Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E45394C986011EFBE345868762E951A.roa
File: 1E45394C986011EFBE345868762E951A.roa (raw, json)
Hash identifier: W6b9m2JIorXGBqqUSFyTQqn+qMKiJ+SYPTvqXiYp5Nk=
Subject key identifier: 6C:D0:FA:9E:3F:EF:D6:15:86:0B:85:80:A9:07:72:06:95:E8:77:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E45394C986011EFBE345868762E951A.roa
Signing time: Fri 01 Nov 2024 14:46:47 +0000
ROA not before: Fri 01 Nov 2024 14:46:41 +0000
ROA not after: Tue 03 Dec 2024 14:46:41 +0000
asID: 203020
IP address blocks: 154.202.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66789 (0x104e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 14:46:41 2024 GMT
Not After : Dec 3 14:46:41 2024 GMT
Subject: CN=6724e9d6-9867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:11:8d:fa:96:d4:9f:2d:3c:2c:37:a6:8d:
76:ff:8b:4d:ee:f1:eb:b1:c9:0e:29:46:de:78:8b:
26:8b:9e:f4:01:c9:08:1a:c5:59:bf:9a:0f:08:ce:
50:e1:09:8b:2b:c6:4b:4a:77:9f:24:5c:80:23:2c:
40:c7:a4:d6:a1:bc:e5:08:09:e2:91:fe:26:d4:25:
ef:33:64:74:0d:04:67:a3:a0:18:95:bc:4a:76:d4:
ff:44:5d:2a:01:5e:b7:b5:2e:f3:95:41:03:95:4b:
a1:fb:8d:28:03:0f:dc:f4:3f:69:29:91:54:3e:a7:
e6:39:b6:96:27:a5:b0:22:6d:bb:fe:a2:0b:8f:fd:
41:a9:df:63:45:5b:52:39:56:c1:35:cb:07:96:d1:
77:b4:c7:bb:e7:62:32:05:3e:bd:79:5d:57:eb:04:
f9:e6:14:ec:81:78:e6:10:15:d6:fc:e1:37:57:f6:
50:1a:5c:ad:b8:85:4e:fd:67:59:25:e6:de:46:96:
22:96:9a:89:02:bd:e1:59:82:16:aa:8f:e2:71:61:
dc:c4:ec:3f:f7:f8:61:22:28:6b:0b:9b:6e:88:4f:
4a:3a:cd:c3:84:1e:11:47:44:28:58:59:f1:0b:8b:
48:49:1d:9f:7b:9d:ff:81:0c:fe:32:3f:cc:72:4e:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D0:FA:9E:3F:EF:D6:15:86:0B:85:80:A9:07:72:06:95:E8:77:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E45394C986011EFBE345868762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.86.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ff:60:a4:5f:f3:a4:85:da:c8:f8:42:a8:33:3e:14:c6:55:
8c:15:89:f1:c0:1f:73:c2:f3:7e:52:63:2a:32:01:10:bd:14:
f5:fa:4f:d4:35:fd:a5:93:f2:4c:d6:22:e4:ee:97:0f:3c:87:
cd:d7:82:e0:d0:13:dc:77:38:16:c1:72:0a:10:5b:d9:d0:78:
ca:f3:36:d3:ba:83:58:7a:df:45:e9:eb:7a:0f:dc:79:c3:ab:
43:37:65:63:01:55:5b:0a:84:f1:ba:17:96:0a:52:94:cd:c7:
2f:79:9d:68:7e:4b:cc:5a:51:75:37:af:5c:32:75:16:6d:8c:
2b:94:c5:13:b2:f7:25:8b:95:97:70:55:f0:0e:3b:0d:fc:b9:
07:6b:72:8c:16:92:a3:ec:e7:2e:75:51:80:b4:53:9f:92:c2:
66:88:07:1c:30:7b:ac:2e:46:53:5f:0b:57:cc:25:55:6a:4e:
de:f2:5b:51:2b:5d:b1:bc:4c:be:90:14:03:78:85:4d:c2:25:
e9:10:bc:54:9b:44:44:ac:6e:5d:65:ba:8b:0d:08:2a:26:d2:
41:59:3b:b2:6f:02:8d:ec:93:7c:1f:79:d2:f3:de:28:69:c9:
10:e7:e5:f7:de:12:70:c2:66:5b:c3:9e:2d:43:70:ae:3e:a5:
8c:1a:89:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQTlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTAxMTQ0NjQxWhcNMjQxMjAzMTQ0NjQxWjAYMRYw
FAYDVQQDEw02NzI0ZTlkNi05ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu2cRjfqW1J8tPCw3po12/4tN7vHrsckOKUbeeIsmi570AckIGsVZv5oP
CM5Q4QmLK8ZLSnefJFyAIyxAx6TWobzlCAnikf4m1CXvM2R0DQRno6AYlbxKdtT/
RF0qAV63tS7zlUEDlUuh+40oAw/c9D9pKZFUPqfmObaWJ6WwIm27/qILj/1Bqd9j
RVtSOVbBNcsHltF3tMe752IyBT69eV1X6wT55hTsgXjmEBXW/OE3V/ZQGlytuIVO
/WdZJebeRpYilpqJAr3hWYIWqo/icWHcxOw/9/hhIihrC5tuiE9KOs3DhB4RR0Qo
WFnxC4tISR2fe53/gQz+Mj/Mck4DGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGzQ
+p4/79YVhguFgKkHcgaV6HcnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRTQ1Mzk0Qzk4NjAxMUVGQkUzNDU4Njg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmspWMA0GCSqGSIb3DQEB
CwUAA4IBAQCA/2CkX/OkhdrI+EKoMz4UxlWMFYnxwB9zwvN+UmMqMgEQvRT1+k/U
Nf2lk/JM1iLk7pcPPIfN14Lg0BPcdzgWwXIKEFvZ0HjK8zbTuoNYet9F6et6D9x5
w6tDN2VjAVVbCoTxuheWClKUzccveZ1ofkvMWlF1N69cMnUWbYwrlMUTsvcli5WX
cFXwDjsN/LkHa3KMFpKj7OcudVGAtFOfksJmiAccMHusLkZTXwtXzCVVak7e8ltR
K12xvEy+kBQDeIVNwiXpELxUm0RErG5dZbqLDQgqJtJBWTuybwKN7JN8H3nS894o
ackQ5+X33hJwwmZbw54tQ3CuPqWMGokZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org