Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3406562674D411EF9FF4C270762E951A.roa
File: 3406562674D411EF9FF4C270762E951A.roa (raw, json)
Hash identifier: iUgcLH3qUsJXAUhi7x9PzrThqecraJWSWz4XuynGrwQ=
Subject key identifier: D6:C6:37:E2:80:E1:8C:9A:CA:DE:A8:4C:B6:CE:5A:ED:DB:52:E0:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F042
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3406562674D411EF9FF4C270762E951A.roa
Signing time: Tue 17 Sep 2024 09:07:03 +0000
ROA not before: Tue 17 Sep 2024 09:06:59 +0000
ROA not after: Thu 21 Aug 2025 09:06:59 +0000
asID: 211392
IP address blocks: 154.219.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61506 (0xf042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 09:06:59 2024 GMT
Not After : Aug 21 09:06:59 2025 GMT
Subject: CN=66e946b7-40a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:55:db:2e:a1:7f:f1:ff:06:a3:cb:8e:73:
0c:ae:19:e5:dc:f2:aa:7d:30:3c:cd:d6:95:26:b4:
6f:3d:5f:e5:bb:51:8f:2d:7c:81:f6:12:52:31:13:
9a:17:48:24:fc:25:91:83:59:5c:f2:18:2b:2f:c0:
cd:f4:e5:12:14:31:37:78:98:a1:49:5c:2c:da:0c:
10:e6:83:e4:04:6c:03:7d:2f:57:e9:ba:ea:58:73:
ef:e6:9d:8d:91:35:8e:06:50:60:bd:1f:62:f5:45:
2a:22:7c:a5:07:b1:b0:7f:33:54:fb:c6:71:3a:1a:
64:0a:20:16:01:65:9d:5a:39:ee:89:a3:b8:e5:53:
8b:3b:07:ef:f5:bf:bb:a3:3d:29:05:1f:bf:db:e8:
35:09:f4:30:de:eb:74:c4:e1:7d:82:1e:6f:49:f4:
ee:a2:93:d7:94:94:cc:ca:78:9f:c4:9f:38:ea:b0:
83:e2:fc:47:0a:3d:78:9e:7f:84:ab:9a:7f:94:b4:
f9:4e:3d:ca:d6:26:e0:6c:f3:e5:e3:23:be:da:4d:
87:af:8b:27:d5:51:e3:ae:45:39:62:c1:e2:47:e0:
5d:bf:ca:fb:be:57:47:86:a1:9d:8a:64:37:c3:01:
d4:a8:6c:41:3a:ef:92:89:e1:40:2e:35:4f:49:1b:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C6:37:E2:80:E1:8C:9A:CA:DE:A8:4C:B6:CE:5A:ED:DB:52:E0:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3406562674D411EF9FF4C270762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d0:da:34:f4:57:65:bf:32:d4:bb:4c:02:88:9d:d6:7c:76:
f2:8e:48:bf:6a:97:95:94:08:20:aa:ec:29:b4:0b:ef:90:d7:
0f:19:d5:8b:05:ff:b3:5f:2f:65:90:0f:9d:cf:d0:6c:ac:e2:
cb:e0:23:92:fb:0b:07:c4:47:14:6c:e8:f4:f0:75:f5:c6:25:
03:c6:4c:75:34:e8:04:dd:31:95:70:04:42:3c:0d:1a:69:4c:
25:a0:b6:19:46:4a:00:2b:5f:f4:48:3b:a3:50:90:55:a4:71:
61:36:b6:e2:22:fd:c4:bf:1e:7c:59:47:f4:3e:37:51:4c:4e:
a4:a3:8b:7d:98:7d:70:a4:fc:87:d2:36:ad:9e:6f:e3:07:14:
03:fa:df:6e:15:a7:cb:56:49:e3:9b:b5:d9:a7:26:1d:95:02:
9a:72:2a:06:45:e3:ab:ef:04:61:02:f8:d5:27:a0:04:11:07:
1c:e0:55:fc:8d:61:0e:73:e5:c7:36:e7:70:63:0a:ad:83:6b:
28:85:5e:36:3f:5e:e8:db:a5:d8:52:b2:94:bd:3a:98:ac:67:
45:35:ec:25:b3:70:73:7d:97:31:b2:cf:7f:43:e2:be:c3:d9:
be:6a:79:e9:4d:50:21:ff:dd:ca:d7:fc:f9:6c:c9:dd:1b:89:
71:02:8e:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPBCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDkwNjU5WhcNMjUwODIxMDkwNjU5WjAYMRYw
FAYDVQQDEw02NmU5NDZiNy00MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0epV2y6hf/H/BqPLjnMMrhnl3PKqfTA8zdaVJrRvPV/lu1GPLXyB9hJS
MROaF0gk/CWRg1lc8hgrL8DN9OUSFDE3eJihSVws2gwQ5oPkBGwDfS9X6brqWHPv
5p2NkTWOBlBgvR9i9UUqInylB7GwfzNU+8ZxOhpkCiAWAWWdWjnuiaO45VOLOwfv
9b+7oz0pBR+/2+g1CfQw3ut0xOF9gh5vSfTuopPXlJTMynifxJ846rCD4vxHCj14
nn+Eq5p/lLT5Tj3K1ibgbPPl4yO+2k2Hr4sn1VHjrkU5YsHiR+Bdv8r7vldHhqGd
imQ3wwHUqGxBOu+SieFALjVPSRtTawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNbG
N+KA4Yyayt6oTLbOWu3bUuBpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDA2NTYyNjc0RDQxMUVGOUZGNEMyNzA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtsCMA0GCSqGSIb3DQEB
CwUAA4IBAQB70No09FdlvzLUu0wCiJ3WfHbyjki/apeVlAggquwptAvvkNcPGdWL
Bf+zXy9lkA+dz9BsrOLL4COS+wsHxEcUbOj08HX1xiUDxkx1NOgE3TGVcARCPA0a
aUwloLYZRkoAK1/0SDujUJBVpHFhNrbiIv3Evx58WUf0PjdRTE6ko4t9mH1wpPyH
0jatnm/jBxQD+t9uFafLVknjm7XZpyYdlQKacioGReOr7wRhAvjVJ6AEEQcc4FX8
jWEOc+XHNudwYwqtg2sohV42P17o26XYUrKUvTqYrGdFNewls3BzfZcxss9/Q+K+
w9m+annpTVAh/93K1/z5bMndG4lxAo5k
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org