Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA75B06A4C311EF8F60D6A0762E951A.roa
File: 1BA75B06A4C311EF8F60D6A0762E951A.roa (raw, json)
Hash identifier: 6KkPbq/kOo6XzMLb+YkQZn4fn3vq7ougCnLlvn1Lfhg=
Subject key identifier: 02:81:9B:99:AA:C9:16:FF:32:13:1F:6E:C8:21:89:7F:D2:90:22:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E6E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA75B06A4C311EF8F60D6A0762E951A.roa
Signing time: Sun 17 Nov 2024 09:05:36 +0000
ROA not before: Sun 17 Nov 2024 09:05:32 +0000
ROA not after: Wed 18 Dec 2024 09:05:32 +0000
asID: 58460
IP address blocks: 154.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69230 (0x10e6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 09:05:32 2024 GMT
Not After : Dec 18 09:05:32 2024 GMT
Subject: CN=6739b1e0-cdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:20:89:ce:1a:16:1c:79:8d:44:94:52:c7:
6b:bb:87:62:42:82:34:fa:78:51:16:78:25:a4:32:
4e:81:a7:4e:d2:56:24:97:ef:ae:7d:96:31:85:c6:
dc:0a:69:12:e2:4e:e5:c2:e3:ed:b5:3a:25:02:ae:
82:e1:74:3a:44:ef:f8:12:d7:47:fb:31:f7:bb:71:
ac:2e:d6:e1:93:46:1b:9e:29:c4:2d:00:83:cc:54:
15:ab:82:7d:0e:61:15:73:db:27:05:e2:2e:91:de:
61:8a:01:59:a2:3e:e9:b7:40:fb:3e:8a:88:c1:e7:
2b:7d:af:34:a7:ea:b6:aa:b0:d3:7d:90:09:35:60:
6e:ab:ea:fe:ef:cd:53:33:db:59:48:d6:61:04:9e:
d1:2a:de:53:92:f0:df:b1:6a:8e:0e:a1:5b:88:72:
5c:e6:23:8d:b4:6f:7d:23:da:dc:35:93:e5:68:d5:
5d:47:88:13:b2:6d:4a:f1:e2:ae:50:b6:d3:d3:cd:
a8:ec:d3:69:7b:c3:9d:05:cc:d6:12:79:7f:a7:55:
f4:87:75:52:61:a1:a0:80:6a:cd:7a:0e:3a:4c:f8:
59:86:e1:0c:6d:93:f7:63:da:11:04:dd:08:19:34:
00:64:be:da:11:ba:c8:9c:46:e2:14:20:fa:38:fa:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:9B:99:AA:C9:16:FF:32:13:1F:6E:C8:21:89:7F:D2:90:22:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA75B06A4C311EF8F60D6A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b3:17:20:8e:ea:a7:a5:77:9c:9b:3f:d9:f4:3d:78:99:94:
4a:5c:f0:17:f7:78:e1:ea:e9:86:4e:63:1c:87:1e:cb:d2:94:
d2:a4:e6:6a:2d:78:db:fb:58:2d:4e:b0:9a:60:77:44:17:8a:
36:e3:c4:17:a1:99:22:a8:ff:cf:1e:fa:ea:21:f3:b0:5e:19:
5e:34:7c:2a:9e:82:9f:ed:af:0c:2c:83:78:6b:c3:52:28:30:
a7:34:c8:b4:6b:86:d0:ae:d3:de:87:8c:62:6f:a0:18:7d:d4:
f1:ba:06:e5:8b:78:0f:e9:70:d9:2d:eb:05:8a:f9:49:4e:e3:
7d:b7:6a:a4:65:32:ad:10:c0:a9:0a:10:3e:f0:00:b8:02:11:
ba:3a:56:1c:f7:e6:29:80:2e:e2:88:f1:57:eb:50:5b:b7:df:
ba:71:58:c2:83:60:72:b9:2f:72:ab:ff:97:e8:53:fc:c3:4f:
cf:7c:a9:cf:9a:ea:03:e3:3f:c4:bc:18:54:ba:7b:17:a7:9f:
2f:fa:cb:07:94:f9:57:0e:9b:d5:ec:14:7d:b5:39:50:92:c4:
dd:30:3d:6c:ee:af:95:c3:66:2f:1f:51:26:f8:90:b6:5b:ac:
17:77:74:35:72:91:70:13:a7:fc:4d:df:db:e0:66:36:cf:39:
5c:40:32:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ5uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MDkwNTMyWhcNMjQxMjE4MDkwNTMyWjAYMRYw
FAYDVQQDEw02NzM5YjFlMC1jZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmQ8gic4aFhx5jUSUUsdru4diQoI0+nhRFnglpDJOgadO0lYkl++ufZYx
hcbcCmkS4k7lwuPttTolAq6C4XQ6RO/4EtdH+zH3u3GsLtbhk0YbninELQCDzFQV
q4J9DmEVc9snBeIukd5higFZoj7pt0D7PoqIwecrfa80p+q2qrDTfZAJNWBuq+r+
781TM9tZSNZhBJ7RKt5TkvDfsWqODqFbiHJc5iONtG99I9rcNZPlaNVdR4gTsm1K
8eKuULbT082o7NNpe8OdBczWEnl/p1X0h3VSYaGggGrNeg46TPhZhuEMbZP3Y9oR
BN0IGTQAZL7aEbrInEbiFCD6OPoIhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAKB
m5mqyRb/MhMfbsghiX/SkCLzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQkE3NUIwNkE0QzMxMUVGOEY2MEQ2QTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIsxcgjuqnpXecmz/Z9D14mZRKXPAX93jh6umGTmMchx7L0pTSpOZq
LXjb+1gtTrCaYHdEF4o248QXoZkiqP/PHvrqIfOwXhleNHwqnoKf7a8MLIN4a8NS
KDCnNMi0a4bQrtPeh4xib6AYfdTxugbli3gP6XDZLesFivlJTuN9t2qkZTKtEMCp
ChA+8AC4AhG6OlYc9+YpgC7iiPFX61Bbt9+6cVjCg2ByuS9yq/+X6FP8w0/PfKnP
muoD4z/EvBhUunsXp58v+ssHlPlXDpvV7BR9tTlQksTdMD1s7q+Vw2YvH1Em+JC2
W6wXd3Q1cpFwE6f8Td/b4GY2zzlcQDLJ
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:58 2024 by rpki-client on console-ams.rpki-client.org