Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/69F6F72E183911EFBF341D4D017001B1.roa
File: 69F6F72E183911EFBF341D4D017001B1.roa (raw, json)
Hash identifier: DuMThKY6xBymEy/33KKiiuYHPeaPmPt6u+DXp7D5WjQ=
Subject key identifier: 5B:D3:8C:B9:5A:22:F0:4E:E3:1A:60:9E:95:CE:60:9F:4C:3D:62:B6
Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial: 0759
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/69F6F72E183911EFBF341D4D017001B1.roa
Signing time: Wed 22 May 2024 12:47:14 +0000
ROA not before: Wed 22 May 2024 12:47:10 +0000
ROA not after: Sun 31 Dec 2034 12:47:10 +0000
asID: 6149
IP address blocks: 154.115.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Validity
Not Before: May 22 12:47:10 2024 GMT
Not After : Dec 31 12:47:10 2034 GMT
Subject: CN=664de952-c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:f7:56:f7:38:23:c2:6a:be:c4:7a:13:e7:
af:44:5b:41:86:a5:fb:b8:24:d2:de:7f:fd:3f:12:
b9:fc:a3:6c:39:bf:a9:e4:ae:21:f6:64:11:53:91:
9b:49:ef:7a:88:07:1e:33:dc:ad:54:32:18:29:df:
71:8a:c5:49:c0:a4:f1:c5:29:fb:35:73:03:54:06:
9f:2f:e9:57:fc:7b:c7:7c:ba:70:70:69:58:bf:ec:
4f:e5:58:d1:94:dc:a9:ca:3c:03:a1:49:d4:f6:82:
23:d8:d5:3d:21:4b:7c:27:05:78:7b:da:ac:36:1e:
c2:7b:b3:e1:85:10:20:1e:64:76:4d:fd:a7:ba:55:
50:44:67:4b:11:e9:3b:c8:aa:69:e4:f0:57:00:26:
aa:9d:af:7c:33:9e:fd:75:9d:9e:b2:8c:d3:6c:2f:
85:4a:10:45:d0:6b:bd:4f:42:a7:32:1f:eb:fb:05:
6b:8e:ac:7c:e2:a5:dc:e8:21:a2:69:a1:d7:3b:23:
e3:3c:9a:b3:b7:77:01:71:81:08:12:cc:3e:7a:88:
25:db:8f:d2:01:0b:f8:14:67:d4:4f:55:e6:59:bc:
08:2a:b1:d6:28:8a:12:46:65:15:e5:60:3d:32:9a:
15:aa:25:35:b7:5b:e6:fa:15:f8:d8:6f:90:45:97:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:8C:B9:5A:22:F0:4E:E3:1A:60:9E:95:CE:60:9F:4C:3D:62:B6
X509v3 Authority Key Identifier:
keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/69F6F72E183911EFBF341D4D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.115.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:90:df:61:a0:a4:49:89:a8:23:74:db:99:ac:9d:ca:b1:cd:
e2:3f:4d:59:35:1f:c6:f5:94:b8:b3:01:4c:57:d2:e5:e0:3d:
22:f3:c4:c5:5e:5f:e2:12:17:ad:47:3e:57:c4:04:22:23:09:
22:a4:72:0a:71:37:32:4b:8c:e3:89:c4:6a:37:63:e4:6c:ee:
68:0f:96:fa:4c:f3:ca:c6:43:98:a7:91:d9:42:0e:fd:05:b7:
5f:32:70:e3:21:77:a3:8c:67:38:d7:8b:b6:18:77:e6:c5:d0:
24:9b:5d:d2:67:88:84:08:7c:c9:9e:3e:06:0e:77:cd:8d:21:
3a:a9:eb:f3:a3:46:9a:b3:de:58:6c:e9:fa:ab:ca:34:3c:c5:
45:07:a2:ab:df:10:87:cd:a4:82:1a:d9:91:3c:ea:60:77:83:
6a:00:f8:68:55:7a:93:12:3c:92:cd:83:6c:14:01:0d:38:65:
e1:f9:6d:3f:b9:e9:42:e9:ea:b4:52:9f:f2:15:5a:d8:14:9f:
f7:50:4e:c0:e8:2f:1b:dc:c7:98:cf:07:84:8b:5c:9c:03:5b:
ea:ca:92:5e:78:77:0c:1f:40:90:cd:f2:1b:33:64:8a:f0:0c:
46:7d:51:59:9d:0c:77:98:4b:53:18:e2:20:b0:78:81:9a:26:
46:3a:a7:52
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB1kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlGNEJBRjExMC8GA1UEBRMoOTgyMUM4NzIyMUQyNzBCNDJGRjlERDgyNjA0OEI5
OTJDMEUwRTNGODAeFw0yNDA1MjIxMjQ3MTBaFw0zNDEyMzExMjQ3MTBaMBgxFjAU
BgNVBAMTDTY2NGRlOTUyLWMyMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFx/dW9zgjwmq+xHoT569EW0GGpfu4JNLef/0/Ern8o2w5v6nkriH2ZBFT
kZtJ73qIBx4z3K1UMhgp33GKxUnApPHFKfs1cwNUBp8v6Vf8e8d8unBwaVi/7E/l
WNGU3KnKPAOhSdT2giPY1T0hS3wnBXh72qw2HsJ7s+GFECAeZHZN/ae6VVBEZ0sR
6TvIqmnk8FcAJqqdr3wznv11nZ6yjNNsL4VKEEXQa71PQqcyH+v7BWuOrHzipdzo
IaJpodc7I+M8mrO3dwFxgQgSzD56iCXbj9IBC/gUZ9RPVeZZvAgqsdYoihJGZRXl
YD0ymhWqJTW3W+b6FfjYb5BFl/dLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUW9OM
uVoi8E7jGmCelc5gn0w9YrYwHwYDVR0jBBgwFoAUmCHIciHScLQv+d2CYEi5ksDg
4/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4QUVBMjI4L21DSElj
aUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21DSEljaUhTY0xRdi1kMkNZRWk1a3NEZzRfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkI5RjRCLzYxQTJFMUEyOERFMDExRTlBQzE0RjYzMkY4
QUVBMjI4LzY5RjZGNzJFMTgzOTExRUZCRjM0MUQ0RDAxNzAwMUIxLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACacwAwDQYJKoZIhvcNAQEL
BQADggEBAFKQ32GgpEmJqCN025msncqxzeI/TVk1H8b1lLizAUxX0uXgPSLzxMVe
X+ISF61HPlfEBCIjCSKkcgpxNzJLjOOJxGo3Y+Rs7mgPlvpM88rGQ5inkdlCDv0F
t18ycOMhd6OMZzjXi7YYd+bF0CSbXdJniIQIfMmePgYOd82NITqp6/OjRpqz3lhs
6fqryjQ8xUUHoqvfEIfNpIIa2ZE86mB3g2oA+GhVepMSPJLNg2wUAQ04ZeH5bT+5
6ULp6rRSn/IVWtgUn/dQTsDoLxvcx5jPB4SLXJwDW+rKkl54dwwfQJDN8hszZIrw
DEZ9UVmdDHeYS1MY4iCweIGaJkY6p1I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org