Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FA5589476AA11EF8C040D72762E951A.roa
File: 1FA5589476AA11EF8C040D72762E951A.roa (raw, json)
Hash identifier: LLbTzbtq3bCCwdkYsp782d1xcKUE/1murA539cFLp2M=
Subject key identifier: 4A:96:22:CC:E0:C9:A8:24:ED:CA:EF:1C:65:88:4B:FC:00:DB:A4:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F13F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FA5589476AA11EF8C040D72762E951A.roa
Signing time: Thu 19 Sep 2024 17:10:52 +0000
ROA not before: Thu 19 Sep 2024 17:10:48 +0000
ROA not after: Fri 20 Dec 2024 17:10:48 +0000
asID: 16437
IP address blocks: 154.81.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61759 (0xf13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 17:10:48 2024 GMT
Not After : Dec 20 17:10:48 2024 GMT
Subject: CN=66ec5b1c-72e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d8:f9:70:ba:e2:ef:fc:db:ef:e7:27:6a:a7:
af:26:bf:a0:2b:1b:4c:7f:64:f3:cf:d3:52:84:a4:
df:16:c2:45:07:c0:fa:5e:68:9a:34:4a:d5:88:81:
e9:8d:e5:6f:e5:0c:30:5f:1d:30:8d:00:94:c8:92:
32:77:7f:d5:4a:ec:1b:3e:68:18:e4:38:7f:51:84:
41:f1:18:fc:6b:ca:73:8b:95:b0:c9:26:e4:d3:36:
2d:c0:f2:d6:6f:e4:70:c5:44:9d:51:db:bc:28:05:
fb:e2:36:26:d9:61:e3:0a:bf:5e:0f:c6:13:57:0a:
47:fa:92:6f:99:e1:4f:88:00:88:ce:c6:18:bc:64:
12:41:62:02:15:de:73:fb:97:00:89:e1:46:fe:9d:
99:a4:82:cf:34:4d:ad:ad:0e:ad:36:20:e5:37:26:
aa:3b:c2:4b:12:55:eb:b8:b7:4d:52:78:4c:e4:98:
ee:49:7e:b2:b6:17:af:95:32:fa:aa:5d:7f:42:ce:
98:ee:10:3c:c7:f0:65:86:65:41:30:9c:59:f2:63:
db:3e:d4:a8:ba:0c:2b:e2:22:32:71:b2:6c:d4:c8:
3f:17:d4:43:71:a0:e6:5d:05:c9:65:85:c0:92:ad:
14:70:e2:36:d4:22:13:c7:57:5b:8e:88:7a:76:d8:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:96:22:CC:E0:C9:A8:24:ED:CA:EF:1C:65:88:4B:FC:00:DB:A4:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FA5589476AA11EF8C040D72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
85:5c:62:88:b7:80:1f:14:34:25:b2:79:15:05:a1:ff:92:bc:
af:4c:42:fc:7a:21:3d:7a:1a:64:0a:33:65:e0:c0:d1:d1:1e:
af:9e:d2:84:0a:2e:eb:ab:b2:d1:e5:c2:f5:64:ad:6f:01:c2:
b1:34:09:8f:4d:fd:16:cb:36:7f:67:82:10:b4:8d:6b:99:86:
9a:c9:c2:97:39:ec:d2:fe:63:c4:84:09:49:82:c8:b1:c4:e0:
4f:fc:35:ff:3b:f3:07:39:ae:55:ad:7e:51:45:96:aa:df:c2:
5c:80:9b:44:7a:a3:4d:3f:8d:03:70:96:52:1d:f7:35:aa:97:
00:42:7f:94:f8:79:db:e7:ea:9a:fb:e0:b5:6d:2b:de:a6:95:
65:da:fd:e0:06:1b:09:1c:71:59:b6:32:dc:26:42:6c:34:a7:
b1:d7:9d:d4:9d:7c:d5:ad:0b:27:44:40:02:01:d5:cf:08:46:
52:e3:0a:04:6f:e5:05:a8:e0:cd:85:38:56:21:12:d0:2f:02:
13:b5:21:e0:91:76:20:4a:40:e5:4b:aa:2d:8e:54:02:58:16:
87:7c:6c:31:83:ba:21:19:a3:30:d9:7b:c0:3f:da:41:98:ea:
b1:5c:76:c5:f2:5a:d8:e0:62:33:07:03:36:51:8e:5c:16:d3:
ec:25:2f:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPE/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE5MTcxMDQ4WhcNMjQxMjIwMTcxMDQ4WjAYMRYw
FAYDVQQDEw02NmVjNWIxYy03MmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA49j5cLri7/zb7+cnaqevJr+gKxtMf2Tzz9NShKTfFsJFB8D6XmiaNErV
iIHpjeVv5QwwXx0wjQCUyJIyd3/VSuwbPmgY5Dh/UYRB8Rj8a8pzi5WwySbk0zYt
wPLWb+RwxUSdUdu8KAX74jYm2WHjCr9eD8YTVwpH+pJvmeFPiACIzsYYvGQSQWIC
Fd5z+5cAieFG/p2ZpILPNE2trQ6tNiDlNyaqO8JLElXruLdNUnhM5JjuSX6ythev
lTL6ql1/Qs6Y7hA8x/BlhmVBMJxZ8mPbPtSougwr4iIycbJs1Mg/F9RDcaDmXQXJ
ZYXAkq0UcOI21CITx1dbjoh6dtg7QQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEqW
Iszgyagk7crvHGWIS/wA26SUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRkE1NTg5NDc2QUExMUVGOEMwNDBENzI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlHYMA0GCSqGSIb3DQEB
CwUAA4IBAQCFXGKIt4AfFDQlsnkVBaH/kryvTEL8eiE9ehpkCjNl4MDR0R6vntKE
Ci7rq7LR5cL1ZK1vAcKxNAmPTf0WyzZ/Z4IQtI1rmYaaycKXOezS/mPEhAlJgsix
xOBP/DX/O/MHOa5VrX5RRZaq38JcgJtEeqNNP40DcJZSHfc1qpcAQn+U+Hnb5+qa
++C1bSveppVl2v3gBhsJHHFZtjLcJkJsNKex153UnXzVrQsnREACAdXPCEZS4woE
b+UFqODNhThWIRLQLwITtSHgkXYgSkDlS6otjlQCWBaHfGwxg7ohGaMw2XvAP9pB
mOqxXHbF8lrY4GIzBwM2UY5cFtPsJS9K
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:23 2024 by rpki-client on console-fra.rpki-client.org