Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A21A22A8DC11EF8C80475D762E951A.roa
File: 14A21A22A8DC11EF8C80475D762E951A.roa (raw, json)
Hash identifier: 52e1Lmmq1rZF9hxGVmYfGsCBACx3tT7xW6ZvXgkHsqg=
Subject key identifier: 2A:DC:1B:00:52:F8:EA:43:7F:E6:8D:19:AA:C3:DB:9B:C9:AF:15:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011057
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A21A22A8DC11EF8C80475D762E951A.roa
Signing time: Fri 22 Nov 2024 14:14:26 +0000
ROA not before: Fri 22 Nov 2024 14:14:23 +0000
ROA not after: Mon 09 Dec 2024 14:14:23 +0000
asID: 5065
IP address blocks: 154.206.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69719 (0x11057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:14:23 2024 GMT
Not After : Dec 9 14:14:23 2024 GMT
Subject: CN=674091c2-3fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:a0:c7:02:33:7e:4d:a8:5c:b1:8a:6b:20:
e5:63:af:9f:0c:5c:4c:01:f3:63:bb:85:0e:88:ae:
56:3c:3c:95:8d:8b:4b:c0:0b:c8:0c:d8:a1:b1:0b:
b7:d3:ad:e7:7d:55:9b:40:66:9f:2a:bb:a0:a6:e6:
04:b7:2f:1c:e7:4b:b4:5a:38:dc:2a:89:a6:82:13:
b6:99:3b:dd:5d:3b:4f:d3:12:f6:73:8e:79:64:cf:
1e:1d:40:b1:0c:91:f2:15:c3:f7:e8:c8:01:c8:1c:
98:80:77:27:aa:ea:78:c4:6d:b2:08:76:61:6d:45:
3d:3d:73:1b:27:77:47:ed:db:72:b0:bd:a7:6e:d4:
96:03:c7:d7:f9:7c:32:f4:c0:83:73:81:ff:58:84:
62:b6:53:a7:0e:37:cb:ec:01:07:78:c7:73:7f:e0:
f3:cc:6a:df:db:4d:1c:d8:b1:9f:87:87:ad:b5:ae:
b4:b3:7f:0b:57:39:84:30:6d:59:29:ef:41:ec:40:
00:f0:8a:08:b5:21:be:39:ba:c4:cb:32:04:11:e4:
2a:b9:98:02:84:14:ac:ae:ed:16:ba:63:b9:85:19:
57:da:95:2d:e0:19:a3:8b:af:a2:a5:66:48:08:0b:
a9:84:99:62:e5:a5:07:cd:9b:3d:9b:26:49:b5:8b:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:1B:00:52:F8:EA:43:7F:E6:8D:19:AA:C3:DB:9B:C9:AF:15:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14A21A22A8DC11EF8C80475D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.52.0/22
Signature Algorithm: sha256WithRSAEncryption
30:f6:f0:d8:0c:fc:c6:01:ff:02:ca:4f:10:a3:d7:ae:96:91:
d1:9d:97:20:53:c8:23:b1:ef:e8:89:2b:3f:5f:50:37:2c:80:
d6:3f:7b:c4:c3:99:1f:ee:f1:3b:b5:e7:fd:6b:ba:54:6c:7c:
2a:3a:26:26:2d:01:28:bf:ea:e8:c7:16:c4:ca:4b:8f:7d:a0:
de:f6:90:cd:ca:7f:29:3d:b3:d7:73:80:9b:2e:cd:00:6f:26:
e5:b6:da:f4:dc:18:95:87:ae:ca:5f:a8:8f:dc:2a:2c:d2:9a:
b5:3d:b8:db:92:d5:6b:60:aa:42:70:43:2b:1c:dc:64:4a:32:
8a:cf:c4:8e:93:bc:f3:22:2b:cc:b7:70:93:36:aa:e4:61:32:
b7:fe:f5:6a:a7:d9:1c:6e:db:a8:3f:19:8c:b1:7f:a1:dc:52:
a4:8b:4c:e1:d4:ae:86:60:4b:4e:d7:92:a2:09:06:10:3c:84:
da:9b:45:af:87:50:7b:90:10:7a:33:e7:55:6e:49:34:ea:57:
a0:38:e8:98:84:70:0b:d5:b9:71:7c:fb:ab:78:45:1b:d4:3f:
98:e4:3d:59:17:2b:b7:f1:20:64:58:35:2c:94:5c:5b:84:1c:
20:fc:65:5f:6a:40:50:e8:8e:18:e2:fc:a3:a5:e8:a1:de:7c:
1e:2b:87:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARBXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTQxNDIzWhcNMjQxMjA5MTQxNDIzWjAYMRYw
FAYDVQQDEw02NzQwOTFjMi0zZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtqgxwIzfk2oXLGKayDlY6+fDFxMAfNju4UOiK5WPDyVjYtLwAvIDNih
sQu3063nfVWbQGafKrugpuYEty8c50u0WjjcKommghO2mTvdXTtP0xL2c455ZM8e
HUCxDJHyFcP36MgByByYgHcnqup4xG2yCHZhbUU9PXMbJ3dH7dtysL2nbtSWA8fX
+Xwy9MCDc4H/WIRitlOnDjfL7AEHeMdzf+DzzGrf200c2LGfh4etta60s38LVzmE
MG1ZKe9B7EAA8IoItSG+ObrEyzIEEeQquZgChBSsru0WumO5hRlX2pUt4Bmji6+i
pWZICAuphJli5aUHzZs9myZJtYsCIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCrc
GwBS+OpDf+aNGarD25vJrxVAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNEEyMUEyMkE4REMxMUVGOEM4MDQ3NUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms40MA0GCSqGSIb3DQEB
CwUAA4IBAQAw9vDYDPzGAf8Cyk8Qo9eulpHRnZcgU8gjse/oiSs/X1A3LIDWP3vE
w5kf7vE7tef9a7pUbHwqOiYmLQEov+roxxbEykuPfaDe9pDNyn8pPbPXc4CbLs0A
byblttr03BiVh67KX6iP3Cos0pq1PbjbktVrYKpCcEMrHNxkSjKKz8SOk7zzIivM
t3CTNqrkYTK3/vVqp9kcbtuoPxmMsX+h3FKki0zh1K6GYEtO15KiCQYQPITam0Wv
h1B7kBB6M+dVbkk06legOOiYhHAL1blxfPureEUb1D+Y5D1ZFyu38SBkWDUslFxb
hBwg/GVfakBQ6I4Y4vyjpeih3nweK4dC
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:13 2024 by rpki-client on console-fra.rpki-client.org