Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E5D5EA95DB11EFA5E09386762E951A.roa
File: 01E5D5EA95DB11EFA5E09386762E951A.roa (raw, json)
Hash identifier: Py/SVivbmO2YoFC9e6L6xDXFmH09WUi7H9e9mp5zA74=
Subject key identifier: A9:52:4B:A0:CB:8D:F9:D7:4F:D2:26:57:C2:EF:9B:FE:31:03:14:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010398
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E5D5EA95DB11EFA5E09386762E951A.roa
Signing time: Tue 29 Oct 2024 09:48:53 +0000
ROA not before: Tue 29 Oct 2024 09:48:50 +0000
ROA not after: Wed 04 Dec 2024 09:48:50 +0000
asID: 61112
IP address blocks: 154.83.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66456 (0x10398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:48:50 2024 GMT
Not After : Dec 4 09:48:50 2024 GMT
Subject: CN=6720af85-1826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:3b:91:c0:06:f1:7c:18:ab:92:26:d8:69:
ee:1c:09:68:71:c7:87:fa:ee:3c:0b:1d:c2:ca:8b:
b5:c3:88:2b:d7:8f:cd:c7:12:70:93:d0:ed:95:88:
f6:22:dd:b1:99:4c:f9:1a:bc:f9:cd:e6:8b:19:df:
f6:17:bb:a4:23:40:50:ac:76:90:b6:ee:8e:24:e8:
ef:7f:72:d9:8d:ff:d9:c8:5a:da:96:91:5e:19:6e:
74:45:bf:7b:71:4a:75:19:a1:dd:fd:cc:8d:50:fc:
19:d7:da:34:93:7b:e8:21:e7:b1:c3:be:21:46:da:
bc:f0:81:a8:c7:de:98:84:a6:f4:e1:bd:50:b5:68:
03:ee:23:2a:13:88:5a:34:6d:9b:77:d1:6d:35:03:
da:6e:4d:ff:4c:d1:f5:10:d3:9e:6e:1f:c9:42:15:
7a:9b:1b:91:a3:5d:37:1c:d2:85:2d:94:7d:7b:e4:
d6:56:da:c3:20:94:ed:3e:af:d7:a8:e6:42:db:da:
63:dc:ed:80:8f:8d:d9:99:aa:69:d9:f0:dc:a1:3e:
f7:4a:0c:df:e7:8c:36:d2:f1:ff:4d:34:d7:fc:8d:
ca:f6:62:89:2f:54:fa:31:97:0e:cf:b9:cc:b4:4d:
05:81:3a:ed:d7:01:89:ac:b0:3b:f4:bc:be:3b:d2:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:4B:A0:CB:8D:F9:D7:4F:D2:26:57:C2:EF:9B:FE:31:03:14:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01E5D5EA95DB11EFA5E09386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:8b:0f:40:70:a1:5b:ed:c6:69:8a:77:83:ab:87:dc:c3:0b:
6b:25:80:ee:69:5e:fa:58:b3:71:2f:cc:6c:f4:5f:9e:4e:1a:
a0:f1:0a:18:a4:83:97:30:66:a0:21:20:73:39:a2:cb:47:b1:
2b:85:56:a9:14:fa:1d:90:cd:bb:06:85:b9:ba:09:be:ca:19:
d9:55:fe:04:10:84:ea:9e:91:fe:19:d1:06:f3:56:66:c5:59:
33:f5:2c:b4:26:50:57:53:73:72:93:ad:31:77:b7:ef:90:1d:
55:51:0e:07:0a:81:98:c3:53:15:84:4c:c0:1f:b0:96:5a:6b:
0b:98:34:ba:48:39:40:42:18:f9:86:ba:47:63:a5:62:41:80:
ac:c8:b2:30:ef:17:bd:86:d9:83:02:1c:0c:4a:e5:47:e1:64:
43:6c:9d:35:f0:78:28:00:26:1b:73:c1:b4:3a:d8:ae:ae:93:
b4:04:66:48:35:89:f0:41:8f:98:18:d9:a6:a3:9d:a5:de:f5:
05:3f:d4:9a:b7:fa:e7:f7:aa:60:b0:1a:7b:2b:c4:30:53:56:
d2:b6:fe:1d:58:30:5d:17:d3:8f:e8:ae:75:f2:9b:2f:4c:90:
98:c8:f9:71:c8:b2:74:e5:72:ee:4e:30:59:34:9c:eb:92:20:
fd:4a:cb:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQOYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI5MDk0ODUwWhcNMjQxMjA0MDk0ODUwWjAYMRYw
FAYDVQQDEw02NzIwYWY4NS0xODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwQk7kcAG8XwYq5Im2GnuHAlocceH+u48Cx3Cyou1w4gr14/NxxJwk9Dt
lYj2It2xmUz5Grz5zeaLGd/2F7ukI0BQrHaQtu6OJOjvf3LZjf/ZyFralpFeGW50
Rb97cUp1GaHd/cyNUPwZ19o0k3voIeexw74hRtq88IGox96YhKb04b1QtWgD7iMq
E4haNG2bd9FtNQPabk3/TNH1ENOebh/JQhV6mxuRo103HNKFLZR9e+TWVtrDIJTt
Pq/XqOZC29pj3O2Aj43Zmapp2fDcoT73Sgzf54w20vH/TTTX/I3K9mKJL1T6MZcO
z7nMtE0FgTrt1wGJrLA79Ly+O9JxuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKlS
S6DLjfnXT9ImV8Lvm/4xAxSuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMUU1RDVFQTk1REIxMUVGQTVFMDkzODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlNYMA0GCSqGSIb3DQEB
CwUAA4IBAQC/iw9AcKFb7cZpineDq4fcwwtrJYDuaV76WLNxL8xs9F+eThqg8QoY
pIOXMGagISBzOaLLR7ErhVapFPodkM27BoW5ugm+yhnZVf4EEITqnpH+GdEG81Zm
xVkz9Sy0JlBXU3Nyk60xd7fvkB1VUQ4HCoGYw1MVhEzAH7CWWmsLmDS6SDlAQhj5
hrpHY6ViQYCsyLIw7xe9htmDAhwMSuVH4WRDbJ018HgoACYbc8G0OtiurpO0BGZI
NYnwQY+YGNmmo52l3vUFP9Sat/rn96pgsBp7K8QwU1bStv4dWDBdF9OP6K518psv
TJCYyPlxyLJ05XLuTjBZNJzrkiD9SssC
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org