Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10557B22953011EFBE9E3D4F762E951A.roa
File: 10557B22953011EFBE9E3D4F762E951A.roa (raw, json)
Hash identifier: URxIx4miYi2kc/pw1+axSVj87zvcSQn3c2AwtWn/xjw=
Subject key identifier: 76:BD:3E:34:B0:DD:72:48:AC:2C:DF:4E:FC:62:AF:6D:CB:A9:B4:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10557B22953011EFBE9E3D4F762E951A.roa
Signing time: Mon 28 Oct 2024 13:25:14 +0000
ROA not before: Mon 28 Oct 2024 13:25:10 +0000
ROA not after: Sun 01 Dec 2024 13:25:10 +0000
asID: 202656
IP address blocks: 154.222.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66279 (0x102e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:25:10 2024 GMT
Not After : Dec 1 13:25:10 2024 GMT
Subject: CN=671f90ba-e189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:63:be:fa:1d:44:a7:15:85:c0:89:ce:6a:
9b:c2:45:96:b5:6d:78:b1:e3:ba:d1:16:cc:68:4c:
4e:b6:be:95:0c:36:f6:84:fa:77:d1:9f:e0:15:57:
8e:fa:9e:17:af:36:d5:7b:8f:d6:e6:ac:3c:1c:92:
cd:ef:f6:0e:18:67:12:7d:27:e9:58:f9:a5:b0:c7:
3e:fc:31:19:89:2c:c3:62:d1:b6:59:54:be:7a:20:
f5:5a:2f:1e:87:e4:aa:d1:74:3a:82:2b:43:c6:89:
3d:29:85:55:c2:27:c8:8a:6b:e3:e7:68:9b:a5:e6:
df:dc:3c:05:02:de:2e:ba:8a:1b:2a:be:39:5d:c3:
41:64:97:8b:81:75:bc:00:ff:7e:6d:44:9f:ae:11:
ec:d9:3a:f8:1f:f6:9c:03:ce:a5:37:2b:1b:32:09:
31:fa:f5:d8:f4:ca:9f:cb:3a:fe:7d:97:44:e1:10:
c9:68:cb:cf:49:ba:a0:77:b2:4b:6c:01:67:de:33:
83:e3:c0:ea:38:9b:f2:d6:4a:45:66:ed:9f:51:84:
61:db:62:20:ce:d3:8f:1a:5f:11:72:3c:b5:87:0a:
bf:66:c7:06:0d:64:f7:38:52:4f:89:9e:26:be:76:
a8:45:f2:13:91:6d:fc:60:27:79:ef:8c:0f:fd:7d:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BD:3E:34:B0:DD:72:48:AC:2C:DF:4E:FC:62:AF:6D:CB:A9:B4:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10557B22953011EFBE9E3D4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.206.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f0:aa:33:52:30:d2:5c:b3:ef:81:41:9f:49:3b:d5:69:0d:
72:93:32:14:c3:34:50:94:dc:fb:cf:3d:df:ea:95:b0:a5:dc:
cc:5f:17:54:b6:04:e0:ba:e9:41:de:2a:39:c0:33:6e:32:01:
1b:cd:8d:3e:73:f2:94:69:aa:64:78:c9:ac:22:20:c0:47:c0:
4b:cc:36:cf:33:07:82:a1:a8:9e:13:b9:d4:b0:93:ae:50:85:
e6:5f:a8:8b:6d:89:97:a1:27:6e:ae:c7:6f:f1:81:2b:43:68:
2e:3b:0b:ab:43:3d:bc:64:af:fc:69:0b:82:75:b1:59:d3:e6:
9a:70:02:45:2f:2b:1a:c0:40:73:9b:67:4c:6e:4f:2c:d2:82:
38:99:35:be:69:74:b9:07:f0:42:26:2b:ce:ce:1c:90:99:a7:
3b:18:c3:7f:5d:7f:fb:d3:78:d9:47:4e:e5:a7:17:5e:b7:57:
de:a0:05:0d:43:b8:e8:9c:30:c5:e6:7b:b2:10:c6:23:e4:aa:
1a:5c:87:46:6c:1a:33:aa:66:97:9e:77:23:d0:e5:d6:c3:37:
bc:54:f2:bb:2e:59:e9:79:6f:81:aa:18:66:96:64:c6:83:de:
4c:f9:ac:12:17:b4:e2:f5:a5:5a:f0:be:5a:05:91:e8:37:ec:
48:4e:5c:9a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQLnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MTMyNTEwWhcNMjQxMjAxMTMyNTEwWjAYMRYw
FAYDVQQDEw02NzFmOTBiYS1lMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoH1jvvodRKcVhcCJzmqbwkWWtW14seO60RbMaExOtr6VDDb2hPp30Z/g
FVeO+p4XrzbVe4/W5qw8HJLN7/YOGGcSfSfpWPmlsMc+/DEZiSzDYtG2WVS+eiD1
Wi8eh+Sq0XQ6gitDxok9KYVVwifIimvj52ibpebf3DwFAt4uuoobKr45XcNBZJeL
gXW8AP9+bUSfrhHs2Tr4H/acA86lNysbMgkx+vXY9Mqfyzr+fZdE4RDJaMvPSbqg
d7JLbAFn3jOD48DqOJvy1kpFZu2fUYRh22IgztOPGl8Rcjy1hwq/ZscGDWT3OFJP
iZ4mvnaoRfITkW38YCd574wP/X3GhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHa9
PjSw3XJIrCzfTvxir23LqbTlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMDU1N0IyMjk1MzAxMUVGQkU5RTNENEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7OMA0GCSqGSIb3DQEB
CwUAA4IBAQA28KozUjDSXLPvgUGfSTvVaQ1ykzIUwzRQlNz7zz3f6pWwpdzMXxdU
tgTguulB3io5wDNuMgEbzY0+c/KUaapkeMmsIiDAR8BLzDbPMweCoaieE7nUsJOu
UIXmX6iLbYmXoSdursdv8YErQ2guOwurQz28ZK/8aQuCdbFZ0+aacAJFLysawEBz
m2dMbk8s0oI4mTW+aXS5B/BCJivOzhyQmac7GMN/XX/703jZR07lpxdet1feoAUN
Q7jonDDF5nuyEMYj5KoaXIdGbBozqmaXnncj0OXWwze8VPK7LlnpeW+BqhhmlmTG
g95M+awSF7Ti9aVa8L5aBZHoN+xITlya
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:22 2024 by rpki-client on console-fra.rpki-client.org