Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3362F09CA73F11EFB2C415B5762E951A.roa
File: 3362F09CA73F11EFB2C415B5762E951A.roa (raw, json)
Hash identifier: wFmilTLZsEOamr+AZBzm7aM6zOxAnzTfyD+fTmoodjk=
Subject key identifier: 7B:E1:A2:3D:D6:46:C4:E1:78:15:56:C3:CC:E8:BF:9F:A5:6F:99:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3362F09CA73F11EFB2C415B5762E951A.roa
Signing time: Wed 20 Nov 2024 12:58:56 +0000
ROA not before: Wed 20 Nov 2024 12:58:52 +0000
ROA not after: Sat 30 Nov 2024 12:58:52 +0000
asID: 142062
IP address blocks: 154.212.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69557 (0x10fb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 12:58:52 2024 GMT
Not After : Nov 30 12:58:52 2024 GMT
Subject: CN=673ddd10-9ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:6c:e3:d0:cd:fd:35:e8:a4:74:bf:21:dc:
24:10:46:2d:a9:7f:7f:a4:98:4b:5a:57:43:2f:92:
e0:d3:76:ab:92:89:42:ab:9d:7c:1b:ba:b7:aa:a2:
5a:cf:f5:de:61:86:94:7c:ea:f4:6c:74:b1:b7:dd:
e7:0f:0e:ca:9e:66:a2:3a:91:b4:6a:0a:3b:53:cf:
57:e3:21:c7:71:7d:be:d9:56:df:38:07:cd:1c:7b:
39:fd:cb:19:24:0b:04:5b:bd:07:43:37:fd:91:bf:
6d:c2:42:4b:f0:12:88:02:23:40:e9:06:20:68:5a:
d0:05:46:09:39:8b:d7:e5:2c:f1:a3:70:7d:cd:d2:
ba:8e:2c:36:8d:32:f0:44:82:fe:e2:72:ab:d3:70:
d0:ff:da:77:ea:24:c9:73:24:62:de:36:30:4a:9e:
1e:ea:20:99:56:a6:5d:cb:3f:b0:7f:20:62:b5:bf:
a5:aa:c4:e0:65:b3:0e:08:24:a1:63:cc:2a:6c:00:
c8:4e:5a:98:35:eb:63:83:30:37:a2:d3:36:c1:ae:
70:ea:4e:46:c4:95:7b:ea:d0:9f:00:d2:11:c5:29:
ee:09:e8:3f:b6:05:44:83:54:46:db:47:a1:3a:1c:
98:54:5d:6f:68:2d:e2:ed:38:2f:bb:42:2e:50:e9:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E1:A2:3D:D6:46:C4:E1:78:15:56:C3:CC:E8:BF:9F:A5:6F:99:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3362F09CA73F11EFB2C415B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.153.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2b:57:c9:66:dc:77:39:fd:d9:af:d2:a4:68:b3:aa:55:43:
81:2d:fa:9d:23:42:ee:f8:42:dc:72:13:a7:7b:0b:76:64:e0:
03:be:62:13:b6:bf:6f:67:bc:3f:2f:5f:ad:f7:9e:b7:1e:03:
9d:45:50:21:fd:1e:d1:4d:a5:8e:b1:c6:12:45:ce:52:b2:dc:
e6:ac:20:a0:b1:f2:2c:37:fa:b2:bb:1c:3a:d9:0a:9c:e1:16:
9d:ed:07:4b:33:92:3a:82:a4:7b:07:dd:e1:12:fd:60:e1:18:
ab:6e:dd:f5:48:cc:05:0d:0b:ba:fd:f1:9b:57:0a:41:23:28:
87:52:a3:b3:c3:87:77:b2:69:df:9a:7d:01:56:72:32:bb:60:
7d:ab:59:da:6f:73:16:aa:45:c1:4f:82:76:7b:8e:44:69:76:
3f:a8:8c:46:af:39:e6:c1:32:e8:c4:1c:33:a8:1d:21:c1:31:
b4:42:87:f3:f4:fb:4f:8b:ca:4c:f8:f7:f4:7c:c9:06:35:08:
c8:7f:4d:a6:ce:a4:3c:73:45:69:1e:0a:0c:26:bc:1b:81:1b:
41:40:28:8a:e2:63:39:38:bf:09:df:6e:27:64:b5:de:63:1e:
66:b5:04:e3:26:b2:d1:b7:ea:48:32:a4:f2:0d:44:02:5f:9a:
34:41:55:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ+1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIwMTI1ODUyWhcNMjQxMTMwMTI1ODUyWjAYMRYw
FAYDVQQDEw02NzNkZGQxMC05YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAywRs49DN/TXopHS/IdwkEEYtqX9/pJhLWldDL5Lg03arkolCq518G7q3
qqJaz/XeYYaUfOr0bHSxt93nDw7KnmaiOpG0ago7U89X4yHHcX2+2VbfOAfNHHs5
/csZJAsEW70HQzf9kb9twkJL8BKIAiNA6QYgaFrQBUYJOYvX5Szxo3B9zdK6jiw2
jTLwRIL+4nKr03DQ/9p36iTJcyRi3jYwSp4e6iCZVqZdyz+wfyBitb+lqsTgZbMO
CCShY8wqbADITlqYNetjgzA3otM2wa5w6k5GxJV76tCfANIRxSnuCeg/tgVEg1RG
20ehOhyYVF1vaC3i7Tgvu0IuUOkUnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHvh
oj3WRsTheBVWw8zov5+lb5lIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMzYyRjA5Q0E3M0YxMUVGQjJDNDE1QjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtSZMA0GCSqGSIb3DQEB
CwUAA4IBAQCAK1fJZtx3Of3Zr9KkaLOqVUOBLfqdI0Lu+ELcchOnewt2ZOADvmIT
tr9vZ7w/L1+t9563HgOdRVAh/R7RTaWOscYSRc5SstzmrCCgsfIsN/qyuxw62Qqc
4Rad7QdLM5I6gqR7B93hEv1g4Rirbt31SMwFDQu6/fGbVwpBIyiHUqOzw4d3smnf
mn0BVnIyu2B9q1nab3MWqkXBT4J2e45EaXY/qIxGrznmwTLoxBwzqB0hwTG0Qofz
9PtPi8pM+Pf0fMkGNQjIf02mzqQ8c0VpHgoMJrwbgRtBQCiK4mM5OL8J324nZLXe
Yx5mtQTjJrLRt+pIMqTyDUQCX5o0QVUB
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org