Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13330DDEA9B011EFA6B15B93762E951A.roa
File: 13330DDEA9B011EFA6B15B93762E951A.roa (raw, json)
Hash identifier: gy4/LH3g6Src3zXmR6n0WFc9NQ98UYxfNdmLJjKLzX4=
Subject key identifier: 14:2E:9B:53:F4:D8:2C:D0:63:05:B1:EF:EE:81:C4:52:54:18:01:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13330DDEA9B011EFA6B15B93762E951A.roa
Signing time: Sat 23 Nov 2024 15:31:57 +0000
ROA not before: Sat 23 Nov 2024 15:31:54 +0000
ROA not after: Thu 26 Dec 2024 15:31:54 +0000
asID: 395886
IP address blocks: 154.201.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70050 (0x111a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 15:31:54 2024 GMT
Not After : Dec 26 15:31:54 2024 GMT
Subject: CN=6741f56d-8de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:21:20:59:52:c1:37:69:1c:1e:e4:35:c4:
55:c9:9c:19:92:64:04:24:e3:9b:d0:1d:90:14:f3:
f1:1d:ea:26:b8:51:86:5f:45:ac:90:d8:5d:ca:6e:
71:61:a6:54:8b:89:d7:b3:a2:ab:f6:4c:b9:29:77:
52:61:ed:3f:61:84:c5:7e:d0:2f:7a:e6:79:b4:a4:
58:57:ac:50:43:84:c7:18:76:7d:11:4b:cc:97:72:
6d:a4:21:c2:bc:ae:ce:6d:06:ca:f9:2a:df:f2:a7:
cb:86:3b:f7:aa:06:18:30:fb:d1:03:7a:eb:b2:c0:
48:84:54:ff:78:eb:88:53:4d:ed:68:1b:fc:5c:0a:
c2:0e:93:d5:6b:b6:e7:3b:39:55:36:c4:51:5a:d6:
6c:b3:c7:62:2c:f4:82:e4:2d:07:95:92:87:4d:87:
59:d9:94:ad:2c:06:1e:d3:04:52:47:53:42:45:75:
06:12:84:fe:d2:76:9c:c6:87:d1:c2:07:ff:ef:ab:
97:d7:75:03:97:cb:03:48:55:50:f3:85:5e:db:cf:
7d:5c:54:4b:42:e3:a7:6b:88:2f:be:84:4e:f0:7b:
e7:b1:e4:7a:6c:6f:fb:eb:f2:68:db:e4:8a:56:d1:
32:1d:54:6e:70:a3:77:95:3e:67:91:95:f9:aa:98:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:9B:53:F4:D8:2C:D0:63:05:B1:EF:EE:81:C4:52:54:18:01:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13330DDEA9B011EFA6B15B93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.88.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:f5:8f:c3:b1:72:34:d4:8d:73:53:2e:46:de:83:91:a3:cc:
98:7a:e3:97:66:d4:a6:9b:7a:16:44:0e:7f:95:8a:c0:7c:d0:
d3:b5:59:0e:f1:01:7b:64:22:e8:63:e9:1f:d2:ad:4f:14:38:
c2:ec:a1:a2:1c:05:6e:12:55:5c:b1:6d:57:ba:44:37:26:6b:
3c:c3:68:61:fe:fe:b8:77:1e:9a:2a:dc:1f:77:bd:d5:5f:47:
54:10:dd:45:af:c7:3c:ec:b7:e2:c3:90:78:38:85:05:c9:fd:
df:8a:0c:b0:3d:03:13:7f:55:c0:7c:5f:42:bf:25:3e:f4:e6:
a3:6b:19:65:54:41:08:bd:d3:80:cf:a2:7e:fe:6c:01:75:d0:
ac:84:35:fa:e5:9c:79:89:99:bb:0e:de:22:51:c2:9c:95:bf:
50:f0:1a:95:d0:81:fc:31:d8:5b:1b:0c:3c:60:be:c5:ef:b0:
37:a8:09:e2:dc:07:84:89:3c:b0:7e:9d:df:2a:7c:23:4d:14:
cd:99:7a:54:e9:3e:1e:e2:76:aa:f4:30:41:9a:36:78:d2:3e:
25:32:e2:a3:7d:a7:20:d4:5b:58:67:fa:c0:ac:b5:4d:87:7f:
c0:c3:cd:6b:64:60:84:4e:6c:59:61:50:1e:c3:72:7d:5b:e4:
7f:07:0a:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARGiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTUzMTU0WhcNMjQxMjI2MTUzMTU0WjAYMRYw
FAYDVQQDEw02NzQxZjU2ZC04ZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt4MhIFlSwTdpHB7kNcRVyZwZkmQEJOOb0B2QFPPxHeomuFGGX0WskNhd
ym5xYaZUi4nXs6Kr9ky5KXdSYe0/YYTFftAveuZ5tKRYV6xQQ4THGHZ9EUvMl3Jt
pCHCvK7ObQbK+Srf8qfLhjv3qgYYMPvRA3rrssBIhFT/eOuIU03taBv8XArCDpPV
a7bnOzlVNsRRWtZss8diLPSC5C0HlZKHTYdZ2ZStLAYe0wRSR1NCRXUGEoT+0nac
xofRwgf/76uX13UDl8sDSFVQ84Ve2899XFRLQuOna4gvvoRO8HvnseR6bG/76/Jo
2+SKVtEyHVRucKN3lT5nkZX5qpjizQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBQu
m1P02CzQYwWx7+6BxFJUGAGfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMzMzMERERUE5QjAxMUVGQTZCMTVCOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmslYMA0GCSqGSIb3DQEB
CwUAA4IBAQCL9Y/DsXI01I1zUy5G3oORo8yYeuOXZtSmm3oWRA5/lYrAfNDTtVkO
8QF7ZCLoY+kf0q1PFDjC7KGiHAVuElVcsW1XukQ3Jms8w2hh/v64dx6aKtwfd73V
X0dUEN1Fr8c87Lfiw5B4OIUFyf3figywPQMTf1XAfF9CvyU+9OajaxllVEEIvdOA
z6J+/mwBddCshDX65Zx5iZm7Dt4iUcKclb9Q8BqV0IH8MdhbGww8YL7F77A3qAni
3AeEiTywfp3fKnwjTRTNmXpU6T4e4naq9DBBmjZ40j4lMuKjfacg1FtYZ/rArLVN
h3/Aw81rZGCETmxZYVAew3J9W+R/Bwoh
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:12 2024 by rpki-client on console-fra.rpki-client.org