Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32CE64F0A8E711EFA3CEF1A2762E951A.roa
File: 32CE64F0A8E711EFA3CEF1A2762E951A.roa (raw, json)
Hash identifier: 056fg7B8DDgd9wsxxuaDjwFGMP1pziivXknBFbfOjZM=
Subject key identifier: CB:F6:C9:0A:D7:84:D5:1E:F3:05:CE:01:9A:73:B4:A5:C8:FE:0B:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32CE64F0A8E711EFA3CEF1A2762E951A.roa
Signing time: Fri 22 Nov 2024 15:34:02 +0000
ROA not before: Fri 22 Nov 2024 15:33:58 +0000
ROA not after: Tue 03 Dec 2024 15:33:58 +0000
asID: 62240
IP address blocks: 154.194.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69853 (0x110dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:33:58 2024 GMT
Not After : Dec 3 15:33:58 2024 GMT
Subject: CN=6740a469-6ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:dc:25:da:c2:96:cf:fd:3d:d1:85:86:79:
49:19:b8:c9:99:8f:8b:e2:e3:6f:95:af:04:e8:49:
3a:ec:67:c2:99:36:81:c0:7e:44:86:f8:d6:0d:fe:
0b:b8:d1:88:a2:7a:dd:e2:c3:fb:3b:79:df:71:af:
a5:39:0a:36:4d:21:ab:88:44:f3:58:0a:7e:47:46:
f8:ac:5a:fe:a4:f9:c0:a4:ae:f6:4d:4c:b6:fc:08:
26:0c:06:8d:b5:12:47:5d:55:95:70:48:38:7d:f7:
eb:84:13:ef:60:5b:f9:c6:b7:ce:79:34:ec:f1:13:
31:78:20:1f:4c:a5:28:dd:7f:fa:b3:d3:e5:00:88:
60:09:28:af:58:3f:d7:68:5b:33:c9:8a:be:72:9b:
a3:6f:79:b1:9c:45:76:5d:1f:2c:03:03:cd:d4:90:
05:b4:b4:18:2e:d8:e5:f7:8b:89:a1:0e:69:7f:15:
6e:0b:1b:77:f3:76:e4:fa:4b:4a:ab:cd:8b:b6:39:
a8:63:9d:f3:ee:7b:15:64:6a:a0:e0:9c:8e:cd:55:
d9:0c:ff:c4:07:81:a2:7f:d0:f8:6f:1f:39:df:84:
1c:d0:b0:cd:7c:9d:f6:fe:c3:16:cf:13:5a:b9:9d:
c3:12:0f:30:be:6a:3c:1d:03:31:c8:28:32:41:19:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:C9:0A:D7:84:D5:1E:F3:05:CE:01:9A:73:B4:A5:C8:FE:0B:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32CE64F0A8E711EFA3CEF1A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.111.0/24
Signature Algorithm: sha256WithRSAEncryption
64:55:b9:76:c8:53:e8:45:18:8b:33:f9:f7:df:8d:59:b2:a4:
0a:09:cb:64:10:fa:ee:23:b4:b4:23:f2:6d:1a:cc:f7:a5:40:
e5:00:5c:cd:36:54:4d:f1:78:bb:59:ad:14:2b:96:7d:ae:35:
ac:eb:5b:6b:54:bf:54:52:46:2f:14:74:5f:1e:67:2b:a8:f4:
e4:d7:7a:2c:34:5b:2c:b6:95:08:8b:e5:96:fb:78:85:e5:80:
66:09:65:6f:91:99:1a:89:d2:af:d5:34:a5:b6:64:17:77:3e:
0e:e6:1c:59:8f:77:eb:96:07:65:4b:99:8d:24:b2:1d:23:e3:
13:5e:8f:2d:2d:e7:db:86:da:d3:b2:16:70:7f:f8:db:56:f0:
9d:fb:82:00:c4:9c:61:c9:13:2d:f6:6f:33:c8:0d:8c:c2:57:
4a:28:7f:94:49:ad:d0:9b:f7:4a:53:e5:ad:22:26:03:16:f2:
45:ea:3f:af:25:5e:df:3a:3d:6c:de:89:6a:f7:a4:f4:8a:f8:
67:4d:01:a0:e0:e5:37:88:33:4f:5d:5f:b6:20:22:7f:c9:9e:
bd:3d:a3:35:8d:86:d4:50:81:c3:22:05:33:e9:66:e8:83:ab:
2f:39:1e:a8:f6:f3:4a:e5:27:4b:6a:ce:34:fc:a7:23:ca:72:
c1:dd:3a:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARDdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTUzMzU4WhcNMjQxMjAzMTUzMzU4WjAYMRYw
FAYDVQQDEw02NzQwYTQ2OS02ZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4A/cJdrCls/9PdGFhnlJGbjJmY+L4uNvla8E6Ek67GfCmTaBwH5EhvjW
Df4LuNGIonrd4sP7O3nfca+lOQo2TSGriETzWAp+R0b4rFr+pPnApK72TUy2/Agm
DAaNtRJHXVWVcEg4fffrhBPvYFv5xrfOeTTs8RMxeCAfTKUo3X/6s9PlAIhgCSiv
WD/XaFszyYq+cpujb3mxnEV2XR8sAwPN1JAFtLQYLtjl94uJoQ5pfxVuCxt383bk
+ktKq82LtjmoY53z7nsVZGqg4JyOzVXZDP/EB4Gif9D4bx8534Qc0LDNfJ32/sMW
zxNauZ3DEg8wvmo8HQMxyCgyQRkjBwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMv2
yQrXhNUe8wXOAZpztKXI/gsBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMkNFNjRGMEE4RTcxMUVGQTNDRUYxQTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJvMA0GCSqGSIb3DQEB
CwUAA4IBAQBkVbl2yFPoRRiLM/n3341ZsqQKCctkEPruI7S0I/JtGsz3pUDlAFzN
NlRN8Xi7Wa0UK5Z9rjWs61trVL9UUkYvFHRfHmcrqPTk13osNFsstpUIi+WW+3iF
5YBmCWVvkZkaidKv1TSltmQXdz4O5hxZj3frlgdlS5mNJLIdI+MTXo8tLefbhtrT
shZwf/jbVvCd+4IAxJxhyRMt9m8zyA2MwldKKH+USa3Qm/dKU+WtIiYDFvJF6j+v
JV7fOj1s3olq96T0ivhnTQGg4OU3iDNPXV+2ICJ/yZ69PaM1jYbUUIHDIgUz6Wbo
g6svOR6o9vNK5SdLas40/KcjynLB3TpZ
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:03 2024 by rpki-client on console-ams.rpki-client.org