Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/180398C0772311EFA2F4BE71762E951A.roa
File: 180398C0772311EFA2F4BE71762E951A.roa (raw, json)
Hash identifier: o65cbUCoRKZY3KwpF1hwqfJd1HYpVAOdaoiQN49EOX8=
Subject key identifier: 55:01:4F:D5:E8:9A:89:AD:D4:D7:53:7B:A9:DC:E2:17:66:4E:AE:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F15A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/180398C0772311EFA2F4BE71762E951A.roa
Signing time: Fri 20 Sep 2024 07:36:48 +0000
ROA not before: Fri 20 Sep 2024 07:36:45 +0000
ROA not after: Fri 08 Aug 2025 07:36:45 +0000
asID: 139659
IP address blocks: 154.204.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61786 (0xf15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 20 07:36:45 2024 GMT
Not After : Aug 8 07:36:45 2025 GMT
Subject: CN=66ed2610-03f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:f1:24:e3:df:0d:20:2e:1d:21:14:55:13:
18:e5:14:87:de:a3:60:74:3e:2b:74:b2:cf:40:61:
da:dc:51:b5:1c:ce:70:ea:72:a3:b9:c7:d0:17:f9:
90:b7:34:cf:4c:43:d0:3f:db:e2:4a:20:85:ef:01:
79:09:c8:01:75:d5:f6:d9:be:6e:79:47:71:22:0e:
01:a1:90:a6:1a:d7:98:56:93:35:b4:a5:ae:64:66:
a3:b7:c9:e1:c7:da:68:7a:49:a9:f9:a2:73:af:b7:
79:88:19:00:3c:83:92:78:ee:8b:a1:88:a7:db:47:
08:01:a4:48:77:73:50:a3:a1:d8:fd:b1:9b:84:74:
56:93:93:c2:d3:b4:ff:74:d6:ac:0a:db:9d:84:3e:
14:8b:eb:e0:a9:be:c4:49:54:71:76:8f:12:40:e5:
5a:15:b1:4a:e8:94:bf:98:5a:94:78:7f:fc:76:0f:
ac:a8:2c:97:0c:f7:2b:e3:06:01:ea:f9:dd:fb:18:
58:bb:89:4c:ee:da:9b:59:c3:11:58:a5:ad:59:3c:
2d:8a:16:a4:ff:2c:a7:96:aa:b0:b8:0c:00:26:42:
fe:06:99:bd:36:d2:f3:7b:88:46:bb:13:6a:44:33:
8e:b1:b7:b1:bb:84:dc:91:93:ce:94:70:a9:88:67:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:4F:D5:E8:9A:89:AD:D4:D7:53:7B:A9:DC:E2:17:66:4E:AE:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/180398C0772311EFA2F4BE71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:1b:58:3d:95:8d:70:ba:7d:b4:4f:c5:4b:8b:70:d1:ec:fa:
9c:e0:d4:44:be:35:bd:30:d1:6e:69:33:a7:97:3e:64:c5:19:
45:51:03:68:5a:4d:63:7f:67:66:38:4d:5a:24:90:89:06:74:
33:68:83:98:32:cf:f0:ea:60:5d:a8:8c:90:90:9d:7a:b2:8b:
9a:c0:57:f5:83:41:eb:8b:e1:74:38:8e:57:d3:5f:b7:00:13:
f9:84:a6:9c:00:53:a5:e1:84:0c:03:80:8f:3d:6e:fe:5c:93:
d2:85:65:ac:3c:1b:d5:2b:33:6c:98:16:92:a4:6a:30:55:b3:
c5:9f:80:9a:08:c6:f9:c3:09:a2:7c:e9:fd:39:2d:aa:4e:0f:
78:e2:75:89:1f:f1:7d:87:55:e8:c9:9a:82:34:fb:c1:56:0e:
71:c8:13:ab:32:e4:e4:8d:d0:f4:3d:9c:8c:3b:5d:c4:ac:a3:
95:0a:88:d5:bb:4b:1e:46:d8:01:e3:bc:87:47:40:22:58:e9:
bc:5d:38:66:96:74:3b:f4:1d:1c:1c:ed:55:1f:2b:20:43:58:
58:56:a1:4e:a2:04:73:18:7d:fc:e2:d4:59:a0:34:2f:37:ec:
2b:fd:cd:d9:fd:1e:63:48:7b:fd:f4:03:a4:b0:2d:03:03:0f:
11:a0:13:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPFaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTIwMDczNjQ1WhcNMjUwODA4MDczNjQ1WjAYMRYw
FAYDVQQDEw02NmVkMjYxMC0wM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqbnxJOPfDSAuHSEUVRMY5RSH3qNgdD4rdLLPQGHa3FG1HM5w6nKjucfQ
F/mQtzTPTEPQP9viSiCF7wF5CcgBddX22b5ueUdxIg4BoZCmGteYVpM1tKWuZGaj
t8nhx9poekmp+aJzr7d5iBkAPIOSeO6LoYin20cIAaRId3NQo6HY/bGbhHRWk5PC
07T/dNasCtudhD4Ui+vgqb7ESVRxdo8SQOVaFbFK6JS/mFqUeH/8dg+sqCyXDPcr
4wYB6vnd+xhYu4lM7tqbWcMRWKWtWTwtihak/yynlqqwuAwAJkL+Bpm9NtLze4hG
uxNqRDOOsbexu4TckZPOlHCpiGcrpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFUB
T9Xomomt1NdTe6nc4hdmTq7NMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xODAzOThDMDc3MjMxMUVGQTJGNEJFNzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsw4MA0GCSqGSIb3DQEB
CwUAA4IBAQAaG1g9lY1wun20T8VLi3DR7Pqc4NREvjW9MNFuaTOnlz5kxRlFUQNo
Wk1jf2dmOE1aJJCJBnQzaIOYMs/w6mBdqIyQkJ16souawFf1g0Hri+F0OI5X01+3
ABP5hKacAFOl4YQMA4CPPW7+XJPShWWsPBvVKzNsmBaSpGowVbPFn4CaCMb5wwmi
fOn9OS2qTg944nWJH/F9h1XoyZqCNPvBVg5xyBOrMuTkjdD0PZyMO13ErKOVCojV
u0seRtgB47yHR0AiWOm8XThmlnQ79B0cHO1VHysgQ1hYVqFOogRzGH384tRZoDQv
N+wr/c3Z/R5jSHv99AOksC0DAw8RoBNA
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:55 2024 by rpki-client on console-ams.rpki-client.org