Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2987AC5AA33B11EF99E8EF83762E951A.roa
File: 2987AC5AA33B11EF99E8EF83762E951A.roa (raw, json)
Hash identifier: ZMG/KrI0b1zW3mgu10rq3xdkvSDmevd6v8XMp9ZXpNU=
Subject key identifier: 7E:AB:8B:C8:35:28:95:90:1D:84:EC:78:02:16:8F:C2:1A:45:B1:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2987AC5AA33B11EF99E8EF83762E951A.roa
Signing time: Fri 15 Nov 2024 10:19:57 +0000
ROA not before: Fri 15 Nov 2024 10:19:53 +0000
ROA not after: Mon 25 Nov 2024 10:19:53 +0000
asID: 5065
IP address blocks: 154.207.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69024 (0x10da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 10:19:53 2024 GMT
Not After : Nov 25 10:19:53 2024 GMT
Subject: CN=6737204d-9929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:e0:eb:e3:d9:86:7b:88:5f:1e:f2:dd:dd:
81:2f:24:c1:dd:34:b1:63:7e:d7:a2:4b:d7:66:e0:
b5:9f:37:cb:57:3f:c4:d6:db:6b:dd:24:dc:e0:3c:
47:2a:ea:97:49:7c:f0:ac:51:08:26:1d:de:9c:81:
dc:71:ca:71:e4:da:fd:a9:99:6f:81:04:df:b7:c0:
f7:14:26:14:8c:4a:f1:80:a3:35:9e:0c:84:c9:fd:
91:37:4a:2f:bf:2b:e6:88:26:d3:00:bd:ed:88:fa:
33:f9:c4:14:ff:7e:e9:c9:03:50:27:50:cc:33:81:
b7:10:dd:6e:7d:7e:9e:86:f2:51:a1:71:8c:31:b7:
7e:c0:d4:47:3f:92:75:7b:52:59:24:8b:0d:19:93:
e2:c3:6d:67:51:fb:10:11:91:c7:4b:2c:c1:40:52:
ee:15:1d:69:f5:c4:82:04:62:71:40:41:1f:dd:13:
fd:dd:01:68:00:85:80:89:9a:38:62:11:0d:be:ac:
6a:d8:12:79:e7:5d:a3:29:40:55:1d:9a:c4:47:a7:
7e:0d:fe:ec:68:42:2e:fa:7b:eb:01:a9:a5:35:54:
c3:52:00:5c:26:98:a9:f6:9c:0e:eb:3a:e5:c0:4e:
5f:af:39:22:51:16:94:11:d4:5b:97:a4:a2:fc:9f:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AB:8B:C8:35:28:95:90:1D:84:EC:78:02:16:8F:C2:1A:45:B1:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2987AC5AA33B11EF99E8EF83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:0f:43:01:99:ee:0e:cc:74:75:8f:d7:d1:df:af:9a:47:f3:
12:1d:ac:23:83:1f:9f:b9:2f:9b:df:88:59:fb:38:39:15:2c:
42:5f:e7:a3:a5:e5:bc:83:1f:8d:a3:ab:e0:3a:2e:89:43:b0:
1d:ff:40:49:cd:93:36:a7:a1:14:18:6a:50:f8:17:04:64:3f:
f3:57:75:58:39:07:95:55:12:97:2a:fd:20:ca:53:67:2d:eb:
a6:17:fd:7b:b0:2f:39:b8:56:42:b7:3f:01:67:fa:60:9e:a3:
98:62:18:6d:94:bd:07:22:cb:e9:9b:48:a4:fd:9f:85:0e:26:
12:92:5e:b0:86:fd:d0:28:2a:90:d1:46:13:9d:c2:de:89:09:
de:d6:a6:af:3e:e2:35:13:ff:de:ca:90:53:d1:85:5c:32:cd:
9f:4b:a2:24:34:ee:37:c9:83:ed:e4:9f:84:69:42:75:a5:9a:
83:18:b2:c8:06:4e:91:ee:3c:de:5c:33:c7:f0:78:3b:cd:41:
6f:de:0c:89:9e:b7:06:e7:a8:17:2b:5a:41:c7:bf:00:f5:c8:
a8:c4:59:8f:78:f4:d9:e4:10:35:d9:c9:b5:12:1f:ed:fb:f9:
0b:59:3b:be:94:fa:3a:a5:2f:a1:f4:1f:55:90:29:b9:07:0f:
c1:7a:4f:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ2gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE1MTAxOTUzWhcNMjQxMTI1MTAxOTUzWjAYMRYw
FAYDVQQDEw02NzM3MjA0ZC05OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApj/g6+PZhnuIXx7y3d2BLyTB3TSxY37XokvXZuC1nzfLVz/E1ttr3STc
4DxHKuqXSXzwrFEIJh3enIHcccpx5Nr9qZlvgQTft8D3FCYUjErxgKM1ngyEyf2R
N0ovvyvmiCbTAL3tiPoz+cQU/37pyQNQJ1DMM4G3EN1ufX6ehvJRoXGMMbd+wNRH
P5J1e1JZJIsNGZPiw21nUfsQEZHHSyzBQFLuFR1p9cSCBGJxQEEf3RP93QFoAIWA
iZo4YhENvqxq2BJ5512jKUBVHZrER6d+Df7saEIu+nvrAamlNVTDUgBcJpip9pwO
6zrlwE5frzkiURaUEdRbl6Si/J8SjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH6r
i8g1KJWQHYTseAIWj8IaRbE7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTg3QUM1QUEzM0IxMUVGOTlFOEVGODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms+SMA0GCSqGSIb3DQEB
CwUAA4IBAQDID0MBme4OzHR1j9fR36+aR/MSHawjgx+fuS+b34hZ+zg5FSxCX+ej
peW8gx+No6vgOi6JQ7Ad/0BJzZM2p6EUGGpQ+BcEZD/zV3VYOQeVVRKXKv0gylNn
LeumF/17sC85uFZCtz8BZ/pgnqOYYhhtlL0HIsvpm0ik/Z+FDiYSkl6whv3QKCqQ
0UYTncLeiQne1qavPuI1E//eypBT0YVcMs2fS6IkNO43yYPt5J+EaUJ1pZqDGLLI
Bk6R7jzeXDPH8Hg7zUFv3gyJnrcG56gXK1pBx78A9cioxFmPePTZ5BA12cm1Eh/t
+/kLWTu+lPo6pS+h9B9VkCm5Bw/Bek/3
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:34 2024 by rpki-client on console-ams.rpki-client.org