Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03C1913E8D3811EFA9BAF59A762E951A.roa
File: 03C1913E8D3811EFA9BAF59A762E951A.roa (raw, json)
Hash identifier: 1PQ/1FKIpLZlTOPjLSx4pnQQc8yfoUfiCO6WIIkHQug=
Subject key identifier: 5C:22:69:1A:DB:D8:26:5F:25:AF:F1:48:C7:79:73:7E:92:89:DD:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03C1913E8D3811EFA9BAF59A762E951A.roa
Signing time: Fri 18 Oct 2024 10:01:59 +0000
ROA not before: Fri 18 Oct 2024 10:01:56 +0000
ROA not after: Sat 04 Jan 2025 10:01:56 +0000
asID: 136933
IP address blocks: 154.213.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65497 (0xffd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 10:01:56 2024 GMT
Not After : Jan 4 10:01:56 2025 GMT
Subject: CN=67123217-2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:85:ad:64:ce:66:aa:1c:f1:63:82:d1:6c:
b3:f7:22:37:79:20:85:df:94:fe:1b:63:ac:77:2b:
96:ce:3e:a6:63:3f:6c:bb:35:81:c2:f7:80:19:31:
4d:f6:ac:60:13:a1:a3:c3:8c:74:32:df:da:68:93:
a3:cc:ad:f6:bd:7c:85:3c:ec:ad:b2:24:ae:2b:96:
b6:19:cb:16:6b:73:af:f8:82:ea:47:4f:90:33:df:
c8:dc:9c:49:69:d3:f5:80:63:11:5e:75:e0:ce:20:
00:bb:38:4c:74:98:24:55:28:ea:bb:dd:89:ff:d7:
6d:54:e1:07:30:9d:2f:1a:ce:db:d4:02:9d:18:c7:
75:bb:95:55:9d:f6:bd:5c:aa:ec:0e:df:e1:06:7a:
2b:7d:65:89:82:6b:c5:16:1c:fb:2f:4e:6f:86:8a:
99:61:da:22:0d:23:8d:53:82:aa:fd:ed:58:6e:5f:
66:97:df:cb:94:83:99:31:58:92:15:f6:f2:30:ed:
9b:e7:70:36:e5:67:70:99:32:87:47:55:27:be:87:
c4:5f:25:f7:82:0b:f0:46:c1:b3:86:3b:62:90:3d:
ab:89:17:d8:2c:2a:44:b0:d5:51:d3:07:ed:5c:59:
aa:c4:11:8e:8d:ca:fb:88:78:e2:70:76:04:83:69:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:69:1A:DB:D8:26:5F:25:AF:F1:48:C7:79:73:7E:92:89:DD:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03C1913E8D3811EFA9BAF59A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5c:80:17:45:12:62:1d:33:fd:80:e1:36:a0:7d:6c:db:92:
71:73:3d:d0:1a:3a:02:1f:1c:19:3c:ba:fd:9d:1b:73:30:94:
e1:07:a1:a6:d1:20:a8:c1:71:63:d9:fa:50:32:91:9e:0b:e2:
75:f0:2b:79:86:33:8b:7c:cf:d5:25:9f:55:69:ce:56:cb:d4:
70:99:d9:17:8e:88:73:a3:56:5e:a9:7e:6f:6a:f5:f9:56:8f:
e5:f5:56:b8:ae:f7:9b:1a:93:2f:6b:bd:6b:a9:59:27:44:f6:
51:86:a1:0a:cb:8b:dc:2a:b2:9e:1f:9d:d7:ed:82:f4:2c:3d:
2a:dc:8b:ca:c5:17:ac:df:3b:f5:7c:0e:00:60:24:f0:5a:2e:
bd:5a:59:53:48:bc:19:f5:21:75:4c:d8:59:78:9d:10:5a:b4:
86:71:4d:04:53:02:65:f0:10:15:6c:1a:18:26:5b:c4:9c:0e:
d6:10:51:50:f2:0d:fc:cf:34:0c:48:d4:0c:b5:b5:48:95:87:
6a:ce:d9:54:4e:c7:19:b7:2f:c1:fb:b5:b0:ff:03:8f:56:ef:
af:15:28:1d:bd:df:c7:68:30:1f:e7:20:d2:4a:3a:12:44:b2:
d6:c8:42:18:35:f6:4e:00:45:d9:42:f0:cd:d2:0b:11:eb:f2:
ce:77:37:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAP/ZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDE4MTAwMTU2WhcNMjUwMTA0MTAwMTU2WjAYMRYw
FAYDVQQDEw02NzEyMzIxNy0yZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqsWFrWTOZqoc8WOC0Wyz9yI3eSCF35T+G2OsdyuWzj6mYz9suzWBwveA
GTFN9qxgE6Gjw4x0Mt/aaJOjzK32vXyFPOytsiSuK5a2GcsWa3Ov+ILqR0+QM9/I
3JxJadP1gGMRXnXgziAAuzhMdJgkVSjqu92J/9dtVOEHMJ0vGs7b1AKdGMd1u5VV
nfa9XKrsDt/hBnorfWWJgmvFFhz7L05vhoqZYdoiDSONU4Kq/e1Ybl9ml9/LlIOZ
MViSFfbyMO2b53A25WdwmTKHR1UnvofEXyX3ggvwRsGzhjtikD2riRfYLCpEsNVR
0wftXFmqxBGOjcr7iHjicHYEg2ldBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFwi
aRrb2CZfJa/xSMd5c36Sid05MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wM0MxOTEzRThEMzgxMUVGQTlCQUY1OUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtUWMA0GCSqGSIb3DQEB
CwUAA4IBAQB+XIAXRRJiHTP9gOE2oH1s25Jxcz3QGjoCHxwZPLr9nRtzMJThB6Gm
0SCowXFj2fpQMpGeC+J18Ct5hjOLfM/VJZ9Vac5Wy9RwmdkXjohzo1ZeqX5vavX5
Vo/l9Va4rvebGpMva71rqVknRPZRhqEKy4vcKrKeH53X7YL0LD0q3IvKxRes3zv1
fA4AYCTwWi69WllTSLwZ9SF1TNhZeJ0QWrSGcU0EUwJl8BAVbBoYJlvEnA7WEFFQ
8g38zzQMSNQMtbVIlYdqztlUTscZty/B+7Ww/wOPVu+vFSgdvd/HaDAf5yDSSjoS
RLLWyEIYNfZOAEXZQvDN0gsR6/LOdzek
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:53 2024 by rpki-client on console-ams.rpki-client.org