Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A0E26492DE11EF8AAD66AD762E951A.roa
File: 15A0E26492DE11EF8AAD66AD762E951A.roa (raw, json)
Hash identifier: JieEUM6eQg20Ga5+FjdTs+DBtt/oq1KUxaEL/1UZ4WE=
Subject key identifier: 46:A3:4C:C8:2A:BB:15:BE:E5:CF:25:4E:9C:8C:B1:1B:4B:16:64:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010236
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A0E26492DE11EF8AAD66AD762E951A.roa
Signing time: Fri 25 Oct 2024 14:33:22 +0000
ROA not before: Fri 25 Oct 2024 14:33:18 +0000
ROA not after: Sun 01 Dec 2024 14:33:18 +0000
asID: 48031
IP address blocks: 154.216.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66102 (0x10236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:33:18 2024 GMT
Not After : Dec 1 14:33:18 2024 GMT
Subject: CN=671bac31-359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:a9:9b:06:2c:7f:e6:29:b9:54:72:21:ec:
78:41:c9:ea:8f:80:21:1a:04:5b:b6:3e:5f:ed:4b:
a4:50:db:89:b3:a2:7c:70:9d:05:6d:22:c1:8c:f2:
3f:f7:c1:a5:ef:d6:a1:2b:26:e8:a0:13:cc:64:5b:
d1:0f:1d:20:d5:1b:a3:60:fc:79:76:58:4d:b2:4e:
14:79:fd:e0:e5:2b:98:38:23:b3:53:ee:be:a8:af:
fb:46:5c:c1:24:43:09:5c:bb:78:9d:b6:94:26:59:
20:14:f1:5f:2f:78:14:23:20:ab:f5:4c:6a:c3:5d:
f7:c5:56:8a:2e:be:57:79:68:68:6f:f8:34:d6:14:
61:e9:62:fb:bb:28:1a:2a:b1:35:cd:aa:9d:45:bd:
28:a8:84:82:40:83:86:46:c8:8f:12:2f:28:fb:9d:
a0:06:00:4c:26:8e:c7:0c:c9:c1:70:ba:1b:c8:f2:
53:95:5d:08:e2:c7:89:5c:d3:9a:73:d4:0c:02:33:
fa:51:0e:82:19:3d:90:4c:25:a1:33:fa:f9:4c:94:
36:67:40:aa:2e:8f:54:2a:c8:0f:14:a9:8b:36:39:
b6:25:bb:4d:f9:c1:5e:17:98:36:dc:d9:9c:ac:65:
12:33:3e:71:63:75:fe:cb:7a:cf:46:e2:76:52:d8:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:4C:C8:2A:BB:15:BE:E5:CF:25:4E:9C:8C:B1:1B:4B:16:64:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15A0E26492DE11EF8AAD66AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:42:14:ed:e2:15:2a:25:3b:52:d8:b3:02:de:1d:7e:aa:c1:
ce:a2:94:d6:2b:20:cf:c0:80:d9:17:61:c8:fc:7b:20:e4:2c:
85:42:d1:26:af:0f:6e:9e:e5:b7:9d:44:c3:29:f9:58:f5:dc:
77:ea:b3:f9:86:44:52:ae:f6:13:b5:30:2d:1a:ef:3c:51:c3:
f2:a5:9a:35:2b:31:c9:8c:e4:18:f5:dc:f0:6a:28:d3:48:d5:
e9:8e:4e:8d:c0:bb:17:7f:23:ca:97:1e:4d:c5:d7:b4:cf:bc:
b0:e8:b0:f3:c5:78:fd:50:41:d5:0a:1a:f9:38:c2:0d:5f:b0:
3c:b5:cd:40:d9:0a:d0:a1:9d:d4:90:61:45:c7:d8:a1:34:f0:
0d:f0:02:57:d5:7e:db:c9:50:dd:ce:12:d2:99:6f:b0:85:ed:
1c:51:47:8c:22:bb:6a:65:a8:bd:d8:2a:45:6e:7c:3a:d6:d6:
e5:7d:3d:44:ba:1a:8b:c5:7d:cc:c8:23:c2:1b:43:27:61:7b:
d8:ec:29:85:d5:ec:e4:8f:da:a2:a1:24:50:2a:40:55:46:78:
e2:71:0b:26:d7:4b:96:72:fe:41:11:49:f6:83:e6:23:85:47:
fb:28:14:0f:8c:a8:45:49:17:5c:b9:0a:03:6a:c2:11:a3:82:
30:eb:cd:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQI2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MTQzMzE4WhcNMjQxMjAxMTQzMzE4WjAYMRYw
FAYDVQQDEw02NzFiYWMzMS0zNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsPGpmwYsf+YpuVRyIex4Qcnqj4AhGgRbtj5f7UukUNuJs6J8cJ0FbSLB
jPI/98Gl79ahKybooBPMZFvRDx0g1RujYPx5dlhNsk4Uef3g5SuYOCOzU+6+qK/7
RlzBJEMJXLt4nbaUJlkgFPFfL3gUIyCr9Uxqw133xVaKLr5XeWhob/g01hRh6WL7
uygaKrE1zaqdRb0oqISCQIOGRsiPEi8o+52gBgBMJo7HDMnBcLobyPJTlV0I4seJ
XNOac9QMAjP6UQ6CGT2QTCWhM/r5TJQ2Z0CqLo9UKsgPFKmLNjm2JbtN+cFeF5g2
3NmcrGUSMz5xY3X+y3rPRuJ2UtjAYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEaj
TMgquxW+5c8lTpyMsRtLFmRuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNUEwRTI2NDkyREUxMUVGOEFBRDY2QUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtgBMA0GCSqGSIb3DQEB
CwUAA4IBAQDAQhTt4hUqJTtS2LMC3h1+qsHOopTWKyDPwIDZF2HI/Hsg5CyFQtEm
rw9unuW3nUTDKflY9dx36rP5hkRSrvYTtTAtGu88UcPypZo1KzHJjOQY9dzwaijT
SNXpjk6NwLsXfyPKlx5Nxde0z7yw6LDzxXj9UEHVChr5OMINX7A8tc1A2QrQoZ3U
kGFFx9ihNPAN8AJX1X7byVDdzhLSmW+whe0cUUeMIrtqZai92CpFbnw61tblfT1E
uhqLxX3MyCPCG0MnYXvY7CmF1ezkj9qioSRQKkBVRnjicQsm10uWcv5BEUn2g+Yj
hUf7KBQPjKhFSRdcuQoDasIRo4Iw680d
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:50:20 2024 by rpki-client on console-fra.rpki-client.org