Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E16268C9B7811EF9F59B96E762E951A.roa
File: 1E16268C9B7811EF9F59B96E762E951A.roa (raw, json)
Hash identifier: PukbGv4vwOF6aFnWc8FdXSdUpBpbpgA4F5eWhMwX11U=
Subject key identifier: 5B:99:41:82:D1:8C:5D:E3:66:EA:6D:04:61:BB:CA:9C:77:0D:E9:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E16268C9B7811EF9F59B96E762E951A.roa
Signing time: Tue 05 Nov 2024 13:16:07 +0000
ROA not before: Tue 05 Nov 2024 13:16:04 +0000
ROA not after: Mon 13 Jan 2025 13:16:04 +0000
asID: 22773
IP address blocks: 154.212.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67543 (0x107d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 13:16:04 2024 GMT
Not After : Jan 13 13:16:04 2025 GMT
Subject: CN=672a1a97-e354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:c2:f7:48:80:07:2f:80:87:6d:f2:ef:fd:
58:c2:3d:d8:5a:00:86:13:f6:40:2f:ec:74:11:7f:
d0:4d:b0:84:36:48:cf:6d:19:eb:5c:2e:23:eb:c3:
bf:c1:61:17:77:ec:40:28:26:ee:29:6a:08:46:b1:
b8:18:db:0c:96:c4:3f:88:65:28:ac:d7:e1:6c:ba:
02:d0:64:94:4d:cd:35:b9:58:21:60:2c:46:84:c3:
00:00:58:11:19:94:96:91:70:da:a0:2f:f8:25:3a:
70:d9:21:68:88:8a:77:b6:43:c7:93:51:7b:27:15:
d5:f2:fc:32:5b:2a:b9:9d:c8:0e:02:6d:e5:e6:25:
d2:7a:c3:3d:26:8d:5f:68:87:04:e0:00:0c:cb:ff:
87:fa:0b:94:e9:4a:88:dc:52:81:58:73:97:02:0b:
af:42:50:2c:ec:10:c8:13:2d:f5:3a:57:54:62:58:
0a:21:36:ac:24:26:36:3d:75:f2:5f:68:ed:56:4a:
11:91:63:ea:d4:de:87:66:57:2e:37:e8:8a:f7:12:
86:f7:3a:85:81:2a:42:c0:78:0a:dc:9c:56:39:d8:
09:34:f5:ae:3e:44:a0:c5:ac:fa:98:69:c2:0e:4d:
5c:06:ac:df:1c:34:d4:7b:fb:e7:96:9a:a2:d6:28:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:41:82:D1:8C:5D:E3:66:EA:6D:04:61:BB:CA:9C:77:0D:E9:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E16268C9B7811EF9F59B96E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e1:16:1d:dd:c9:dc:b2:26:fa:d1:73:08:6b:86:13:25:85:
9c:b5:13:81:a5:da:1a:bc:7f:ac:5d:fb:4c:c7:d6:96:e0:4f:
96:da:bb:6b:2f:15:7d:cf:74:78:4e:76:67:5b:fe:55:6f:19:
fe:f8:f1:3f:55:fe:e9:8e:6f:7d:49:37:f2:ac:82:70:34:16:
46:24:22:09:75:c3:74:61:0a:11:95:72:eb:fb:11:b2:1c:56:
a7:5c:1a:55:f0:a6:87:1c:9a:3d:d9:64:e6:81:33:94:21:1f:
a2:e4:5a:ca:f5:7f:47:29:fd:7f:cb:7c:81:54:95:78:e9:c6:
ed:47:e3:f2:55:7e:a6:37:36:e2:a1:d5:c0:4a:2c:48:72:c9:
53:27:d8:d1:4c:63:7c:b3:00:5b:6a:bc:26:b2:80:07:f7:cc:
49:09:9b:41:0b:bd:9f:29:8d:8b:a7:db:87:b8:ee:ec:46:67:
d5:82:ff:34:6d:63:2b:70:5e:f2:5a:26:ef:8b:8f:25:a2:fb:
43:4b:79:ef:cf:3c:df:54:09:cb:37:94:7a:26:c2:6a:d3:fd:
c4:38:1c:86:f2:e9:80:53:4b:87:3a:9f:20:e6:1b:a4:bf:99:
29:b5:18:f0:97:52:0c:2e:73:fd:75:18:2b:af:bc:42:db:78:
47:ac:45:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQfXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTMxNjA0WhcNMjUwMTEzMTMxNjA0WjAYMRYw
FAYDVQQDEw02NzJhMWE5Ny1lMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwkTC90iABy+Ah23y7/1Ywj3YWgCGE/ZAL+x0EX/QTbCENkjPbRnrXC4j
68O/wWEXd+xAKCbuKWoIRrG4GNsMlsQ/iGUorNfhbLoC0GSUTc01uVghYCxGhMMA
AFgRGZSWkXDaoC/4JTpw2SFoiIp3tkPHk1F7JxXV8vwyWyq5ncgOAm3l5iXSesM9
Jo1faIcE4AAMy/+H+guU6UqI3FKBWHOXAguvQlAs7BDIEy31OldUYlgKITasJCY2
PXXyX2jtVkoRkWPq1N6HZlcuN+iK9xKG9zqFgSpCwHgK3JxWOdgJNPWuPkSgxaz6
mGnCDk1cBqzfHDTUe/vnlpqi1igVzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFuZ
QYLRjF3jZuptBGG7ypx3DenoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTE2MjY4QzlCNzgxMUVGOUY1OUI5NkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtQAMA0GCSqGSIb3DQEB
CwUAA4IBAQCs4RYd3cncsib60XMIa4YTJYWctROBpdoavH+sXftMx9aW4E+W2rtr
LxV9z3R4TnZnW/5Vbxn++PE/Vf7pjm99STfyrIJwNBZGJCIJdcN0YQoRlXLr+xGy
HFanXBpV8KaHHJo92WTmgTOUIR+i5FrK9X9HKf1/y3yBVJV46cbtR+PyVX6mNzbi
odXASixIcslTJ9jRTGN8swBbarwmsoAH98xJCZtBC72fKY2Lp9uHuO7sRmfVgv80
bWMrcF7yWibvi48lovtDS3nvzzzfVAnLN5R6JsJq0/3EOByG8umAU0uHOp8g5huk
v5kptRjwl1IMLnP9dRgrr7xC23hHrEVD
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:34:46 2024 by rpki-client on console-fra.rpki-client.org