Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A05282A19611EF8B7FE69D762E951A.roa
File: 11A05282A19611EF8B7FE69D762E951A.roa (raw, json)
Hash identifier: xGArPDHXOrBfxBY4W9PHCrGDvRWew9ssuA6zEnybYKE=
Subject key identifier: AF:AB:FB:6B:F2:2D:26:76:E8:80:73:DD:7D:CA:5D:AD:3B:52:A8:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CAD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A05282A19611EF8B7FE69D762E951A.roa
Signing time: Wed 13 Nov 2024 08:05:38 +0000
ROA not before: Wed 13 Nov 2024 08:05:35 +0000
ROA not after: Sat 07 Dec 2024 08:05:35 +0000
asID: 138915
IP address blocks: 154.223.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68781 (0x10cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:05:35 2024 GMT
Not After : Dec 7 08:05:35 2024 GMT
Subject: CN=67345dd2-977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:62:41:7b:b7:a6:de:a6:86:df:45:7c:e6:
69:c6:32:e0:fb:a4:23:44:c1:50:97:e0:5c:61:88:
24:13:80:86:ef:e4:0f:1d:fc:15:a5:09:24:e5:d8:
14:38:d5:a5:a4:23:b7:bb:a0:16:82:79:0d:76:b4:
62:67:0b:18:c3:8b:d6:14:36:3e:02:c6:94:cd:e9:
5f:1d:0a:34:12:7f:09:78:ce:47:10:d0:a8:db:f7:
a0:cc:3e:68:a4:ba:0c:18:0f:77:f7:70:ca:e5:b1:
df:53:64:9c:3d:71:3a:e1:ef:91:ba:ab:1a:21:18:
68:4d:bf:3d:c0:ef:61:27:18:39:4d:9f:4b:aa:a9:
7f:1d:00:3d:0c:b7:02:b6:69:8c:ec:5c:fe:35:42:
0a:db:49:2d:2f:10:9f:50:e0:bc:8b:54:02:3e:e3:
4c:8c:66:11:c5:e8:64:1b:73:87:82:bb:21:68:79:
c0:e8:fe:e0:ec:f3:c8:2a:46:8e:59:3a:0c:0a:b5:
20:7b:d8:0d:c9:68:b8:a1:40:8a:84:9f:95:50:ac:
74:82:b9:de:a1:b9:50:86:8b:16:7b:ba:af:cb:c7:
d9:96:1c:5a:db:2c:49:15:b9:e6:8e:b3:ce:52:06:
ed:fc:59:68:ce:92:bc:8a:07:10:95:35:6d:67:52:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:FB:6B:F2:2D:26:76:E8:80:73:DD:7D:CA:5D:AD:3B:52:A8:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A05282A19611EF8B7FE69D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.70.0/23
Signature Algorithm: sha256WithRSAEncryption
35:2e:ed:03:65:b2:a5:0d:43:01:e1:83:ad:6e:c7:5e:c9:96:
fe:91:e2:62:74:b3:02:48:ef:3c:bb:9f:f7:40:21:77:9e:e9:
2b:24:e1:f2:a9:a2:d1:68:de:e7:4d:4b:01:a6:6e:10:e7:23:
57:7a:82:65:34:a1:7e:16:dd:a4:42:e1:02:0d:99:20:6f:81:
7e:61:c3:cf:1f:c8:7c:7c:b0:40:c5:ab:cc:35:e6:25:89:67:
67:f3:82:47:aa:6a:5d:9c:6a:ac:8c:5b:f2:f3:7e:44:72:ff:
42:5b:25:a6:fc:9a:0c:33:a3:90:ba:c0:fa:a7:8e:28:30:e2:
e1:be:ba:d8:2c:65:81:87:50:35:89:60:6d:95:af:7f:9e:37:
84:57:3f:2f:d2:b6:7c:d7:f0:a3:09:87:d4:04:59:6e:22:cc:
d4:df:0a:ad:ff:0c:e0:f0:82:24:85:85:6e:9e:06:6d:4f:ef:
bc:e5:52:8e:b0:af:ba:ba:0c:ff:56:72:9c:56:73:2b:6d:a7:
51:5a:82:18:45:84:fd:70:09:dc:19:70:da:d6:5a:59:7d:2d:
39:ec:12:35:b2:81:cf:85:98:f7:83:70:fa:00:1c:76:fb:4d:
50:0f:67:71:45:e1:db:d9:0d:67:e3:5a:40:01:0f:87:f1:9d:
62:14:00:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQytMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEzMDgwNTM1WhcNMjQxMjA3MDgwNTM1WjAYMRYw
FAYDVQQDEw02NzM0NWRkMi05NzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxRliQXu3pt6mht9FfOZpxjLg+6QjRMFQl+BcYYgkE4CG7+QPHfwVpQkk
5dgUONWlpCO3u6AWgnkNdrRiZwsYw4vWFDY+AsaUzelfHQo0En8JeM5HENCo2/eg
zD5opLoMGA9393DK5bHfU2ScPXE64e+RuqsaIRhoTb89wO9hJxg5TZ9Lqql/HQA9
DLcCtmmM7Fz+NUIK20ktLxCfUOC8i1QCPuNMjGYRxehkG3OHgrshaHnA6P7g7PPI
KkaOWToMCrUge9gNyWi4oUCKhJ+VUKx0grneoblQhosWe7qvy8fZlhxa2yxJFbnm
jrPOUgbt/FlozpK8igcQlTVtZ1IeAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK+r
+2vyLSZ26IBz3X3KXa07Uqg1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMUEwNTI4MkExOTYxMUVGOEI3RkU2OUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt9GMA0GCSqGSIb3DQEB
CwUAA4IBAQA1Lu0DZbKlDUMB4YOtbsdeyZb+keJidLMCSO88u5/3QCF3nukrJOHy
qaLRaN7nTUsBpm4Q5yNXeoJlNKF+Ft2kQuECDZkgb4F+YcPPH8h8fLBAxavMNeYl
iWdn84JHqmpdnGqsjFvy835Ecv9CWyWm/JoMM6OQusD6p44oMOLhvrrYLGWBh1A1
iWBtla9/njeEVz8v0rZ81/CjCYfUBFluIszU3wqt/wzg8IIkhYVungZtT++85VKO
sK+6ugz/VnKcVnMrbadRWoIYRYT9cAncGXDa1lpZfS057BI1soHPhZj3g3D6ABx2
+01QD2dxReHb2Q1n41pAAQ+H8Z1iFACM
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:12 2024 by rpki-client on console-fra.rpki-client.org