Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E3421832BB11EF921248AD762E951A.roa
File: 10E3421832BB11EF921248AD762E951A.roa (raw, json)
Hash identifier: 0W3wvFCtxBJC4D/bARb3vnF18F7iDIYerwwIc4aACaU=
Subject key identifier: D0:1E:EF:EE:73:1C:C9:E9:FC:51:A4:50:D6:C2:CB:C1:C9:1F:52:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C655
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E3421832BB11EF921248AD762E951A.roa
Signing time: Tue 25 Jun 2024 06:20:50 +0000
ROA not before: Tue 25 Jun 2024 06:20:46 +0000
ROA not after: Fri 03 Jan 2025 06:20:46 +0000
asID: 40065
IP address blocks: 154.214.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50773 (0xc655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:20:46 2024 GMT
Not After : Jan 3 06:20:46 2025 GMT
Subject: CN=667a61c1-735e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:27:4c:5f:b5:8e:24:c4:36:dc:12:3c:b5:
fb:51:4f:3a:c3:fc:bc:d6:8e:7e:51:f8:b9:4f:9d:
02:84:cc:2a:fc:70:24:d2:ad:74:74:cc:f8:7f:f7:
96:2e:65:80:4e:c3:c4:7f:4d:f0:2e:88:f7:d3:d0:
36:e1:56:bb:73:8e:96:4a:2d:14:71:7c:ad:34:49:
e4:ed:2c:8a:1f:83:eb:33:11:83:62:0d:e5:ff:d0:
fc:37:91:9a:da:07:be:fe:8b:98:a1:0d:5e:81:76:
3a:d3:b9:7f:02:5a:e6:4b:db:d8:4b:9c:f4:ce:d4:
aa:9d:02:7e:10:09:53:e3:66:54:6e:bd:a1:7a:22:
0a:ca:6d:57:e4:4d:ad:77:5f:aa:81:30:86:88:1c:
34:24:94:be:ec:5a:85:26:43:0e:a4:8f:6e:ec:7c:
85:9e:10:7c:f7:75:8b:f6:da:46:7e:3b:b3:22:53:
29:f3:3a:85:be:66:27:94:e2:a5:90:46:40:b1:a2:
f4:4f:2c:1a:99:b1:7f:eb:3f:53:d7:27:18:bf:5b:
68:6b:0e:6d:b3:cd:3a:89:6f:4a:0a:89:61:c8:9c:
38:cb:c8:15:81:56:b9:88:74:ae:ed:6e:f4:d2:f6:
53:2e:da:b2:11:b5:f8:1a:74:d9:14:ef:f1:67:29:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:EF:EE:73:1C:C9:E9:FC:51:A4:50:D6:C2:CB:C1:C9:1F:52:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10E3421832BB11EF921248AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.4.0/22
Signature Algorithm: sha256WithRSAEncryption
42:05:f6:6f:c4:c7:04:ee:4c:2a:8b:83:17:35:7a:65:ae:cd:
c3:ec:89:8e:45:46:41:92:61:f3:f1:c1:4d:a6:1f:4d:45:59:
e8:9d:97:6b:ae:0a:0d:ac:88:82:d1:a4:f2:a4:4b:d5:07:c8:
5f:c2:fb:b5:b6:d8:7e:c5:9b:73:46:8d:98:bb:45:a4:8e:f1:
fc:79:1c:16:15:7c:32:6a:c0:7a:dd:f7:15:97:52:fd:dc:75:
20:b4:e3:d8:2a:bc:9d:cb:59:f7:bf:f8:ef:d2:26:a0:1e:84:
03:ed:7d:ce:eb:c1:37:1a:b0:32:de:aa:03:a9:7c:ed:67:6a:
67:48:2b:cb:25:71:55:fb:b9:b8:7c:59:0e:f1:74:cf:07:a1:
12:3f:fa:9c:06:e3:53:e7:23:ed:a5:7e:1d:5c:6c:99:b1:78:
9d:bd:64:65:b5:e8:e0:33:0d:54:36:9e:3d:3c:5e:32:23:38:
06:01:f0:e8:b7:b9:67:90:f5:c0:0b:44:40:8b:72:0d:4d:7a:
a5:85:94:e2:5e:bb:16:3f:31:04:33:46:4f:f0:2c:6e:b6:a3:
22:f7:26:2a:b5:16:ae:16:06:3f:b7:5a:0e:c0:b0:9f:2c:43:
17:d8:16:c5:de:63:7c:f0:36:4b:9e:9a:31:19:3b:a4:0d:83:
4f:a8:43:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMZVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI1MDYyMDQ2WhcNMjUwMTAzMDYyMDQ2WjAYMRYw
FAYDVQQDEw02NjdhNjFjMS03MzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0YAnTF+1jiTENtwSPLX7UU86w/y81o5+Ufi5T50ChMwq/HAk0q10dMz4
f/eWLmWATsPEf03wLoj309A24Va7c46WSi0UcXytNEnk7SyKH4PrMxGDYg3l/9D8
N5Ga2ge+/ouYoQ1egXY607l/AlrmS9vYS5z0ztSqnQJ+EAlT42ZUbr2heiIKym1X
5E2td1+qgTCGiBw0JJS+7FqFJkMOpI9u7HyFnhB893WL9tpGfjuzIlMp8zqFvmYn
lOKlkEZAsaL0TywambF/6z9T1ycYv1toaw5ts806iW9KColhyJw4y8gVgVa5iHSu
7W700vZTLtqyEbX4GnTZFO/xZymPMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNAe
7+5zHMnp/FGkUNbCy8HJH1LKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMEUzNDIxODMyQkIxMUVGOTIxMjQ4QUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtYEMA0GCSqGSIb3DQEB
CwUAA4IBAQBCBfZvxMcE7kwqi4MXNXplrs3D7ImORUZBkmHz8cFNph9NRVnonZdr
rgoNrIiC0aTypEvVB8hfwvu1tth+xZtzRo2Yu0WkjvH8eRwWFXwyasB63fcVl1L9
3HUgtOPYKrydy1n3v/jv0iagHoQD7X3O68E3GrAy3qoDqXztZ2pnSCvLJXFV+7m4
fFkO8XTPB6ESP/qcBuNT5yPtpX4dXGyZsXidvWRltejgMw1UNp49PF4yIzgGAfDo
t7lnkPXAC0RAi3INTXqlhZTiXrsWPzEEM0ZP8CxutqMi9yYqtRauFgY/t1oOwLCf
LEMX2BbF3mN88DZLnpoxGTukDYNPqEMs
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:22 2024 by rpki-client on console-fra.rpki-client.org