Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A18528B34211EE9D845563775412E6.roa
File: 16A18528B34211EE9D845563775412E6.roa (raw, json)
Hash identifier: cEEd89mXgeqKys9RRnDaZGYzGtfGECzPcbfh3kEubhQ=
Subject key identifier: D2:F6:05:D9:57:4C:C5:9F:FF:91:0E:D9:E9:7B:BF:71:5F:D0:F1:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 750E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A18528B34211EE9D845563775412E6.roa
Signing time: Mon 15 Jan 2024 01:04:52 +0000
ROA not before: Mon 15 Jan 2024 01:04:49 +0000
ROA not after: Fri 13 Dec 2024 01:04:49 +0000
asID: 140227
IP address blocks: 154.205.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29966 (0x750e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:04:49 2024 GMT
Not After : Dec 13 01:04:49 2024 GMT
Subject: CN=65a484b4-aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6e:85:79:8b:b4:cc:6d:d7:17:80:0d:57:f3:
64:14:0d:f1:0e:d7:f0:bf:f7:01:ae:f4:30:b2:6d:
b7:ac:e0:e7:8d:3a:c3:3d:a2:5e:07:db:27:8c:c2:
8c:4f:d4:50:0f:b3:40:75:62:fe:bd:f3:16:b2:26:
58:83:ca:25:fd:fa:79:2c:3a:17:e4:a8:83:03:1d:
a0:01:f3:9a:9c:33:ba:c6:cd:4d:2e:29:67:de:82:
8e:7a:22:a9:9d:26:d7:36:b5:8d:3d:4e:88:9d:77:
f7:08:8d:46:54:3a:2f:dd:20:5d:1f:3a:81:f2:e0:
a9:75:2f:62:fc:72:66:e6:b6:22:ed:a1:ab:2e:f5:
00:9a:9b:5f:da:94:d1:88:bc:44:19:20:58:1a:17:
68:5d:86:71:bd:50:7d:3e:31:c3:55:35:6c:cd:27:
a5:e7:36:aa:2b:78:d1:05:0d:62:5b:3f:44:e8:83:
42:03:a9:69:df:90:be:de:f6:a5:b8:39:4f:2f:e9:
47:a9:03:4c:05:ac:88:bf:09:10:6a:82:34:de:19:
b0:ba:8e:a9:3d:49:27:0a:a8:e7:20:a9:26:b1:14:
0a:5e:36:a0:d1:f2:bc:4c:21:22:8a:bb:ac:be:d2:
9e:dd:a8:27:2a:fb:35:b2:df:a1:97:b7:f6:e8:2e:
19:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:05:D9:57:4C:C5:9F:FF:91:0E:D9:E9:7B:BF:71:5F:D0:F1:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16A18528B34211EE9D845563775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1b:31:1c:91:9f:1b:49:bc:b1:41:ca:87:ae:f2:af:84:94:
5a:ed:01:00:50:88:0f:72:74:43:6a:eb:de:21:c2:66:2a:98:
2c:5d:a3:8c:2a:3d:8b:5c:8d:c3:53:4e:cc:36:e7:8c:46:33:
53:db:8a:d8:a4:28:d3:02:d7:26:56:8f:70:c5:20:25:47:4c:
4c:0a:e7:d4:f3:2e:2c:0c:bc:42:f1:bd:70:3b:26:f9:b3:17:
3c:35:96:33:c8:f2:96:32:df:6e:77:26:25:f8:79:e9:92:e9:
c8:fb:8d:8a:2a:94:d7:66:99:03:dc:b7:37:27:3f:ab:1f:3a:
7b:da:9d:ab:dc:b9:fe:36:66:ee:76:f0:65:d6:9a:9b:bc:f8:
07:2f:f9:eb:ec:05:c7:3f:56:13:d8:8b:62:1b:83:c3:a8:9d:
8e:30:2a:98:a4:cf:41:8e:5d:15:a5:73:5d:fc:2b:26:a0:be:
05:26:f8:8d:75:53:7c:16:ff:aa:61:32:a6:3c:99:ad:24:f2:
7a:db:e3:a8:5a:2c:58:67:d3:e0:ad:47:cf:86:aa:0e:d7:ac:
e4:f2:1b:44:3e:11:2f:45:aa:02:1c:51:3b:f7:2d:c6:db:94:
05:76:9f:e6:be:5f:2d:cf:2b:9d:a9:92:05:c2:85:ab:68:ab:
59:9d:6d:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdQ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTUwMTA0NDlaFw0yNDEyMTMwMTA0NDlaMBgxFjAU
BgNVBAMTDTY1YTQ4NGI0LWFhZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgboV5i7TMbdcXgA1X82QUDfEO1/C/9wGu9DCybbes4OeNOsM9ol4H2yeM
woxP1FAPs0B1Yv698xayJliDyiX9+nksOhfkqIMDHaAB85qcM7rGzU0uKWfego56
IqmdJtc2tY09Toidd/cIjUZUOi/dIF0fOoHy4Kl1L2L8cmbmtiLtoasu9QCam1/a
lNGIvEQZIFgaF2hdhnG9UH0+McNVNWzNJ6XnNqoreNEFDWJbP0Tog0IDqWnfkL7e
9qW4OU8v6UepA0wFrIi/CRBqgjTeGbC6jqk9SScKqOcgqSaxFApeNqDR8rxMISKK
u6y+0p7dqCcq+zWy36GXt/boLhlBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0vYF
2VdMxZ//kQ7Z6Xu/cV/Q8RAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzE2QTE4NTI4QjM0MjExRUU5RDg0NTU2Mzc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazdQwDQYJKoZIhvcNAQEL
BQADggEBAIcbMRyRnxtJvLFByoeu8q+ElFrtAQBQiA9ydENq694hwmYqmCxdo4wq
PYtcjcNTTsw254xGM1PbitikKNMC1yZWj3DFICVHTEwK59TzLiwMvELxvXA7Jvmz
Fzw1ljPI8pYy3253JiX4eemS6cj7jYoqlNdmmQPctzcnP6sfOnvanavcuf42Zu52
8GXWmpu8+Acv+evsBcc/VhPYi2Ibg8OonY4wKpikz0GOXRWlc138KyagvgUm+I11
U3wW/6phMqY8ma0k8nrb46haLFhn0+CtR8+Gqg7XrOTyG0Q+ES9FqgIcUTv3Lcbb
lAV2n+a+Xy3PK52pkgXChatoq1mdbRA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org