Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FC39AF6286311EFA62A79ED7CDC24C2.roa
File: 1FC39AF6286311EFA62A79ED7CDC24C2.roa (raw, json)
Hash identifier: XYpu42BKWbfEIsAXLe0HVBhrffrEbwxvfJAkpKLnDAc=
Subject key identifier: 2C:31:21:AC:5D:28:79:66:93:F3:92:D4:C1:1D:0C:12:18:A0:D1:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FC39AF6286311EFA62A79ED7CDC24C2.roa
Signing time: Wed 12 Jun 2024 02:26:07 +0000
ROA not before: Wed 12 Jun 2024 02:26:04 +0000
ROA not after: Sun 15 Jun 2025 02:26:04 +0000
asID: 134687
IP address blocks: 154.197.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49613 (0xc1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 02:26:04 2024 GMT
Not After : Jun 15 02:26:04 2025 GMT
Subject: CN=6669073f-1649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:b6:e0:3f:5e:e3:27:b7:0b:66:8e:c5:b4:
03:48:85:35:95:8b:72:41:41:fc:6f:79:2f:6f:9f:
37:5e:3b:58:5e:ec:3b:25:89:f3:31:ec:36:fc:fe:
bc:6f:0d:0c:13:c0:cc:3e:8f:6a:5b:3a:b5:6b:6f:
31:c1:17:0e:91:ba:3b:1a:06:9a:66:10:11:1e:6f:
61:4d:b8:f9:7b:4d:2c:f0:56:6a:dc:0a:69:93:17:
f7:3c:d6:1e:61:c8:06:d4:5f:d0:15:5a:b7:ed:45:
3e:3c:a2:a8:ca:75:51:3e:93:63:61:a1:83:43:43:
11:6a:99:32:9f:ef:a6:c5:65:27:c1:40:f0:02:5e:
ae:cf:a3:ae:3e:b6:ed:da:f8:b9:84:f5:78:13:fa:
0f:b6:20:9d:f5:af:9c:32:35:ba:56:9a:25:35:88:
b4:85:63:15:17:d1:38:ca:1c:c8:01:f3:8a:2b:94:
2c:a7:76:0c:da:8c:84:b5:14:fd:92:ac:8b:73:e8:
51:1c:d7:94:41:66:9a:e6:ea:a2:ee:d2:a4:fb:04:
21:04:ec:33:43:71:4d:c7:a3:d3:cc:47:ac:f1:4f:
0a:1e:a1:bc:c4:15:53:cd:37:c2:df:9a:bc:b0:43:
7c:cc:b3:fa:25:ae:38:6b:02:59:fd:1c:7e:48:02:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:31:21:AC:5D:28:79:66:93:F3:92:D4:C1:1D:0C:12:18:A0:D1:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FC39AF6286311EFA62A79ED7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ba:cb:0d:29:3f:f8:1c:2a:41:5c:c7:99:72:c1:4b:49:25:
df:e3:32:ed:50:56:45:5c:2d:ee:7a:0e:b6:e6:e6:af:1c:ee:
a6:3c:19:cb:6c:5c:81:e2:9e:a0:f5:c1:a9:24:33:c7:17:d6:
80:32:7a:22:7e:d1:18:29:c7:5c:14:70:40:26:54:01:b5:b0:
24:b2:4a:3b:18:34:b3:76:ac:e3:b6:b8:ef:62:4a:1e:89:30:
3a:54:66:e2:bd:e5:af:ab:1b:4e:5c:e6:6e:ac:50:bb:48:77:
52:7d:ae:d7:a6:dd:a2:6b:d5:93:08:24:31:8d:d9:94:21:db:
10:6c:3c:97:02:01:78:78:f6:45:bc:c7:82:af:e2:1e:15:1b:
50:7a:fa:24:4f:37:42:42:b5:e9:67:a5:bc:86:b8:34:99:31:
5b:a4:e7:95:ea:79:4f:b2:a9:4c:84:b8:f4:4b:45:f4:3a:39:
08:d1:0c:76:e8:64:33:ce:c1:da:12:9a:de:2c:b4:72:8b:8f:
3e:b8:2b:fb:06:03:b8:ec:8b:41:87:27:f6:16:36:e7:00:dd:
72:6e:a8:69:38:01:5d:30:68:0d:89:1e:78:e5:c4:52:0c:39:
cf:66:3c:de:10:2f:a7:bf:c3:ae:0b:2a:cc:40:a3:4a:d7:c4:
36:37:e8:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMHNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjEyMDIyNjA0WhcNMjUwNjE1MDIyNjA0WjAYMRYw
FAYDVQQDEw02NjY5MDczZi0xNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0LC24D9e4ye3C2aOxbQDSIU1lYtyQUH8b3kvb583XjtYXuw7JYnzMew2
/P68bw0ME8DMPo9qWzq1a28xwRcOkbo7GgaaZhARHm9hTbj5e00s8FZq3Appkxf3
PNYeYcgG1F/QFVq37UU+PKKoynVRPpNjYaGDQ0MRapkyn++mxWUnwUDwAl6uz6Ou
Prbt2vi5hPV4E/oPtiCd9a+cMjW6VpolNYi0hWMVF9E4yhzIAfOKK5Qsp3YM2oyE
tRT9kqyLc+hRHNeUQWaa5uqi7tKk+wQhBOwzQ3FNx6PTzEes8U8KHqG8xBVTzTfC
35q8sEN8zLP6Ja44awJZ/Rx+SAKA5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCwx
IaxdKHlmk/OS1MEdDBIYoNHFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRkMzOUFGNjI4NjMxMUVGQTYyQTc5RUQ3Q0RDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUnMA0GCSqGSIb3DQEB
CwUAA4IBAQClussNKT/4HCpBXMeZcsFLSSXf4zLtUFZFXC3ueg625uavHO6mPBnL
bFyB4p6g9cGpJDPHF9aAMnoiftEYKcdcFHBAJlQBtbAksko7GDSzdqzjtrjvYkoe
iTA6VGbiveWvqxtOXOZurFC7SHdSfa7Xpt2ia9WTCCQxjdmUIdsQbDyXAgF4ePZF
vMeCr+IeFRtQevokTzdCQrXpZ6W8hrg0mTFbpOeV6nlPsqlMhLj0S0X0OjkI0Qx2
6GQzzsHaEpreLLRyi48+uCv7BgO47ItBhyf2FjbnAN1ybqhpOAFdMGgNiR545cRS
DDnPZjzeEC+nv8OuCyrMQKNK18Q2N+gX
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org