Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D6F39869EAA11EF9885708D762E951A.roa
File: 2D6F39869EAA11EF9885708D762E951A.roa (raw, json)
Hash identifier: vGliRmUNXfjp54GbdP5hrlh5JI5smoeURxHjCFLMWIw=
Subject key identifier: 85:B2:3B:B6:F3:BE:16:56:CF:3D:50:E2:27:21:E5:4F:BA:97:0A:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010A11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D6F39869EAA11EF9885708D762E951A.roa
Signing time: Sat 09 Nov 2024 14:52:02 +0000
ROA not before: Sat 09 Nov 2024 14:51:58 +0000
ROA not after: Mon 07 Apr 2025 14:51:58 +0000
asID: 267834
IP address blocks: 154.198.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68113 (0x10a11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 14:51:58 2024 GMT
Not After : Apr 7 14:51:58 2025 GMT
Subject: CN=672f7711-4cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:ff:c4:8e:de:47:e7:4a:1a:2c:92:f8:9f:
a9:28:87:2b:3f:8f:e7:d4:cc:2e:90:ed:6a:34:ad:
51:a1:c6:32:c4:3d:a9:cd:5f:01:16:08:46:83:af:
a8:14:86:0b:f1:a1:9b:14:e8:5f:a2:19:21:d2:67:
0d:de:bb:93:c4:78:0a:59:8b:91:9b:08:25:80:ae:
a2:05:49:27:c2:e4:71:1f:37:3f:a0:93:2a:eb:b5:
45:23:f7:f8:9b:22:de:dc:ca:29:ba:b9:e8:b1:01:
27:9e:bb:1e:44:90:64:da:f2:e3:d6:69:a6:36:5f:
c8:f2:77:83:7c:de:1f:0f:12:3b:94:73:15:65:a1:
43:c8:3b:d0:b5:0e:e5:a3:83:73:63:30:41:5b:ff:
f6:84:d8:d8:c4:42:c4:e4:4f:c5:82:af:56:a7:ea:
65:c4:64:e8:86:f8:65:cf:db:49:20:be:62:b9:d5:
6b:32:13:13:48:8c:41:a3:c9:9a:34:24:b1:2b:54:
ab:01:28:fe:ad:0b:19:d4:a5:40:7d:26:3e:ba:2c:
bd:d5:d5:ab:5d:14:c6:fd:b7:0e:91:4b:ce:43:65:
f5:d2:8b:00:9f:67:b8:8b:b7:b7:d3:a0:4a:94:0d:
38:b2:fc:c8:5e:58:55:88:80:a1:10:f7:46:7d:0a:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:3B:B6:F3:BE:16:56:CF:3D:50:E2:27:21:E5:4F:BA:97:0A:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D6F39869EAA11EF9885708D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2e:ea:91:4f:14:1b:f4:cc:9b:d3:65:93:be:8a:13:de:60:
70:93:73:17:a6:29:1f:f8:d3:15:49:f9:d4:89:34:49:c9:1e:
65:c1:93:76:d9:6e:e2:2a:48:a5:68:de:4a:55:c6:63:c1:7f:
ce:ac:3e:46:d5:83:1e:ca:76:8b:05:f5:1b:19:4a:8a:48:fc:
bc:91:7c:8a:12:da:a5:c8:48:30:2f:f5:88:da:33:e9:fb:93:
f5:fd:dd:92:e1:1a:b3:9c:af:32:da:39:2c:89:22:28:f4:71:
cd:5d:fb:f6:83:fc:10:d0:6d:fc:41:4a:4f:39:7c:4b:1b:14:
64:72:a4:d7:ed:e5:58:b8:93:7b:1d:47:28:24:8c:db:5c:04:
fe:30:4c:35:63:5f:08:af:4c:6c:ec:9c:4d:8b:b4:48:b1:cf:
59:23:32:8c:47:d7:88:59:a7:0f:74:c0:9e:07:61:f8:68:92:
4b:09:53:ed:56:3f:dd:71:a1:b5:3c:48:d7:59:73:1e:4e:00:
3c:57:97:c4:60:8b:eb:27:37:e8:f9:72:1c:b2:f5:54:f3:d3:
9c:16:7b:00:37:81:97:4c:0d:b0:22:a3:d3:79:78:91:c3:60:
9c:8f:08:43:85:7a:49:a0:81:47:38:3c:ed:ea:0f:7c:a5:c9:
7d:2b:a9:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQoRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA5MTQ1MTU4WhcNMjUwNDA3MTQ1MTU4WjAYMRYw
FAYDVQQDEw02NzJmNzcxMS00Y2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5YD/xI7eR+dKGiyS+J+pKIcrP4/n1MwukO1qNK1RocYyxD2pzV8BFghG
g6+oFIYL8aGbFOhfohkh0mcN3ruTxHgKWYuRmwglgK6iBUknwuRxHzc/oJMq67VF
I/f4myLe3MopurnosQEnnrseRJBk2vLj1mmmNl/I8neDfN4fDxI7lHMVZaFDyDvQ
tQ7lo4NzYzBBW//2hNjYxELE5E/Fgq9Wp+plxGTohvhlz9tJIL5iudVrMhMTSIxB
o8maNCSxK1SrASj+rQsZ1KVAfSY+uiy91dWrXRTG/bcOkUvOQ2X10osAn2e4i7e3
06BKlA04svzIXlhViIChEPdGfQo8JwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIWy
O7bzvhZWzz1Q4ich5U+6lwozMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRDZGMzk4NjlFQUExMUVGOTg4NTcwOEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsY4MA0GCSqGSIb3DQEB
CwUAA4IBAQCsLuqRTxQb9Myb02WTvooT3mBwk3MXpikf+NMVSfnUiTRJyR5lwZN2
2W7iKkilaN5KVcZjwX/OrD5G1YMeynaLBfUbGUqKSPy8kXyKEtqlyEgwL/WI2jPp
+5P1/d2S4RqznK8y2jksiSIo9HHNXfv2g/wQ0G38QUpPOXxLGxRkcqTX7eVYuJN7
HUcoJIzbXAT+MEw1Y18Ir0xs7JxNi7RIsc9ZIzKMR9eIWacPdMCeB2H4aJJLCVPt
Vj/dcaG1PEjXWXMeTgA8V5fEYIvrJzfo+XIcsvVU89OcFnsAN4GXTA2wIqPTeXiR
w2CcjwhDhXpJoIFHODzt6g98pcl9K6l4
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:58 2024 by rpki-client on console-ams.rpki-client.org