Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281A45FCA9D111EFAEC1A562762E951A.roa
File: 281A45FCA9D111EFAEC1A562762E951A.roa (raw, json)
Hash identifier: /YKhHUtnXt1024CLUCmaq3xDhp7PEgBKPrmjMXmUTrI=
Subject key identifier: 6E:AD:93:99:3F:39:2A:0B:B0:86:F6:15:65:45:D1:0C:3B:17:4A:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01121E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281A45FCA9D111EFAEC1A562762E951A.roa
Signing time: Sat 23 Nov 2024 19:28:46 +0000
ROA not before: Sat 23 Nov 2024 19:28:42 +0000
ROA not after: Tue 03 Dec 2024 19:28:42 +0000
asID: 62240
IP address blocks: 154.194.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70174 (0x1121e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:28:42 2024 GMT
Not After : Dec 3 19:28:42 2024 GMT
Subject: CN=67422cee-345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:1f:65:25:4c:a2:0d:d7:b9:88:33:9c:9e:
15:cf:5d:85:1c:0a:a5:ef:26:e2:f7:dd:e0:e7:5a:
14:f9:ea:0d:a2:70:58:c3:4b:5f:e7:e5:bf:27:16:
aa:60:e3:39:29:ac:08:d3:18:40:22:29:ae:48:90:
30:5c:69:4c:e3:96:25:f6:da:74:34:5f:71:58:2f:
65:63:fc:12:50:3b:14:fc:a1:06:5e:79:6a:70:32:
95:22:b4:bb:3c:04:1d:8b:d5:19:29:17:be:9a:77:
7b:69:f2:39:16:0b:55:54:d0:80:88:6f:93:eb:ac:
c3:f1:b5:18:ed:87:d5:84:fa:66:f9:46:5e:97:43:
40:8a:55:84:63:b8:20:52:33:39:70:73:89:92:df:
47:41:cd:62:42:6e:12:6d:9c:3e:7a:48:36:09:a1:
42:24:f0:cc:13:04:c6:90:08:2c:bc:18:0f:95:76:
d7:43:e2:ad:b0:b0:18:8a:f6:df:6b:a7:9b:6b:f8:
03:e0:e9:e9:d0:66:d7:84:b3:5d:e9:e8:94:aa:6f:
09:ba:4a:55:30:f1:21:34:f4:7f:d3:60:7d:28:ac:
0a:2b:b5:5d:a0:23:53:81:08:dc:20:c9:0b:37:cb:
36:05:96:ac:a7:4c:31:06:f4:43:5e:60:3c:55:d7:
bb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:93:99:3F:39:2A:0B:B0:86:F6:15:65:45:D1:0C:3B:17:4A:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281A45FCA9D111EFAEC1A562762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:dd:a1:5c:ff:c3:b4:a9:5c:bc:a6:b1:71:e3:d1:ef:d6:6b:
58:30:3a:a9:16:2e:41:98:dc:2b:3d:1a:61:76:a3:c1:6d:a2:
e7:00:ec:dd:c1:dd:c6:92:d4:12:49:1f:3f:01:b1:ca:ce:23:
ec:ad:ed:1a:97:b1:f9:b5:47:63:c4:1f:52:a2:00:13:0f:25:
f5:22:c8:03:83:ad:61:ec:b2:b2:4b:af:23:3b:07:4e:62:3f:
92:80:2f:1a:16:c9:79:b7:15:ff:bf:0f:f7:db:eb:f2:84:3f:
92:fa:5b:a2:d4:21:5c:bd:d5:a5:f2:6a:23:75:18:c0:80:52:
94:97:22:f7:1c:03:8a:3b:22:02:b0:d3:ba:76:d1:3b:b9:d0:
ee:05:ab:18:29:7e:b3:7e:09:5c:bc:93:3e:37:95:e9:f5:e3:
4d:3c:60:b7:53:0a:86:a2:f8:8f:38:b7:19:30:a9:00:e2:2f:
ca:7b:38:d4:0d:1e:d2:06:c1:8f:7a:1f:e5:88:2b:ee:f4:be:
a9:e2:ad:6e:c3:32:74:0b:51:fd:77:5a:dd:0b:36:13:cf:70:
9e:20:7f:1b:68:14:25:a5:0c:8a:30:43:24:76:a9:c4:23:f8:
96:e7:7a:40:1c:a9:c1:5b:3b:92:64:ca:78:a0:c8:b5:fe:ad:
fa:bb:f8:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARIeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTkyODQyWhcNMjQxMjAzMTkyODQyWjAYMRYw
FAYDVQQDEw02NzQyMmNlZS0zNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA07IfZSVMog3XuYgznJ4Vz12FHAql7ybi993g51oU+eoNonBYw0tf5+W/
JxaqYOM5KawI0xhAIimuSJAwXGlM45Yl9tp0NF9xWC9lY/wSUDsU/KEGXnlqcDKV
IrS7PAQdi9UZKRe+mnd7afI5FgtVVNCAiG+T66zD8bUY7YfVhPpm+UZel0NAilWE
Y7ggUjM5cHOJkt9HQc1iQm4SbZw+ekg2CaFCJPDMEwTGkAgsvBgPlXbXQ+KtsLAY
ivbfa6eba/gD4Onp0GbXhLNd6eiUqm8JukpVMPEhNPR/02B9KKwKK7VdoCNTgQjc
IMkLN8s2BZasp0wxBvRDXmA8Vde7dwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG6t
k5k/OSoLsIb2FWVF0Qw7F0phMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yODFBNDVGQ0E5RDExMUVGQUVDMUE1NjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsJQMA0GCSqGSIb3DQEB
CwUAA4IBAQDK3aFc/8O0qVy8prFx49Hv1mtYMDqpFi5BmNwrPRphdqPBbaLnAOzd
wd3GktQSSR8/AbHKziPsre0al7H5tUdjxB9SogATDyX1IsgDg61h7LKyS68jOwdO
Yj+SgC8aFsl5txX/vw/32+vyhD+S+lui1CFcvdWl8mojdRjAgFKUlyL3HAOKOyIC
sNO6dtE7udDuBasYKX6zfglcvJM+N5Xp9eNNPGC3UwqGoviPOLcZMKkA4i/KezjU
DR7SBsGPeh/liCvu9L6p4q1uwzJ0C1H9d1rdCzYTz3CeIH8baBQlpQyKMEMkdqnE
I/iW53pAHKnBWzuSZMp4oMi1/q36u/jS
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:00 2024 by rpki-client on console-ams.rpki-client.org