Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/063B84BC3DC211EFBAE6DA99762E951A.roa
File: 063B84BC3DC211EFBAE6DA99762E951A.roa (raw, json)
Hash identifier: kLY6JIYIW8xaeFIARhvFnNQK2YpPry2DpX1EEnhWQ9Q=
Subject key identifier: 8B:C2:AB:2A:0B:31:DD:9E:EA:86:CF:E2:38:D9:AE:C0:BD:A0:B8:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CF38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/063B84BC3DC211EFBAE6DA99762E951A.roa
Signing time: Tue 09 Jul 2024 07:08:21 +0000
ROA not before: Tue 09 Jul 2024 07:08:18 +0000
ROA not after: Wed 04 Jun 2025 07:08:18 +0000
asID: 137263
IP address blocks: 154.81.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53048 (0xcf38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 07:08:18 2024 GMT
Not After : Jun 4 07:08:18 2025 GMT
Subject: CN=668ce1e5-9792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:1e:98:65:32:b7:70:bb:84:e7:3c:81:7e:
e0:ce:40:42:17:45:2d:a3:60:17:91:c5:4c:02:66:
84:13:d8:e7:17:16:73:4c:8e:3e:72:5a:c6:3d:60:
7a:95:92:77:c0:ed:64:9d:dc:51:21:c5:da:52:c1:
f6:30:ed:6b:c1:92:bf:95:94:4b:69:78:c9:25:f5:
5c:6a:ba:3d:0a:88:61:3a:68:d6:e4:bd:18:e6:2a:
7c:e0:46:47:83:9d:64:30:d5:c9:db:39:49:ab:01:
c6:a2:7b:51:14:ad:42:90:86:eb:13:b9:a5:fc:c5:
a3:23:91:e1:eb:02:fe:aa:78:33:11:2b:cf:d0:55:
9d:a8:d9:b0:fb:58:91:d1:e4:74:95:82:67:ee:04:
3e:54:b6:20:6b:06:31:7c:14:f9:b5:ea:17:e1:19:
14:ef:a7:85:79:a7:fd:25:31:7b:ca:0e:28:2d:80:
2d:3f:fd:19:8e:ba:f6:b2:f3:42:e0:65:e2:52:6a:
27:c6:88:61:42:bb:78:80:11:34:f3:85:64:a1:a6:
b6:60:7f:e8:1d:85:c1:96:53:4e:f0:82:dc:d8:15:
27:d0:f1:87:58:41:07:d9:64:a6:27:7c:4a:e8:29:
2c:21:50:72:83:05:dd:b2:0a:dd:a5:d6:98:8a:c7:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:AB:2A:0B:31:DD:9E:EA:86:CF:E2:38:D9:AE:C0:BD:A0:B8:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/063B84BC3DC211EFBAE6DA99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a4:fa:72:a6:55:4b:83:03:a6:26:62:b8:fb:8e:b0:a8:de:
f3:7c:98:87:64:bc:48:1d:df:30:d6:3d:36:11:27:e8:76:eb:
44:ec:8d:41:b5:2d:a5:8a:14:1e:b2:29:3f:4a:5f:39:b6:09:
80:26:b9:33:2c:f7:73:57:61:19:6b:c9:e7:8a:1a:33:ba:23:
a7:f6:0b:20:61:d8:e2:0f:39:77:1f:2a:da:c6:be:70:1e:48:
ee:4c:90:38:1b:57:7b:55:ac:97:6f:25:3b:b4:ce:87:6f:0c:
7e:9d:74:d4:6a:26:ec:9c:f5:f3:c5:67:56:83:7d:bb:e6:3f:
38:96:b1:1a:20:31:0b:64:d4:e5:b3:9e:72:ec:50:28:29:30:
42:9c:fc:b0:f4:81:b5:ce:42:3f:60:7c:b0:ab:bf:b8:df:db:
f9:65:ef:2e:91:1e:b6:7a:d1:16:7f:eb:eb:5e:54:c8:a8:f7:
73:7f:d2:5a:b1:56:6c:5b:1d:f9:3a:8e:3a:42:e7:ad:7c:82:
7b:da:dc:79:40:8f:3b:5b:53:aa:08:37:1a:3d:91:31:75:a2:
e9:09:dc:f1:d6:8f:3c:ca:43:09:d1:27:9a:5f:be:66:e1:e7:
b8:6e:e4:3d:a5:27:3c:56:c0:e4:1a:e4:88:31:ce:1c:68:63:
51:3f:02:10
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAM84MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzA5MDcwODE4WhcNMjUwNjA0MDcwODE4WjAYMRYw
FAYDVQQDEw02NjhjZTFlNS05NzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0jwemGUyt3C7hOc8gX7gzkBCF0Uto2AXkcVMAmaEE9jnFxZzTI4+clrG
PWB6lZJ3wO1kndxRIcXaUsH2MO1rwZK/lZRLaXjJJfVcaro9CohhOmjW5L0Y5ip8
4EZHg51kMNXJ2zlJqwHGontRFK1CkIbrE7ml/MWjI5Hh6wL+qngzESvP0FWdqNmw
+1iR0eR0lYJn7gQ+VLYgawYxfBT5teoX4RkU76eFeaf9JTF7yg4oLYAtP/0Zjrr2
svNC4GXiUmonxohhQrt4gBE084Vkoaa2YH/oHYXBllNO8ILc2BUn0PGHWEEH2WSm
J3xK6CksIVBygwXdsgrdpdaYisd61QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIvC
qyoLMd2e6obP4jjZrsC9oLgAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNjNCODRCQzNEQzIxMUVGQkFFNkRBOTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlEKMA0GCSqGSIb3DQEB
CwUAA4IBAQB6pPpyplVLgwOmJmK4+46wqN7zfJiHZLxIHd8w1j02ESfodutE7I1B
tS2lihQesik/Sl85tgmAJrkzLPdzV2EZa8nnihozuiOn9gsgYdjiDzl3Hyraxr5w
HkjuTJA4G1d7VayXbyU7tM6Hbwx+nXTUaibsnPXzxWdWg3275j84lrEaIDELZNTl
s55y7FAoKTBCnPyw9IG1zkI/YHywq7+439v5Ze8ukR62etEWf+vrXlTIqPdzf9Ja
sVZsWx35Oo46QuetfIJ72tx5QI87W1OqCDcaPZExdaLpCdzx1o88ykMJ0SeaX75m
4ee4buQ9pSc8VsDkGuSIMc4caGNRPwIQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org