Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF5DFDE6E75E11EE9AB38A84775412E6.roa
File: FF5DFDE6E75E11EE9AB38A84775412E6.roa (raw, json)
Hash identifier: XYeaR4gcgfLqRY9Qq6EXMmbXwtwvi3TZm5zK26QFrdM=
Subject key identifier: 95:71:5B:71:2F:2E:C9:CC:DE:25:C4:FF:0E:B2:A7:9A:B6:CD:2E:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF5DFDE6E75E11EE9AB38A84775412E6.roa
Signing time: Thu 21 Mar 2024 08:42:49 +0000
ROA not before: Thu 21 Mar 2024 08:42:46 +0000
ROA not after: Tue 23 Apr 2024 08:42:46 +0000
asID: 44559
IP address blocks: 154.222.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42231 (0xa4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:42:46 2024 GMT
Not After : Apr 23 08:42:46 2024 GMT
Subject: CN=65fbf309-62f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:74:ed:75:03:46:e5:2a:8a:63:81:64:74:
58:4f:77:a8:3b:45:29:45:60:10:e2:ab:13:99:e7:
d9:fa:83:aa:29:8c:e0:b2:3b:9c:b4:f9:76:9b:55:
6e:f6:23:f2:f9:0d:0e:47:61:60:73:e0:0c:a0:2e:
aa:d1:1b:b9:5d:88:cf:54:8f:41:9a:32:54:29:eb:
b0:1a:7c:05:ec:10:49:be:6d:1f:28:6b:4b:51:b4:
b5:6f:7b:e4:18:b4:e0:b0:10:36:3a:30:ae:2f:f5:
29:e7:10:31:d1:fe:2c:7c:ca:93:90:47:a0:f6:5b:
39:c5:e6:c2:57:ae:b3:99:bf:be:53:4e:06:28:c3:
f2:17:00:26:70:f6:97:fa:6a:fc:76:60:40:9c:c1:
da:4b:a2:e0:d1:cc:18:fc:7b:84:a2:e5:5c:c2:79:
45:c0:f5:51:c1:43:12:28:41:6e:b7:25:c8:73:07:
90:09:40:4f:61:6a:29:34:a5:31:37:17:5d:1c:ed:
85:a7:ac:53:55:92:b1:4d:8f:90:79:f6:b4:63:64:
10:2a:99:f2:ac:33:61:2d:88:42:f0:95:cc:70:ad:
52:5e:fd:6e:a9:4a:d3:33:c8:11:a9:de:5e:11:e4:
66:01:6a:a3:12:0a:e5:94:6f:88:d3:f8:16:30:28:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:71:5B:71:2F:2E:C9:CC:DE:25:C4:FF:0E:B2:A7:9A:B6:CD:2E:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF5DFDE6E75E11EE9AB38A84775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7a:cd:e6:1f:25:37:b5:b1:21:d1:44:55:39:6c:33:57:52:
2a:19:01:23:e4:b4:2e:5f:8f:53:90:7c:d4:10:19:71:f1:e2:
36:fc:e1:69:67:9b:76:8f:7f:96:39:84:5d:aa:db:7c:a3:56:
7c:3e:3d:3e:b4:54:52:ef:36:39:06:14:9c:86:e6:6f:9b:df:
42:90:9d:94:6a:3e:7e:de:a2:d1:71:69:7b:44:e3:3b:9c:a4:
00:11:cd:61:a3:a4:40:79:b8:a4:a8:65:ec:58:af:58:54:ae:
ca:53:0a:17:c1:85:f8:57:8f:40:7d:af:a7:f0:47:b4:44:7f:
7b:0b:44:a3:13:1e:86:85:f5:5a:5e:af:57:19:d7:a9:23:45:
4d:35:24:7d:9f:ca:01:43:48:bd:de:3e:b0:a7:79:d7:fe:0f:
97:d7:d4:74:f9:75:58:63:7d:5b:21:4b:2f:35:15:65:21:e1:
57:c4:8d:06:f9:1b:a4:53:6d:ec:28:ba:50:41:10:37:1c:db:
b9:c5:96:61:d4:69:a3:dc:14:fb:2b:0b:dc:1e:39:92:97:80:
e8:18:53:18:f8:17:2e:a9:32:a4:79:2d:91:f8:4c:fe:f0:c6:
3d:b6:59:c6:a3:51:2a:af:32:b7:7b:06:1f:77:4f:67:4d:31:
e3:84:04:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKT3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDg0MjQ2WhcNMjQwNDIzMDg0MjQ2WjAYMRYw
FAYDVQQDEw02NWZiZjMwOS02MmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw5l07XUDRuUqimOBZHRYT3eoO0UpRWAQ4qsTmefZ+oOqKYzgsjuctPl2
m1Vu9iPy+Q0OR2Fgc+AMoC6q0Ru5XYjPVI9BmjJUKeuwGnwF7BBJvm0fKGtLUbS1
b3vkGLTgsBA2OjCuL/Up5xAx0f4sfMqTkEeg9ls5xebCV66zmb++U04GKMPyFwAm
cPaX+mr8dmBAnMHaS6Lg0cwY/HuEouVcwnlFwPVRwUMSKEFutyXIcweQCUBPYWop
NKUxNxddHO2Fp6xTVZKxTY+Qefa0Y2QQKpnyrDNhLYhC8JXMcK1SXv1uqUrTM8gR
qd5eEeRmAWqjEgrllG+I0/gWMCiQ/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJVx
W3EvLsnM3iXE/w6yp5q2zS6SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GRjVERkRFNkU3NUUxMUVFOUFCMzhBODQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4dMA0GCSqGSIb3DQEB
CwUAA4IBAQA+es3mHyU3tbEh0URVOWwzV1IqGQEj5LQuX49TkHzUEBlx8eI2/OFp
Z5t2j3+WOYRdqtt8o1Z8Pj0+tFRS7zY5BhSchuZvm99CkJ2Uaj5+3qLRcWl7ROM7
nKQAEc1ho6RAebikqGXsWK9YVK7KUwoXwYX4V49Afa+n8Ee0RH97C0SjEx6GhfVa
Xq9XGdepI0VNNSR9n8oBQ0i93j6wp3nX/g+X19R0+XVYY31bIUsvNRVlIeFXxI0G
+RukU23sKLpQQRA3HNu5xZZh1Gmj3BT7KwvcHjmSl4DoGFMY+BcuqTKkeS2R+Ez+
8MY9tlnGo1EqrzK3ewYfd09nTTHjhARQ
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:26 2024 by rpki-client on console-fra.rpki-client.org