Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3462856CA25C11EFBA61B978762E951A.roa
File: 3462856CA25C11EFBA61B978762E951A.roa (raw, json)
Hash identifier: 6QDf1NmlYXcrZeLUgELyJCgik29kUAwgdkK0cbdEFK8=
Subject key identifier: E1:DE:66:F9:EC:3B:0C:23:FB:EB:CD:97:2F:6B:AD:31:74:CC:F2:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3462856CA25C11EFBA61B978762E951A.roa
Signing time: Thu 14 Nov 2024 07:43:57 +0000
ROA not before: Thu 14 Nov 2024 07:43:53 +0000
ROA not after: Tue 10 Dec 2024 07:43:53 +0000
asID: 54252
IP address blocks: 154.201.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68828 (0x10cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:43:53 2024 GMT
Not After : Dec 10 07:43:53 2024 GMT
Subject: CN=6735aa3d-57c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:95:fb:25:55:7a:8f:e5:a2:b2:5a:2c:ff:
cd:ae:b9:4c:57:c0:ae:0e:83:a7:51:8f:22:a4:42:
b5:25:73:82:49:72:f9:6b:ef:76:75:a6:be:d3:3c:
eb:89:29:22:c0:81:04:00:0e:e7:db:f1:8b:18:bf:
0c:4a:c8:93:6d:62:b2:4b:01:f3:4a:5a:1c:55:ba:
67:41:4c:4e:2d:70:63:a2:71:2d:4f:e0:5a:7c:50:
85:2b:60:f3:c9:75:d4:d7:58:ad:86:aa:59:f5:65:
bb:ff:42:92:31:18:f0:5c:05:d8:28:56:18:e4:76:
10:8a:92:05:a8:c4:e1:15:54:5b:4e:a8:fd:77:42:
37:eb:4a:c8:0a:54:91:ba:47:3b:3b:d3:1d:bd:94:
dc:0c:63:f7:58:ca:bc:5e:0f:19:bd:83:bb:3a:cd:
56:e1:ef:65:69:53:d6:02:c5:1d:b2:14:da:fe:da:
3f:2a:14:14:b3:3d:58:47:da:17:b0:06:e9:17:b7:
b1:18:1c:4e:f2:88:38:91:fd:5e:28:c7:89:56:a0:
c5:b4:f1:30:aa:08:a1:f8:f7:25:77:da:e3:d2:8f:
c9:4d:fe:4c:0e:da:c4:85:b0:e5:80:1e:9a:8d:a5:
4b:94:ee:91:17:f1:d0:dd:c1:27:4a:0e:4e:e7:e2:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:66:F9:EC:3B:0C:23:FB:EB:CD:97:2F:6B:AD:31:74:CC:F2:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3462856CA25C11EFBA61B978762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.54.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:f0:c4:71:85:aa:28:78:9d:c3:a3:10:d0:ca:1e:81:40:d6:
01:b6:3f:12:2d:0d:6d:c6:e1:64:f9:1a:3b:52:d6:07:bc:61:
1b:6f:fe:66:65:2f:3b:51:99:ce:75:58:9d:57:fc:65:ca:d0:
57:c4:5f:9a:a7:cd:aa:6e:2f:73:85:b6:d2:2d:b3:80:3d:be:
26:b7:e4:17:30:86:59:95:1e:6b:bf:02:fd:c2:2f:d1:f2:14:
1b:d0:c3:27:bf:49:3a:5b:51:9f:6d:96:1b:01:47:68:c0:a6:
f9:eb:3d:3c:23:08:86:43:8a:50:c2:f4:67:17:62:2e:c3:45:
8a:2f:37:e4:a9:67:88:35:01:5a:d1:0d:07:99:90:0a:94:76:
a6:61:7a:b1:dd:c8:73:51:d2:79:16:79:1c:50:24:cd:6b:e3:
95:6a:0a:dd:12:20:6c:ed:2c:09:c5:d9:8b:34:e2:7e:08:7c:
76:22:24:1e:7c:73:be:43:cf:24:9e:5d:9c:b0:38:f1:3b:6c:
b9:3c:4c:7b:4c:7c:e6:95:86:22:61:98:73:bb:e5:ae:9b:0f:
b7:67:cd:81:7a:66:eb:5c:40:79:1b:0b:52:8c:b6:51:93:e1:
fa:92:b5:18:7d:04:6e:7d:eb:eb:3c:e7:6b:be:7c:f2:27:c6:
60:77:aa:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQzcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE0MDc0MzUzWhcNMjQxMjEwMDc0MzUzWjAYMRYw
FAYDVQQDEw02NzM1YWEzZC01N2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo2mV+yVVeo/lorJaLP/NrrlMV8CuDoOnUY8ipEK1JXOCSXL5a+92daa+
0zzriSkiwIEEAA7n2/GLGL8MSsiTbWKySwHzSlocVbpnQUxOLXBjonEtT+BafFCF
K2DzyXXU11ithqpZ9WW7/0KSMRjwXAXYKFYY5HYQipIFqMThFVRbTqj9d0I360rI
ClSRukc7O9MdvZTcDGP3WMq8Xg8ZvYO7Os1W4e9laVPWAsUdshTa/to/KhQUsz1Y
R9oXsAbpF7exGBxO8og4kf1eKMeJVqDFtPEwqgih+Pcld9rj0o/JTf5MDtrEhbDl
gB6ajaVLlO6RF/HQ3cEnSg5O5+I2lwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOHe
ZvnsOwwj++vNly9rrTF0zPKOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNDYyODU2Q0EyNUMxMUVGQkE2MUI5Nzg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsk2MA0GCSqGSIb3DQEB
CwUAA4IBAQB98MRxhaooeJ3DoxDQyh6BQNYBtj8SLQ1txuFk+Ro7UtYHvGEbb/5m
ZS87UZnOdVidV/xlytBXxF+ap82qbi9zhbbSLbOAPb4mt+QXMIZZlR5rvwL9wi/R
8hQb0MMnv0k6W1GfbZYbAUdowKb56z08IwiGQ4pQwvRnF2Iuw0WKLzfkqWeINQFa
0Q0HmZAKlHamYXqx3chzUdJ5FnkcUCTNa+OVagrdEiBs7SwJxdmLNOJ+CHx2IiQe
fHO+Q88knl2csDjxO2y5PEx7THzmlYYiYZhzu+Wumw+3Z82BembrXEB5GwtSjLZR
k+H6krUYfQRufevrPOdrvnzyJ8Zgd6ot
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:00 2024 by rpki-client on console-ams.rpki-client.org