Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25EA359E904F11EF87B11698762E951A.roa
File: 25EA359E904F11EF87B11698762E951A.roa (raw, json)
Hash identifier: wcc+ivqtE9ggvR8WHd+qDJb36Mo2qy0rcHPmi2+6XD4=
Subject key identifier: 9B:7D:F4:B4:02:08:B3:B8:B8:86:62:53:AA:0E:BE:C8:5D:BB:28:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01007D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25EA359E904F11EF87B11698762E951A.roa
Signing time: Tue 22 Oct 2024 08:25:09 +0000
ROA not before: Tue 22 Oct 2024 08:25:05 +0000
ROA not after: Tue 26 Nov 2024 08:25:05 +0000
asID: 197547
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65661 (0x1007d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:25:05 2024 GMT
Not After : Nov 26 08:25:05 2024 GMT
Subject: CN=67176164-e787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:af:89:95:9e:89:2d:aa:c9:d8:a6:0b:0f:
66:ce:2b:9c:a2:96:a6:54:0a:ee:78:bf:84:aa:9f:
35:80:8e:4f:40:b3:6d:7b:36:4f:01:d0:f9:1e:99:
8f:59:9f:3f:c8:7b:a7:f8:42:82:91:c4:34:4e:a8:
51:23:67:50:99:35:fa:9d:21:26:90:c6:f1:f4:76:
b4:e9:b4:86:0e:ed:84:a4:ef:4b:ed:f7:b1:c8:a9:
8a:b5:72:4c:82:0e:3c:92:6c:11:19:14:10:ff:1e:
db:21:62:00:fb:6a:36:83:5e:07:56:d9:31:ec:4f:
0f:8f:e0:5c:32:94:a1:98:65:0b:56:be:ef:ba:2b:
28:e1:a3:77:96:c3:b8:45:10:2a:82:20:d9:a3:ba:
4b:da:95:a5:18:2b:1c:67:22:f1:a3:39:a9:b4:cd:
a9:1f:2c:fb:9a:a4:61:c4:c0:75:f9:e6:0a:3f:18:
72:eb:3c:3b:55:30:da:58:36:ab:16:20:6e:73:b9:
cb:7f:96:f2:69:50:a5:12:cd:9f:c8:23:f0:2e:b7:
cb:63:85:c8:4e:54:01:4b:04:5a:bb:ef:69:54:bb:
45:e8:c0:9d:18:3b:bd:fd:aa:a8:51:4f:1c:f6:52:
29:eb:6a:2c:b9:0e:70:9a:91:c5:3c:55:b3:b6:93:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:F4:B4:02:08:B3:B8:B8:86:62:53:AA:0E:BE:C8:5D:BB:28:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25EA359E904F11EF87B11698762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:80:e1:99:1a:8a:45:64:a7:af:1c:84:bf:4d:cb:03:88:b4:
f3:72:b0:22:5b:03:37:1a:45:df:91:7e:f1:3c:91:b5:02:e7:
10:7f:56:2e:b0:c3:70:96:36:fc:77:dc:84:d9:a6:b9:06:e7:
8b:97:90:37:f9:11:57:32:8d:4e:95:93:7c:75:5c:f5:ab:73:
34:1a:a3:ed:1f:ec:e7:c3:a7:d7:19:e2:8c:af:0f:7b:af:06:
5d:29:2a:ba:77:fe:40:16:36:0a:e9:09:ee:79:48:01:9d:1f:
d9:f2:4a:0f:d3:97:3c:17:fa:49:4a:9e:6d:4d:5a:16:b9:5d:
13:82:06:f0:99:26:6e:06:fc:05:3d:08:b5:f9:bc:85:79:aa:
82:f8:55:31:50:e0:20:df:fa:80:97:08:51:a6:53:cc:c4:53:
b8:43:f2:a5:f4:76:bb:0f:9a:dc:9e:12:2d:e5:ea:0b:c3:95:
d1:31:8a:6e:13:ae:8b:e2:ce:4c:90:e1:b8:84:9e:d2:39:e7:
38:c9:b9:53:93:86:8c:5d:e7:d6:20:fc:9a:c7:10:c7:8f:7d:
9a:f7:ce:c6:59:23:ac:73:e3:32:c8:9d:9f:2d:1b:8f:71:29:
fb:95:45:7b:dd:1e:24:0e:d2:71:8d:ac:7d:dc:37:52:ad:e9:
f7:76:e1:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQB9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIyMDgyNTA1WhcNMjQxMTI2MDgyNTA1WjAYMRYw
FAYDVQQDEw02NzE3NjE2NC1lNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq4+viZWeiS2qydimCw9mziucopamVArueL+Eqp81gI5PQLNtezZPAdD5
HpmPWZ8/yHun+EKCkcQ0TqhRI2dQmTX6nSEmkMbx9Ha06bSGDu2EpO9L7fexyKmK
tXJMgg48kmwRGRQQ/x7bIWIA+2o2g14HVtkx7E8Pj+BcMpShmGULVr7vuiso4aN3
lsO4RRAqgiDZo7pL2pWlGCscZyLxozmptM2pHyz7mqRhxMB1+eYKPxhy6zw7VTDa
WDarFiBuc7nLf5byaVClEs2fyCPwLrfLY4XITlQBSwRau+9pVLtF6MCdGDu9/aqo
UU8c9lIp62osuQ5wmpHFPFWztpMxnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJt9
9LQCCLO4uIZiU6oOvshduyj5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNUVBMzU5RTkwNEYxMUVGODdCMTE2OTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsldMA0GCSqGSIb3DQEB
CwUAA4IBAQDRgOGZGopFZKevHIS/TcsDiLTzcrAiWwM3GkXfkX7xPJG1AucQf1Yu
sMNwljb8d9yE2aa5BueLl5A3+RFXMo1OlZN8dVz1q3M0GqPtH+znw6fXGeKMrw97
rwZdKSq6d/5AFjYK6QnueUgBnR/Z8koP05c8F/pJSp5tTVoWuV0TggbwmSZuBvwF
PQi1+byFeaqC+FUxUOAg3/qAlwhRplPMxFO4Q/Kl9Ha7D5rcnhIt5eoLw5XRMYpu
E66L4s5MkOG4hJ7SOec4yblTk4aMXefWIPyaxxDHj32a987GWSOsc+MyyJ2fLRuP
cSn7lUV73R4kDtJxjax93DdSren3duHQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:36 2024 by rpki-client on console-fra.rpki-client.org