Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/061F00F8A44C11EF965FE5A8762E951A.roa
File: 061F00F8A44C11EF965FE5A8762E951A.roa (raw, json)
Hash identifier: OCagXiVAk9BLx1lcHdX0w+RCQcIkgAbcObiBh3tHmfE=
Subject key identifier: 5F:4A:26:F6:A4:99:00:01:69:97:75:86:B1:F2:57:85:83:05:88:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/061F00F8A44C11EF965FE5A8762E951A.roa
Signing time: Sat 16 Nov 2024 18:53:10 +0000
ROA not before: Sat 16 Nov 2024 18:53:02 +0000
ROA not after: Mon 25 Nov 2024 18:53:02 +0000
asID: 7029
IP address blocks: 154.194.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69113 (0x10df9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 18:53:02 2024 GMT
Not After : Nov 25 18:53:02 2024 GMT
Subject: CN=6738ea16-6003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:ac:78:11:41:5c:f6:0f:a8:8d:79:ce:9d:
a3:f6:48:28:f3:c0:ba:36:ba:53:ef:33:c2:58:ed:
dd:cb:fb:e9:31:7f:d6:f1:24:0a:98:f5:10:43:24:
32:6a:56:66:3d:59:0f:94:9d:90:e8:54:5f:d0:bf:
ed:c3:af:82:3d:11:cd:3d:23:be:b7:26:7d:aa:7c:
ac:49:76:75:53:66:65:70:84:93:7e:d2:d1:72:9e:
d6:5c:9b:22:b5:54:35:d4:1a:95:5d:4f:74:cc:40:
ed:04:32:5b:bb:52:ee:da:89:aa:31:08:81:41:1e:
b6:b6:5b:70:28:39:e7:38:e0:a6:6d:8d:4c:31:95:
2c:6f:1d:f7:8d:1e:b3:ab:dd:f4:61:d4:e5:33:0e:
e8:3c:c5:cc:8c:ce:1e:28:01:91:cf:89:48:6c:5d:
60:ae:ae:5f:46:45:4d:f1:06:8e:69:0d:5e:5f:5e:
8c:fe:7e:38:f5:83:42:f3:45:c6:f6:2f:00:53:6a:
b7:ae:c7:99:fc:97:52:cb:49:33:8f:fa:88:d5:b5:
ee:3b:53:7a:b3:96:f7:c7:be:f5:68:ce:31:3c:e5:
9d:3f:7d:97:33:eb:90:23:48:37:7f:3d:b4:b9:1d:
94:03:89:47:c7:38:71:2a:f8:38:86:3d:b9:7e:73:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:26:F6:A4:99:00:01:69:97:75:86:B1:F2:57:85:83:05:88:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/061F00F8A44C11EF965FE5A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
28:dc:5e:b2:a3:13:56:8b:5c:0d:2e:4e:3d:bb:ee:36:46:91:
6b:4a:7d:23:a3:8f:68:d9:b9:c6:08:5d:2b:f4:8d:5f:5e:f9:
e0:45:0c:56:e3:24:61:34:fe:f1:d1:a5:5a:30:58:b3:b1:ad:
f7:9e:f7:f8:2f:31:a7:31:a8:c1:e3:cb:37:eb:64:8b:ec:6c:
81:6f:7f:4f:1f:f5:d7:a5:f5:b2:53:7a:2e:da:65:ce:0d:d5:
1a:94:1f:f0:99:0f:22:53:9c:55:08:cb:0b:68:0d:24:32:8b:
87:bd:4c:d6:bf:c0:a8:d7:2e:a3:2c:c6:8a:d3:27:fd:5a:75:
22:a3:12:cd:20:07:36:d6:74:e4:93:b7:a8:c3:f6:99:74:75:
50:55:a1:92:41:9d:7f:c3:7d:30:6b:11:07:c0:d0:f7:8d:c3:
3b:23:b0:26:77:3a:fe:4e:e2:38:36:f5:49:22:4a:74:24:af:
45:53:59:98:38:fb:a6:67:e0:c0:13:ad:df:d6:c4:33:e8:db:
36:b4:d9:68:e0:e2:9a:57:0e:b7:44:dd:2c:7d:29:a6:f0:9c:
2c:20:c3:b1:c7:65:72:d1:dc:bb:5a:43:be:70:a7:3e:09:bc:
3f:b7:d0:23:12:8e:7a:a4:a5:61:a9:da:0d:be:77:bb:dc:74:
c8:4e:26:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ35MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MTg1MzAyWhcNMjQxMTI1MTg1MzAyWjAYMRYw
FAYDVQQDEw02NzM4ZWExNi02MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArpSseBFBXPYPqI15zp2j9kgo88C6NrpT7zPCWO3dy/vpMX/W8SQKmPUQ
QyQyalZmPVkPlJ2Q6FRf0L/tw6+CPRHNPSO+tyZ9qnysSXZ1U2ZlcISTftLRcp7W
XJsitVQ11BqVXU90zEDtBDJbu1Lu2omqMQiBQR62tltwKDnnOOCmbY1MMZUsbx33
jR6zq930YdTlMw7oPMXMjM4eKAGRz4lIbF1grq5fRkVN8QaOaQ1eX16M/n449YNC
80XG9i8AU2q3rseZ/JdSy0kzj/qI1bXuO1N6s5b3x771aM4xPOWdP32XM+uQI0g3
fz20uR2UA4lHxzhxKvg4hj25fnNM1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF9K
JvakmQABaZd1hrHyV4WDBYi4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNjFGMDBGOEE0NEMxMUVGOTY1RkU1QTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsIYMA0GCSqGSIb3DQEB
CwUAA4IBAQAo3F6yoxNWi1wNLk49u+42RpFrSn0jo49o2bnGCF0r9I1fXvngRQxW
4yRhNP7x0aVaMFizsa33nvf4LzGnMajB48s362SL7GyBb39PH/XXpfWyU3ou2mXO
DdUalB/wmQ8iU5xVCMsLaA0kMouHvUzWv8Co1y6jLMaK0yf9WnUioxLNIAc21nTk
k7eow/aZdHVQVaGSQZ1/w30waxEHwND3jcM7I7Amdzr+TuI4NvVJIkp0JK9FU1mY
OPumZ+DAE63f1sQz6Ns2tNlo4OKaVw63RN0sfSmm8JwsIMOxx2Vy0dy7WkO+cKc+
Cbw/t9AjEo56pKVhqdoNvne73HTITiZ7
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:29 2024 by rpki-client on console-ams.rpki-client.org