Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13FA748E32B711EFAF74F991762E951A.roa
File: 13FA748E32B711EFAF74F991762E951A.roa (raw, json)
Hash identifier: 6NKR2kY4M1xIlrDXRkBnBeZh3iWpO8cqoMv1V47tM2Q=
Subject key identifier: AB:96:3B:37:A2:85:DC:31:30:BA:25:E3:D8:A6:AA:AA:00:22:29:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C63D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13FA748E32B711EFAF74F991762E951A.roa
Signing time: Tue 25 Jun 2024 05:52:17 +0000
ROA not before: Tue 25 Jun 2024 05:52:14 +0000
ROA not after: Fri 03 Jan 2025 05:52:14 +0000
asID: 40065
IP address blocks: 154.88.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50749 (0xc63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 05:52:14 2024 GMT
Not After : Jan 3 05:52:14 2025 GMT
Subject: CN=667a5b11-a0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:8d:d8:15:de:c8:f7:51:88:92:37:a2:23:
af:c2:75:6d:63:4e:27:a5:0c:67:04:2b:26:71:79:
f9:99:47:58:df:f8:16:4d:4f:f1:67:d7:5f:8f:ed:
d4:a5:2d:4d:9f:40:e2:ab:2c:d6:e8:7f:a9:e4:df:
6c:81:af:c3:34:8e:66:28:2c:23:01:31:5b:57:0e:
59:82:c0:c7:4b:c3:e0:b9:c4:21:37:56:c5:b4:0a:
b3:25:aa:a8:ca:ae:2c:70:06:e9:bb:2d:81:b3:77:
6d:5d:ae:38:f8:3a:a8:f8:0a:f0:6f:d9:e7:6c:17:
19:fa:17:5f:1a:23:ee:9c:a8:d0:45:d5:55:ff:28:
e1:35:f4:da:94:b6:97:69:6c:f6:b0:2f:d7:3a:46:
a7:27:31:e5:f7:a3:a4:9a:c7:2a:b7:dd:33:65:5c:
61:95:7f:81:b9:8e:73:1d:24:48:f4:c3:00:04:0c:
c1:7a:36:33:00:54:aa:0b:88:a2:38:03:85:dc:16:
e3:fa:44:dd:17:45:d8:58:74:35:ab:84:93:e4:72:
cc:18:3d:76:8e:42:1e:d3:ea:f9:f3:04:a6:17:84:
59:e7:a4:33:c6:40:6c:23:7c:c2:18:e2:82:39:d8:
ff:a6:de:1f:2d:d4:0b:5a:a9:5c:19:b5:3c:9b:a7:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:96:3B:37:A2:85:DC:31:30:BA:25:E3:D8:A6:AA:AA:00:22:29:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13FA748E32B711EFAF74F991762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.20.0/22
Signature Algorithm: sha256WithRSAEncryption
17:24:dc:35:39:56:ee:15:ad:3b:ee:6f:74:cd:75:5a:a7:a8:
fe:33:88:99:06:c4:60:97:8a:ce:4d:4b:7d:23:4f:5d:40:f7:
f0:77:4c:ce:aa:b2:35:53:17:bf:b2:a0:bd:37:eb:d3:db:57:
52:9c:3e:ef:6f:32:2e:81:3f:4c:d4:2d:ce:df:8f:f3:4c:f3:
3b:b0:1c:ee:54:e0:a2:6a:33:84:9a:32:e8:86:9c:34:84:a1:
d5:1a:30:51:fe:55:34:b5:a8:4e:b7:88:13:8b:b4:59:85:a5:
64:ea:28:7f:27:8d:51:1e:e1:68:4a:f1:2f:98:84:6f:43:14:
f5:9c:83:12:07:22:c3:0e:62:e9:28:ed:c4:8c:9e:3b:12:19:
e4:ec:96:5a:1f:47:b8:c2:7d:00:30:c1:b4:a2:0b:9a:23:04:
af:5e:d9:6b:4f:8d:7c:a7:72:2a:78:d5:8f:64:18:30:34:6e:
ed:5c:5c:f8:a2:bd:99:a5:5a:74:0c:40:34:4c:de:64:d9:e5:
3a:cf:b8:e3:71:7c:6b:e6:e3:63:f6:38:b0:ad:09:b9:50:f1:
f1:dc:93:01:85:12:5c:85:e6:06:76:6b:b2:9a:5d:e8:d8:ac:
e6:58:ca:b7:52:73:9d:4a:3d:f3:cd:6f:e3:82:64:c1:58:fd:
5d:dc:ea:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMY9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI1MDU1MjE0WhcNMjUwMTAzMDU1MjE0WjAYMRYw
FAYDVQQDEw02NjdhNWIxMS1hMGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxG+N2BXeyPdRiJI3oiOvwnVtY04npQxnBCsmcXn5mUdY3/gWTU/xZ9df
j+3UpS1Nn0DiqyzW6H+p5N9sga/DNI5mKCwjATFbVw5ZgsDHS8PgucQhN1bFtAqz
Jaqoyq4scAbpuy2Bs3dtXa44+Dqo+Arwb9nnbBcZ+hdfGiPunKjQRdVV/yjhNfTa
lLaXaWz2sC/XOkanJzHl96Okmscqt90zZVxhlX+BuY5zHSRI9MMABAzBejYzAFSq
C4iiOAOF3Bbj+kTdF0XYWHQ1q4ST5HLMGD12jkIe0+r58wSmF4RZ56QzxkBsI3zC
GOKCOdj/pt4fLdQLWqlcGbU8m6fh0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKuW
OzeihdwxMLol49imqqoAIilNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xM0ZBNzQ4RTMyQjcxMUVGQUY3NEY5OTE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlgUMA0GCSqGSIb3DQEB
CwUAA4IBAQAXJNw1OVbuFa077m90zXVap6j+M4iZBsRgl4rOTUt9I09dQPfwd0zO
qrI1Uxe/sqC9N+vT21dSnD7vbzIugT9M1C3O34/zTPM7sBzuVOCiajOEmjLohpw0
hKHVGjBR/lU0tahOt4gTi7RZhaVk6ih/J41RHuFoSvEvmIRvQxT1nIMSByLDDmLp
KO3EjJ47Ehnk7JZaH0e4wn0AMMG0oguaIwSvXtlrT418p3IqeNWPZBgwNG7tXFz4
or2ZpVp0DEA0TN5k2eU6z7jjcXxr5uNj9jiwrQm5UPHx3JMBhRJcheYGdmuyml3o
2KzmWMq3UnOdSj3zzW/jgmTBWP1d3OpM
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:13 2024 by rpki-client on console-fra.rpki-client.org