762E951A.roa
Signing time: Sat 16 Nov 2024 19:28:44 +0000
ROA not before: Sat 16 Nov 2024 19:28:40 +0000
ROA not after: Mon 25 Nov 2024 19:28:40 +0000
asID: 9009
IP address blocks: 154.92.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69151 (0x10e1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:28:40 2024 GMT
Not After : Nov 25 19:28:40 2024 GMT
Subject: CN=6738f26c-95bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:b3:f6:47:9c:30:43:13:0f:59:18:14:da:
7d:56:10:27:42:ef:33:fb:6c:11:41:25:9d:ed:41:
6a:f9:14:62:fd:0d:2d:bb:4f:d7:23:3b:27:95:04:
7b:a1:30:ff:3a:13:60:f5:b3:ac:fc:a6:d2:2b:7a:
03:c6:42:9d:5f:b4:cc:fb:8f:76:4f:71:fc:60:23:
e7:0d:cb:37:94:67:c8:37:30:73:bd:8f:ec:22:d5:
e5:17:cc:d7:b3:f8:5e:4f:5f:d7:a3:81:e1:63:7c:
fd:5f:8a:d0:c8:b4:a8:b9:e9:3e:7a:13:22:7e:8a:
61:c6:c3:db:3a:6e:4b:61:79:89:92:5a:c7:f5:47:
e9:cc:05:fd:78:0b:ef:da:1c:54:f9:2b:03:cb:b4:
bf:6f:02:41:c5:66:4c:b4:b9:7a:08:e1:bf:7f:a6:
b1:23:24:aa:c8:b8:31:9b:de:cd:e8:3c:a2:db:de:
b8:ad:b0:8d:ae:59:31:01:43:1c:4c:ed:fe:52:cc:
3a:cc:a7:03:86:a7:01:fd:30:77:d0:25:ec:42:d1:
53:10:e4:5f:fb:ef:74:3f:cb:b1:83:f5:b5:9e:36:
97:c9:2e:18:c1:ec:ab:61:38:ea:a6:3f:df:42:10:
12:e7:20:bf:73:81:34:53:57:7c:00:d2:fc:de:a5:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:B6:77:6A:B8:A7:5A:01:98:30:B4:F2:32:DB:96:D2:AC:B3:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE6F1FC8A45011EF8C23D349762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.122.0/23
Signature Algorithm: sha256WithRSAEncryption
13:f7:1a:92:7e:5f:ae:07:9d:53:7e:c2:6d:0b:a6:41:03:84:
a8:37:03:dc:b8:cd:69:06:1e:22:5b:3a:31:37:48:6f:9c:d8:
cc:f9:6c:21:a3:49:7f:05:0d:91:8e:7b:80:d4:e8:a0:94:96:
87:74:c4:c2:0f:d8:44:e8:f2:54:9c:15:ba:a3:f9:c5:8f:39:
ca:cd:f9:c8:86:31:26:6d:d8:2f:8b:1c:5d:94:fd:6b:d1:04:
3f:10:99:5f:7c:50:ea:27:a2:f0:86:0d:f3:0c:7e:cf:0d:47:
75:f3:bf:e4:85:78:c5:3d:7b:73:56:f9:96:8f:c8:8a:d4:7e:
05:b2:24:51:64:68:f4:62:0a:6e:82:90:c6:39:d9:07:5a:41:
db:b1:22:bc:f5:1f:eb:8f:31:74:3b:e9:f6:24:c9:fa:01:77:
d5:ed:3a:d4:d2:d3:ba:86:e0:65:7a:da:15:6d:dd:8f:99:74:
eb:7e:68:0d:57:6f:d0:44:88:77:5e:0d:59:d4:37:50:a1:e4:
82:0c:dd:b1:51:f1:9f:cd:bc:c1:e1:c6:d8:3b:1c:42:b5:03:
ca:3a:7f:27:c3:24:16:e6:a4:84:30:8d:28:2e:22:c9:4e:46:
f5:a7:c2:a4:b7:b8:7c:b9:f3:78:bc:be:d0:c7:9a:08:8c:b5:
30:4e:ed:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ4fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MTkyODQwWhcNMjQxMTI1MTkyODQwWjAYMRYw
FAYDVQQDEw02NzM4ZjI2Yy05NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApSGz9kecMEMTD1kYFNp9VhAnQu8z+2wRQSWd7UFq+RRi/Q0tu0/XIzsn
lQR7oTD/OhNg9bOs/KbSK3oDxkKdX7TM+492T3H8YCPnDcs3lGfINzBzvY/sItXl
F8zXs/heT1/Xo4HhY3z9X4rQyLSouek+ehMifophxsPbOm5LYXmJklrH9UfpzAX9
eAvv2hxU+SsDy7S/bwJBxWZMtLl6COG/f6axIySqyLgxm97N6Dyi2964rbCNrlkx
AUMcTO3+Usw6zKcDhqcB/TB30CXsQtFTEORf++90P8uxg/W1njaXyS4YweyrYTjq
pj/fQhAS5yC/c4E0U1d8ANL83qVFdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJik
tndquKdaAZgwtPIy25bSrLO/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRTZGMUZDOEE0NTAxMUVGOEMyM0QzNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlx6MA0GCSqGSIb3DQEB
CwUAA4IBAQAT9xqSfl+uB51TfsJtC6ZBA4SoNwPcuM1pBh4iWzoxN0hvnNjM+Wwh
o0l/BQ2RjnuA1OiglJaHdMTCD9hE6PJUnBW6o/nFjznKzfnIhjEmbdgvixxdlP1r
0QQ/EJlffFDqJ6Lwhg3zDH7PDUd187/khXjFPXtzVvmWj8iK1H4FsiRRZGj0Ygpu
gpDGOdkHWkHbsSK89R/rjzF0O+n2JMn6AXfV7TrU0tO6huBletoVbd2PmXTrfmgN
V2/QRIh3Xg1Z1DdQoeSCDN2xUfGfzbzB4cbYOxxCtQPKOn8nwyQW5qSEMI0oLiLJ
Tkb1p8Kkt7h8ufN4vL7Qx5oIjLUwTu1q
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:16 2024 by rpki-client on console-ams.rpki-client.org