Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/1D9BA0C2C4CF11EE9D26CF60775412E6.roa
File: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (raw, json)
Hash identifier: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=
Subject key identifier: 5C:40:EA:36:FA:1F:53:21:0C:DD:92:E5:00:C1:B6:E5:07:E6:D5:7E
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 21
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/1D9BA0C2C4CF11EE9D26CF60775412E6.roa
Signing time: Tue 06 Feb 2024 09:07:13 +0000
ROA not before: Tue 06 Feb 2024 09:07:10 +0000
ROA not after: Sat 06 Feb 2027 09:07:10 +0000
asID: 36905
IP address blocks: 154.126.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:07:10 2024 GMT
Not After : Feb 6 09:07:10 2027 GMT
Subject: CN=65c1f6c1-60c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:33:ca:06:f8:e6:f2:31:bf:1a:6e:df:50:
1e:93:0b:f1:ed:27:21:51:9e:56:22:2a:d5:e4:a0:
a4:15:a9:f9:2f:6d:7f:ba:c9:83:2c:7f:1e:d9:44:
64:d9:85:33:53:b7:f4:cf:d7:36:3d:4e:88:ff:e8:
db:b8:6c:06:4c:50:11:0e:95:66:4b:f5:6a:e9:91:
a3:a2:cc:d4:a8:7e:57:80:69:ee:75:12:33:35:52:
37:21:33:69:22:ae:7a:58:6c:31:ba:d8:01:be:e1:
e3:ff:84:b9:c2:7f:c7:e8:07:7b:14:91:f0:20:65:
02:0d:b2:7e:87:f7:05:39:3d:36:d5:33:99:10:9b:
88:63:4c:b8:0f:53:8b:88:b3:47:2e:ca:04:9e:e7:
c8:7e:6d:af:3c:e4:f9:73:b5:87:92:9e:02:f5:47:
1c:c9:34:70:dd:1a:69:b2:ea:aa:ee:75:7e:4b:59:
ae:f4:22:93:38:d6:e4:9e:ff:f4:49:d7:5b:60:72:
35:d2:4e:f1:c7:70:7d:7b:00:d6:30:23:f5:da:d6:
8b:f8:5e:11:99:de:ce:41:b3:12:25:d7:39:64:bb:
cb:96:48:48:48:34:49:8b:1b:94:25:2a:47:bc:01:
60:7a:e2:ca:e6:49:4b:fc:f4:30:48:97:0f:f5:97:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:EA:36:FA:1F:53:21:0C:DD:92:E5:00:C1:B6:E5:07:E6:D5:7E
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/1D9BA0C2C4CF11EE9D26CF60775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.174.0/24
Signature Algorithm: sha256WithRSAEncryption
37:16:7a:7c:1f:44:67:bc:45:47:e4:79:a7:33:92:dc:60:69:
22:f1:7a:81:74:e1:72:ac:8d:7c:7e:e8:ac:0d:22:6d:d5:c6:
c0:f4:22:95:18:28:f7:66:e3:d9:e5:2c:f1:84:ef:96:13:d9:
4f:c8:a2:37:2a:94:d6:d9:be:1c:48:26:9d:da:24:fc:22:46:
63:2b:6e:a1:7f:cc:c8:f1:40:66:7d:9e:1e:aa:2f:a8:2b:e3:
f8:fc:a3:21:96:13:ec:08:76:ed:86:1b:e6:52:14:e5:ef:bb:
3c:8c:6b:ed:c8:e1:8a:33:ec:e1:e1:ed:18:72:31:a0:48:47:
d5:e9:ab:ce:29:62:b3:4e:cd:e5:78:65:26:a7:95:75:3f:a0:
b7:e8:c7:0c:bf:c4:2f:15:49:ac:27:04:59:a2:2a:95:13:f1:
50:23:06:7c:42:73:e8:54:43:44:d0:36:e0:93:73:ac:ce:11:
c7:9c:de:76:f5:db:a1:d9:ac:7f:a0:a2:c2:9a:fa:f4:f1:51:
d2:86:af:fe:76:ae:8b:8e:63:29:66:26:36:47:78:cc:7f:5a:
7c:ab:5d:71:a5:13:b6:b2:97:bf:0e:52:2b:b5:e7:51:00:86:
e6:72:c9:11:4c:8f:b1:70:38:18:51:8e:4b:e0:00:c7:41:2c:
fb:d8:ed:3b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBITANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NUQyQ0FGMTEwLwYDVQQFEyhGREY0QkYwMDEzQjFGMUFBQ0EzOTU1MUJBNjI2Q0Ey
NDY4M0RBRTY2MB4XDTI0MDIwNjA5MDcxMFoXDTI3MDIwNjA5MDcxMFowGDEWMBQG
A1UEAxMNNjVjMWY2YzEtNjBjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIoM8oG+ObyMb8abt9QHpML8e0nIVGeViIq1eSgpBWp+S9tf7rJgyx/HtlE
ZNmFM1O39M/XNj1OiP/o27hsBkxQEQ6VZkv1aumRo6LM1Kh+V4Bp7nUSMzVSNyEz
aSKuelhsMbrYAb7h4/+EucJ/x+gHexSR8CBlAg2yfof3BTk9NtUzmRCbiGNMuA9T
i4izRy7KBJ7nyH5trzzk+XO1h5KeAvVHHMk0cN0aabLqqu51fktZrvQikzjW5J7/
9EnXW2ByNdJO8cdwfXsA1jAj9drWi/heEZnezkGzEiXXOWS7y5ZISEg0SYsblCUq
R7wBYHriyuZJS/z0MEiXD/WXbdECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRcQOo2
+h9TIQzdkuUAwbblB+bVfjAfBgNVHSMEGDAWgBT99L8AE7Hxqso5VRumJsokaD2u
ZjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1NDEyRTYvX2ZTX0FC
T3g4YXJLT1ZVYnBpYktKR2c5cm1ZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1
NDEyRTYvMUQ5QkEwQzJDNENGMTFFRTlEMjZDRjYwNzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJp+rjANBgkqhkiG9w0BAQsF
AAOCAQEANxZ6fB9EZ7xFR+R5pzOS3GBpIvF6gXThcqyNfH7orA0ibdXGwPQilRgo
92bj2eUs8YTvlhPZT8iiNyqU1tm+HEgmndok/CJGYytuoX/MyPFAZn2eHqovqCvj
+PyjIZYT7Ah27YYb5lIU5e+7PIxr7cjhijPs4eHtGHIxoEhH1emrzilis07N5Xhl
JqeVdT+gt+jHDL/ELxVJrCcEWaIqlRPxUCMGfEJz6FRDRNA24JNzrM4Rx5zedvXb
odmsf6Ciwpr69PFR0oav/naui45jKWYmNkd4zH9afKtdcaUTtrKXvw5SK7XnUQCG
5nLJEUyPsXA4GFGOS+AAx0Es+9jtOw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:35 2024 by rpki-client on console-ams.rpki-client.org