Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/290B3F42A33311EF8DD3FA52762E951A.roa
File: 290B3F42A33311EF8DD3FA52762E951A.roa (raw, json)
Hash identifier: 8VT3tEbkZHgpfPwt++eghiUAzZswteQE8zKlMsbuN8o=
Subject key identifier: BC:AD:52:93:A6:57:CB:C9:64:DF:70:45:76:7B:2C:4A:2B:6F:5E:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/290B3F42A33311EF8DD3FA52762E951A.roa
Signing time: Fri 15 Nov 2024 09:22:40 +0000
ROA not before: Fri 15 Nov 2024 09:22:36 +0000
ROA not after: Sat 17 Oct 2026 09:22:36 +0000
asID: 152450
IP address blocks: 154.205.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68990 (0x10d7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 09:22:36 2024 GMT
Not After : Oct 17 09:22:36 2026 GMT
Subject: CN=673712e0-5af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:c9:26:88:69:b6:0b:f9:f2:6f:b2:15:3e:
da:16:eb:5f:d6:5d:fc:a9:cc:89:34:c0:73:ab:89:
51:c1:52:29:aa:c5:0c:2f:10:3f:30:17:d9:f0:0d:
a8:66:91:d2:b3:d8:16:73:3b:91:e8:fd:a0:0e:30:
ef:cb:e7:eb:2b:8d:70:a3:2e:00:46:7c:ba:51:13:
3d:de:23:9a:60:3c:da:ac:49:eb:30:de:1b:aa:7f:
13:fc:aa:5b:31:8c:e1:a6:65:5f:b0:3d:13:4b:2d:
93:f1:09:93:80:50:fa:e7:a9:67:5c:47:39:8a:cb:
08:11:ff:db:19:25:b3:37:b7:5f:7a:5d:cf:d8:0f:
55:79:14:93:1b:e9:37:2b:3a:e9:e0:0d:d8:80:0f:
16:4e:3b:86:d9:50:4f:89:04:88:e0:54:c3:90:6f:
ca:47:d4:62:95:bd:d9:b7:bb:6e:40:3c:fb:8c:35:
ff:8d:e4:e8:5a:58:57:1d:ba:cb:38:c3:76:30:d2:
cd:c5:8b:70:2d:1b:19:7e:03:0e:f8:2d:17:2c:81:
71:7a:e6:9d:81:0b:62:4c:b1:b7:fe:52:5a:d6:2e:
42:83:65:1a:11:eb:b1:5e:33:29:0c:14:6c:ca:33:
cf:44:09:7a:93:26:f4:04:41:02:0c:de:a8:ca:6e:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AD:52:93:A6:57:CB:C9:64:DF:70:45:76:7B:2C:4A:2B:6F:5E:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/290B3F42A33311EF8DD3FA52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:20:39:f8:ca:a2:64:cc:e2:71:5f:6e:f4:f0:7e:2c:dd:be:
84:48:3f:81:ba:0b:d0:c5:be:ad:05:3c:73:03:87:f2:3b:ca:
5f:bb:76:e0:60:67:5c:65:5b:b3:7e:98:f6:5e:15:64:e0:e2:
a8:1b:56:08:26:6a:53:9e:32:fc:f8:f4:e3:61:b2:04:69:69:
83:88:b3:88:05:37:42:48:0c:ac:44:41:ca:61:8f:5a:e1:51:
6a:5a:56:ce:98:7f:c1:38:96:e1:cd:8f:3f:42:6f:c2:b4:71:
f0:1e:e8:b5:e8:96:8a:19:56:fe:5c:de:77:b9:8f:59:bd:9d:
3d:58:3d:2d:91:e8:5c:41:ac:44:15:ec:ea:fd:e1:32:71:e6:
55:be:a2:1c:07:f5:ed:8d:2a:ea:dc:63:6a:89:b1:72:9f:6a:
7b:69:e1:c4:bc:ac:8a:38:7c:de:89:40:77:ba:f1:0c:4d:64:
15:46:86:ae:5b:c5:f9:60:bb:46:fd:92:60:da:cd:ad:5a:2f:
23:c1:6c:08:8f:03:3d:f7:74:6b:60:7f:d7:2f:5e:d7:22:00:
36:6b:39:06:37:f9:8d:a8:02:3b:1b:1b:62:96:76:a8:83:ee:
8f:1a:b7:59:f2:de:dc:1b:ec:3b:88:9a:9c:69:42:58:d9:29:
94:e2:4a:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ1+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE1MDkyMjM2WhcNMjYxMDE3MDkyMjM2WjAYMRYw
FAYDVQQDEw02NzM3MTJlMC01YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAk1rJJohptgv58m+yFT7aFutf1l38qcyJNMBzq4lRwVIpqsUMLxA/MBfZ
8A2oZpHSs9gWczuR6P2gDjDvy+frK41woy4ARny6URM93iOaYDzarEnrMN4bqn8T
/KpbMYzhpmVfsD0TSy2T8QmTgFD656lnXEc5issIEf/bGSWzN7dfel3P2A9VeRST
G+k3Kzrp4A3YgA8WTjuG2VBPiQSI4FTDkG/KR9Rilb3Zt7tuQDz7jDX/jeToWlhX
HbrLOMN2MNLNxYtwLRsZfgMO+C0XLIFxeuadgQtiTLG3/lJa1i5Cg2UaEeuxXjMp
DBRsyjPPRAl6kyb0BEECDN6oym6S1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLyt
UpOmV8vJZN9wRXZ7LEorb14+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTBCM0Y0MkEzMzMxMUVGOEREM0ZBNTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0GMA0GCSqGSIb3DQEB
CwUAA4IBAQDRIDn4yqJkzOJxX2708H4s3b6ESD+BugvQxb6tBTxzA4fyO8pfu3bg
YGdcZVuzfpj2XhVk4OKoG1YIJmpTnjL8+PTjYbIEaWmDiLOIBTdCSAysREHKYY9a
4VFqWlbOmH/BOJbhzY8/Qm/CtHHwHui16JaKGVb+XN53uY9ZvZ09WD0tkehcQaxE
Fezq/eEyceZVvqIcB/XtjSrq3GNqibFyn2p7aeHEvKyKOHzeiUB3uvEMTWQVRoau
W8X5YLtG/ZJg2s2tWi8jwWwIjwM993RrYH/XL17XIgA2azkGN/mNqAI7Gxtilnao
g+6PGrdZ8t7cG+w7iJqcaUJY2SmU4kpB
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:43 2024 by rpki-client on console-fra.rpki-client.org