Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DFFE7029B7011EFA3EB06BC762E951A.roa
File: 2DFFE7029B7011EFA3EB06BC762E951A.roa (raw, json)
Hash identifier: YCTdrPtfJ7nJWhAXwmViVoDe5S1wBR1meDzatMxe6O4=
Subject key identifier: C4:78:C9:D9:FB:C5:2F:5D:39:6A:C6:0F:07:FE:EB:95:E5:C1:A9:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DFFE7029B7011EFA3EB06BC762E951A.roa
Signing time: Tue 05 Nov 2024 12:19:18 +0000
ROA not before: Tue 05 Nov 2024 12:19:15 +0000
ROA not after: Mon 13 Jan 2025 12:19:15 +0000
asID: 22773
IP address blocks: 154.90.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67501 (0x107ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 12:19:15 2024 GMT
Not After : Jan 13 12:19:15 2025 GMT
Subject: CN=672a0d46-e03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:94:7d:f6:7b:30:45:1c:5a:1e:2a:9b:b8:
ea:85:6b:3f:89:1d:be:a8:f9:d3:3f:71:37:29:0e:
e2:26:e1:8c:11:ca:af:e0:85:ab:c3:ce:63:bb:f6:
ba:c7:ef:98:f9:e7:9d:70:5a:da:f6:a6:c2:87:63:
30:cb:08:dd:97:eb:a0:4a:65:c6:3f:36:6d:0d:cf:
72:00:05:57:78:75:36:b5:64:81:60:87:09:4d:80:
af:90:f6:ce:1c:1f:57:0a:62:b9:8a:46:d6:73:66:
1c:58:17:70:6d:3b:f1:a9:c1:47:f8:ff:17:96:97:
8d:b3:bb:6c:46:9a:49:32:3a:d0:7f:d2:82:85:19:
44:53:e8:de:a3:58:69:58:24:77:56:a7:88:6c:d6:
c3:c4:c1:0e:63:c6:87:b9:dd:e9:48:4b:5c:e4:b4:
9e:8d:79:7e:65:84:0c:6f:1b:c3:46:ae:ea:4d:3c:
7c:7a:1c:0d:be:d9:89:b9:71:ed:d9:41:6f:38:64:
74:cf:00:92:79:8d:c2:4d:cb:ee:b5:62:b3:7c:de:
fb:d5:17:43:94:f5:c9:18:9a:11:71:72:b8:d9:59:
c2:ed:bb:a6:cd:dd:50:08:44:3a:10:eb:41:b3:ce:
07:5d:63:17:35:c2:6e:20:6e:22:12:7f:3d:5a:2d:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:C9:D9:FB:C5:2F:5D:39:6A:C6:0F:07:FE:EB:95:E5:C1:A9:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DFFE7029B7011EFA3EB06BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.4.0/22
Signature Algorithm: sha256WithRSAEncryption
62:3c:db:86:ce:ae:9d:72:45:b1:15:9d:6d:1b:16:d4:9e:e0:
69:5b:45:eb:c6:a4:d2:5a:31:1b:00:8c:35:18:3d:27:0d:88:
5f:58:a2:c5:c1:00:ab:18:ca:83:85:a8:9d:22:92:d8:9c:3f:
b1:0b:b8:b3:2a:10:ef:64:aa:0e:e5:7a:a7:9e:74:d4:a8:22:
22:bb:34:d4:20:0f:74:ee:f3:15:c4:25:94:81:c0:77:7b:db:
72:c5:c8:19:5d:41:2d:3f:c3:9d:a5:7b:ee:ab:cf:25:3d:22:
6d:c7:4c:80:dc:24:5f:6f:8a:f2:bd:c9:f6:51:81:f8:e7:4b:
51:1a:91:c4:05:47:ef:2a:1e:13:9f:e9:2f:2c:31:00:3d:15:
a1:d9:f4:3a:b1:27:48:1b:50:8a:7a:d6:d7:c0:fc:13:d5:ae:
4d:7d:97:14:ce:8a:2d:5b:e9:2a:6f:c6:8d:da:b6:10:89:61:
4b:7b:5f:e4:0b:f2:1e:cd:34:79:cd:b9:ad:1e:c8:6e:26:87:
61:1c:b9:fb:0e:d7:b5:cb:96:50:2a:08:4f:b0:de:25:b6:cf:
64:b4:13:6b:94:48:fc:9d:7e:95:fa:85:5b:f3:5b:28:80:2d:
1a:9f:7e:ef:d5:b6:fa:56:85:4b:d6:6d:08:4b:8e:f2:c3:75:
58:da:9c:99
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQetMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTIxOTE1WhcNMjUwMTEzMTIxOTE1WjAYMRYw
FAYDVQQDEw02NzJhMGQ0Ni1lMDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvBiUffZ7MEUcWh4qm7jqhWs/iR2+qPnTP3E3KQ7iJuGMEcqv4IWrw85j
u/a6x++Y+eedcFra9qbCh2Mwywjdl+ugSmXGPzZtDc9yAAVXeHU2tWSBYIcJTYCv
kPbOHB9XCmK5ikbWc2YcWBdwbTvxqcFH+P8XlpeNs7tsRppJMjrQf9KChRlEU+je
o1hpWCR3VqeIbNbDxMEOY8aHud3pSEtc5LSejXl+ZYQMbxvDRq7qTTx8ehwNvtmJ
uXHt2UFvOGR0zwCSeY3CTcvutWKzfN771RdDlPXJGJoRcXK42VnC7bumzd1QCEQ6
EOtBs84HXWMXNcJuIG4iEn89Wi34wwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMR4
ydn7xS9dOWrGDwf+65XlwanoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yREZGRTcwMjlCNzAxMUVGQTNFQjA2QkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmloEMA0GCSqGSIb3DQEB
CwUAA4IBAQBiPNuGzq6dckWxFZ1tGxbUnuBpW0XrxqTSWjEbAIw1GD0nDYhfWKLF
wQCrGMqDhaidIpLYnD+xC7izKhDvZKoO5XqnnnTUqCIiuzTUIA907vMVxCWUgcB3
e9tyxcgZXUEtP8OdpXvuq88lPSJtx0yA3CRfb4ryvcn2UYH450tRGpHEBUfvKh4T
n+kvLDEAPRWh2fQ6sSdIG1CKetbXwPwT1a5NfZcUzootW+kqb8aN2rYQiWFLe1/k
C/IezTR5zbmtHshuJodhHLn7Dte1y5ZQKghPsN4lts9ktBNrlEj8nX6V+oVb81so
gC0an37v1bb6VoVL1m0IS47yw3VY2pyZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:34 2024 by rpki-client on console-ams.rpki-client.org