Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E5F0BE950F11EFBDBF7A80762E951A.roa
File: 16E5F0BE950F11EFBDBF7A80762E951A.roa (raw, json)
Hash identifier: hHycVHPRF6G+PnrxA7mkq8OpjEExUgjiucYQwA8p0tg=
Subject key identifier: E2:5A:60:41:85:46:5F:C0:E4:C5:C8:37:4D:89:7F:7B:60:CE:D7:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E5F0BE950F11EFBDBF7A80762E951A.roa
Signing time: Mon 28 Oct 2024 09:29:11 +0000
ROA not before: Mon 28 Oct 2024 09:29:07 +0000
ROA not after: Wed 27 Nov 2024 09:29:07 +0000
asID: 44559
IP address blocks: 154.203.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66231 (0x102b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:29:07 2024 GMT
Not After : Nov 27 09:29:07 2024 GMT
Subject: CN=671f5967-41b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:16:01:19:4d:88:7e:85:f0:7c:39:be:8c:
45:05:ed:51:1d:6d:e1:46:f5:3b:56:d5:38:df:db:
9d:2f:60:2f:6b:b4:75:61:0a:ad:12:da:8f:a9:07:
09:3f:82:a7:70:36:0b:80:de:82:57:65:a6:e5:79:
68:4b:5e:b1:3f:ba:04:de:78:cf:8f:8c:b6:a2:db:
d1:7c:2f:0c:15:21:d4:c5:10:3e:04:e2:f8:c9:b9:
6f:b6:0a:8a:1d:c7:cb:85:85:44:86:85:ad:06:46:
e0:a7:3c:8a:8d:bf:09:a1:08:da:84:58:97:98:89:
53:aa:a9:4f:a3:3a:b1:75:5d:42:7d:d7:09:a0:07:
96:ad:1f:aa:99:e5:fc:c4:d3:60:e0:79:37:38:8f:
39:77:5a:2d:c9:17:b0:db:9e:ab:03:a0:91:34:43:
d3:8f:ca:b3:7f:fa:74:a0:b7:8b:36:85:a7:69:7f:
59:a6:14:7e:fc:18:db:c5:ff:3f:0f:76:43:47:47:
33:fd:6a:0a:b9:ff:4f:fe:2e:ab:71:5d:8d:f9:c5:
a4:cc:2c:07:4c:ef:0d:9c:94:76:9e:59:8c:e1:f6:
27:13:7b:39:4a:43:91:9c:22:e4:f3:1e:cd:72:3a:
d7:0b:79:bd:7e:f3:10:a2:57:f8:59:a4:45:08:1e:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5A:60:41:85:46:5F:C0:E4:C5:C8:37:4D:89:7F:7B:60:CE:D7:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16E5F0BE950F11EFBDBF7A80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.212.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5c:c7:ea:c1:d3:c0:1d:26:e5:e8:85:ee:23:f9:87:08:bf:
ca:e7:df:59:9b:c4:e7:c4:ab:79:ce:38:bb:35:4b:8b:98:e5:
b2:47:fc:db:34:b3:b3:1c:0c:50:26:08:64:6d:e9:3b:b9:63:
2c:cf:3c:6a:0b:8f:89:ee:4b:f5:fb:ab:5e:25:b6:2a:cd:75:
ba:e8:a0:07:9c:31:6d:94:c4:b6:c2:80:25:90:2a:f7:b1:f0:
24:fa:90:e0:50:c4:a2:4a:77:f7:4b:db:11:e8:63:81:4c:a6:
d0:81:65:39:0f:06:5a:66:dc:92:45:bc:82:b1:a8:01:91:9d:
7b:2b:64:8b:0a:d1:6f:18:57:b2:90:05:e9:a0:e5:10:2a:ba:
02:f0:6f:b4:bb:26:0c:96:99:e4:bd:b5:74:bf:3e:56:08:83:
a0:68:9b:19:5d:64:ea:ab:66:ff:22:c7:fc:97:65:06:f5:b4:
9c:5d:33:f5:e3:28:e5:fe:49:b6:22:1b:5f:77:f6:ee:09:6b:
47:43:77:79:f5:12:bc:ee:da:f9:cb:7c:9f:2d:c0:1d:d7:ad:
ea:c0:f5:b8:67:ff:1c:c8:73:5b:43:61:1a:7c:08:f5:99:69:
66:44:75:94:68:44:e3:79:52:db:81:ed:3f:76:e2:14:6b:eb:
a0:5c:a4:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQK3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MDkyOTA3WhcNMjQxMTI3MDkyOTA3WjAYMRYw
FAYDVQQDEw02NzFmNTk2Ny00MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsxoWARlNiH6F8Hw5voxFBe1RHW3hRvU7VtU439udL2Ava7R1YQqtEtqP
qQcJP4KncDYLgN6CV2Wm5XloS16xP7oE3njPj4y2otvRfC8MFSHUxRA+BOL4yblv
tgqKHcfLhYVEhoWtBkbgpzyKjb8JoQjahFiXmIlTqqlPozqxdV1CfdcJoAeWrR+q
meX8xNNg4Hk3OI85d1otyRew256rA6CRNEPTj8qzf/p0oLeLNoWnaX9ZphR+/Bjb
xf8/D3ZDR0cz/WoKuf9P/i6rcV2N+cWkzCwHTO8NnJR2nlmM4fYnE3s5SkORnCLk
8x7NcjrXC3m9fvMQolf4WaRFCB7TuwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOJa
YEGFRl/A5MXIN02Jf3tgztfdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xNkU1RjBCRTk1MEYxMUVGQkRCRjdBODA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsvUMA0GCSqGSIb3DQEB
CwUAA4IBAQAtXMfqwdPAHSbl6IXuI/mHCL/K599Zm8TnxKt5zji7NUuLmOWyR/zb
NLOzHAxQJghkbek7uWMszzxqC4+J7kv1+6teJbYqzXW66KAHnDFtlMS2woAlkCr3
sfAk+pDgUMSiSnf3S9sR6GOBTKbQgWU5DwZaZtySRbyCsagBkZ17K2SLCtFvGFey
kAXpoOUQKroC8G+0uyYMlpnkvbV0vz5WCIOgaJsZXWTqq2b/Isf8l2UG9bScXTP1
4yjl/km2Ihtfd/buCWtHQ3d59RK87tr5y3yfLcAd163qwPW4Z/8cyHNbQ2EafAj1
mWlmRHWUaETjeVLbge0/duIUa+ugXKQ5
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org