Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21196CAA976711EF89D8084B762E951A.roa
File: 21196CAA976711EF89D8084B762E951A.roa (raw, json)
Hash identifier: g1qZ+QBZ9ariwwpjB0cOjz8G3pLVhFLL0JxFJa8KJSk=
Subject key identifier: CB:C6:4A:3B:2B:85:0F:E3:97:4C:4B:65:FB:00:B9:84:15:93:B7:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010482
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21196CAA976711EF89D8084B762E951A.roa
Signing time: Thu 31 Oct 2024 09:04:26 +0000
ROA not before: Thu 31 Oct 2024 09:04:23 +0000
ROA not after: Sun 01 Dec 2024 09:04:23 +0000
asID: 54600
IP address blocks: 154.202.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66690 (0x10482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 09:04:23 2024 GMT
Not After : Dec 1 09:04:23 2024 GMT
Subject: CN=6723481a-d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:b8:d7:e0:92:f1:0d:e9:87:3f:46:84:45:
85:a6:b8:d2:a9:8b:13:fb:2d:c6:10:80:3a:f5:1d:
3c:33:12:40:45:83:1e:ff:63:8a:16:7d:2e:44:62:
ce:89:a7:f2:b5:f9:20:2c:6e:7c:29:6a:7c:bb:3a:
19:b3:ff:2b:ef:2d:5e:36:75:9c:b9:47:fa:ea:76:
b5:06:56:66:41:be:f8:27:4d:4e:01:b5:f5:0c:47:
d0:d1:57:8d:ad:0a:2e:25:4c:e9:f3:e2:1d:8a:6c:
bd:f8:a6:23:e8:3f:24:44:92:44:da:1d:b0:4c:57:
96:39:a6:90:36:bd:69:bf:f8:22:1c:59:42:34:51:
3b:22:a5:a5:e2:37:e0:7d:5a:d6:4f:1a:4a:40:42:
5e:fa:66:35:57:4a:21:5d:73:42:e5:14:65:05:8e:
6a:7a:25:3a:f5:51:27:e5:17:7f:20:a3:7a:f5:1e:
8d:cc:15:cd:9a:bd:8e:d0:98:93:7f:00:a9:e1:ff:
1a:d0:81:26:45:76:4c:f8:3d:4c:74:07:34:35:84:
8c:1b:d3:8c:c9:e6:79:dd:ff:b0:93:12:4d:13:49:
bd:3a:36:d9:af:eb:51:b6:bd:02:61:51:db:99:67:
cd:4c:f2:da:d6:b5:12:7d:8b:a8:9a:af:56:96:18:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:4A:3B:2B:85:0F:E3:97:4C:4B:65:FB:00:B9:84:15:93:B7:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21196CAA976711EF89D8084B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:35:b0:0c:a4:ca:d5:55:07:9f:60:64:d9:db:91:59:58:ce:
4d:da:e9:7a:db:3e:3c:a3:6c:c3:f3:73:f8:c9:40:dd:05:c0:
89:66:13:10:11:cf:1c:f3:ba:d5:fb:5a:45:83:f3:11:45:25:
e9:99:85:d5:05:f1:25:5d:43:48:c3:22:0a:95:3d:e0:c5:76:
11:17:8f:81:97:72:02:02:60:19:c3:a3:a0:d4:b0:ff:14:6d:
8f:14:27:d2:5d:a6:8c:89:95:96:ae:a0:ea:0b:7a:f5:b0:5b:
6c:e9:5c:63:36:97:88:1c:09:27:6f:bd:64:e0:a0:72:3f:50:
d6:16:f1:eb:1b:40:a1:26:6d:76:c3:a3:51:25:0d:23:fa:ab:
cb:63:08:7e:12:d7:76:7c:c4:ff:5c:b7:7f:81:ff:27:aa:d3:
20:cb:98:fa:d7:00:f4:4f:75:88:b9:3e:06:5f:a9:12:e2:ab:
af:68:19:75:10:49:c9:32:ae:7b:c2:eb:87:b6:a6:f7:f9:85:
2f:a0:97:aa:9e:d9:98:7c:a7:cd:d3:02:6b:64:3d:e8:d9:c0:
b6:df:d1:10:61:7f:d4:77:42:46:1c:7a:4f:f3:8e:0b:85:d0:
df:30:dc:34:7a:4f:b5:89:33:dd:3c:46:59:4d:04:27:37:52:
83:68:1a:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQSCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDMxMDkwNDIzWhcNMjQxMjAxMDkwNDIzWjAYMRYw
FAYDVQQDEw02NzIzNDgxYS1kMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzHe41+CS8Q3phz9GhEWFprjSqYsT+y3GEIA69R08MxJARYMe/2OKFn0u
RGLOiafytfkgLG58KWp8uzoZs/8r7y1eNnWcuUf66na1BlZmQb74J01OAbX1DEfQ
0VeNrQouJUzp8+Idimy9+KYj6D8kRJJE2h2wTFeWOaaQNr1pv/giHFlCNFE7IqWl
4jfgfVrWTxpKQEJe+mY1V0ohXXNC5RRlBY5qeiU69VEn5Rd/IKN69R6NzBXNmr2O
0JiTfwCp4f8a0IEmRXZM+D1MdAc0NYSMG9OMyeZ53f+wkxJNE0m9OjbZr+tRtr0C
YVHbmWfNTPLa1rUSfYuomq9WlhjRNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMvG
SjsrhQ/jl0xLZfsAuYQVk7fLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMTE5NkNBQTk3NjcxMUVGODlEODA4NEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsrAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLNbAMpMrVVQefYGTZ25FZWM5N2ul62z48o2zD83P4yUDdBcCJZhMQ
Ec8c87rV+1pFg/MRRSXpmYXVBfElXUNIwyIKlT3gxXYRF4+Bl3ICAmAZw6Og1LD/
FG2PFCfSXaaMiZWWrqDqC3r1sFts6VxjNpeIHAknb71k4KByP1DWFvHrG0ChJm12
w6NRJQ0j+qvLYwh+Etd2fMT/XLd/gf8nqtMgy5j61wD0T3WIuT4GX6kS4quvaBl1
EEnJMq57wuuHtqb3+YUvoJeqntmYfKfN0wJrZD3o2cC239EQYX/Ud0JGHHpP844L
hdDfMNw0ek+1iTPdPEZZTQQnN1KDaBrM
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org