Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/BFE793D2C4CE11EE81D70760775412E6.roa
File: BFE793D2C4CE11EE81D70760775412E6.roa (raw, json)
Hash identifier: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=
Subject key identifier: BD:8B:61:F6:7E:80:56:8E:D1:E2:75:1D:7F:8C:C6:06:93:2E:85:74
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 1D
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/BFE793D2C4CE11EE81D70760775412E6.roa
Signing time: Tue 06 Feb 2024 09:04:36 +0000
ROA not before: Tue 06 Feb 2024 09:04:32 +0000
ROA not after: Sat 06 Feb 2027 09:04:32 +0000
asID: 36905
IP address blocks: 154.126.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:04:32 2024 GMT
Not After : Feb 6 09:04:32 2027 GMT
Subject: CN=65c1f624-0912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:3b:41:ad:fa:39:07:22:71:04:ac:3c:dd:
e1:89:c7:af:36:48:6b:59:d4:93:2a:e2:42:04:8c:
f2:c3:83:ac:74:a6:c6:48:06:39:24:9d:f0:6d:8c:
04:44:43:8b:51:15:de:91:e0:14:ed:4c:bf:c4:a3:
b9:2f:c7:37:3c:fb:83:97:f0:d9:f9:38:6c:10:28:
38:ff:8a:f8:2e:c6:16:6c:75:1b:4b:08:c8:45:d5:
bf:a1:ad:8f:77:35:8a:2c:ad:15:ee:68:b6:ff:8a:
2d:af:4e:63:21:62:c0:47:ea:6e:3d:5d:bc:ec:fe:
46:f6:8f:9f:55:88:e8:54:cc:b2:82:c7:72:b4:68:
3d:78:a4:b2:81:ac:af:8d:6a:a6:4b:9d:58:89:e9:
48:16:ab:38:3a:3d:b5:a5:c2:9a:1c:2b:12:50:5d:
3f:56:a4:ba:f4:e4:06:25:7a:10:23:13:cc:f7:b8:
d9:66:7a:58:5a:b2:29:a3:de:d9:27:26:c3:ec:17:
49:76:5b:23:e1:f2:3b:e5:6c:c5:f2:55:28:e6:a4:
74:d8:01:b7:2b:8c:cd:2c:aa:c1:35:ed:d4:17:c2:
2f:63:7c:83:b9:f0:73:b9:7a:e8:1c:da:7b:ab:76:
2f:25:8e:b0:29:ef:81:41:0e:c0:03:f9:36:86:90:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:61:F6:7E:80:56:8E:D1:E2:75:1D:7F:8C:C6:06:93:2E:85:74
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/BFE793D2C4CE11EE81D70760775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.172.0/24
Signature Algorithm: sha256WithRSAEncryption
54:74:52:5d:28:de:65:eb:60:a5:79:53:42:42:0d:67:cd:66:
ed:45:0d:34:f8:7a:ee:06:ce:16:72:68:69:c9:9a:3e:d1:fd:
ad:f9:f6:19:d1:a6:cc:a7:0e:63:e0:f1:b8:38:6f:16:d4:1e:
ef:8d:e5:b6:a8:46:4b:3c:ad:58:d0:42:6d:58:d2:87:7f:88:
ee:4d:a1:fe:d6:b1:a3:1e:b0:ee:b9:ee:09:0a:c4:00:61:2d:
34:46:88:94:cc:f6:98:41:cd:e0:7c:06:ae:d5:30:f1:9e:29:
f2:98:66:93:21:8a:52:1e:47:d5:9a:15:c3:77:48:c6:4e:0f:
64:a8:22:55:a9:13:56:65:9a:2b:87:6b:84:fb:55:bd:11:e6:
08:3f:ec:59:52:a7:25:da:f0:ce:1a:7b:b2:6d:09:51:2b:54:
0c:33:8e:21:02:12:3a:15:4f:70:5b:fc:df:26:39:00:95:0e:
15:67:a6:2c:34:27:73:12:38:99:36:7c:b8:15:e2:d3:cf:4f:
10:08:7e:ca:0a:16:7f:f7:46:c7:3e:6d:b4:b1:15:5c:36:bc:
e0:04:78:06:41:84:06:79:3e:dc:66:ce:95:b4:7a:ad:4e:25:
8c:96:df:63:31:69:13:4b:0b:cf:2d:13:bc:0e:17:c2:a4:89:
5f:8e:a3:cb
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NUQyQ0FGMTEwLwYDVQQFEyhGREY0QkYwMDEzQjFGMUFBQ0EzOTU1MUJBNjI2Q0Ey
NDY4M0RBRTY2MB4XDTI0MDIwNjA5MDQzMloXDTI3MDIwNjA5MDQzMlowGDEWMBQG
A1UEAxMNNjVjMWY2MjQtMDkxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMS8O0Gt+jkHInEErDzd4YnHrzZIa1nUkyriQgSM8sODrHSmxkgGOSSd8G2M
BERDi1EV3pHgFO1Mv8SjuS/HNzz7g5fw2fk4bBAoOP+K+C7GFmx1G0sIyEXVv6Gt
j3c1iiytFe5otv+KLa9OYyFiwEfqbj1dvOz+RvaPn1WI6FTMsoLHcrRoPXiksoGs
r41qpkudWInpSBarODo9taXCmhwrElBdP1akuvTkBiV6ECMTzPe42WZ6WFqyKaPe
2Scmw+wXSXZbI+HyO+VsxfJVKOakdNgBtyuMzSyqwTXt1BfCL2N8g7nwc7l66Bza
e6t2LyWOsCnvgUEOwAP5NoaQnksCAwEAAaOCAqUwggKhMB0GA1UdDgQWBBS9i2H2
foBWjtHidR1/jMYGky6FdDAfBgNVHSMEGDAWgBT99L8AE7Hxqso5VRumJsokaD2u
ZjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1NDEyRTYvX2ZTX0FC
T3g4YXJLT1ZVYnBpYktKR2c5cm1ZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1
NDEyRTYvQkZFNzkzRDJDNENFMTFFRTgxRDcwNzYwNzc1NDEyRTYucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJp+rDANBgkqhkiG9w0BAQsF
AAOCAQEAVHRSXSjeZetgpXlTQkINZ81m7UUNNPh67gbOFnJoacmaPtH9rfn2GdGm
zKcOY+DxuDhvFtQe743ltqhGSzytWNBCbVjSh3+I7k2h/taxox6w7rnuCQrEAGEt
NEaIlMz2mEHN4HwGrtUw8Z4p8phmkyGKUh5H1ZoVw3dIxk4PZKgiVakTVmWaK4dr
hPtVvRHmCD/sWVKnJdrwzhp7sm0JUStUDDOOIQISOhVPcFv83yY5AJUOFWemLDQn
cxI4mTZ8uBXi089PEAh+ygoWf/dGxz5ttLEVXDa84AR4BkGEBnk+3GbOlbR6rU4l
jJbfYzFpE0sLzy0TvA4XwqSJX46jyw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:35 2024 by rpki-client on console-ams.rpki-client.org