Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A8C7807B1D11EFAE2CCF86762E951A.roa
File: 35A8C7807B1D11EFAE2CCF86762E951A.roa (raw, json)
Hash identifier: ize/fXLjaF/SXQazeV6z2jn6UdkFqNNizugaKloAdtw=
Subject key identifier: D7:D0:EA:93:2A:75:3E:F9:E0:F6:33:50:AC:E9:54:BD:56:E9:DA:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F31C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A8C7807B1D11EFAE2CCF86762E951A.roa
Signing time: Wed 25 Sep 2024 09:04:46 +0000
ROA not before: Wed 25 Sep 2024 09:04:42 +0000
ROA not after: Wed 18 Dec 2024 09:04:42 +0000
asID: 328608
IP address blocks: 154.214.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62236 (0xf31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:04:42 2024 GMT
Not After : Dec 18 09:04:42 2024 GMT
Subject: CN=66f3d22e-d470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:a0:d2:52:5e:bc:f0:60:b8:52:f1:30:f1:
f1:b2:0a:db:82:9a:5a:12:50:e5:20:3c:ed:61:97:
a3:07:d4:59:62:6a:49:b5:c7:02:00:23:07:cf:46:
15:04:ef:8e:29:4c:47:ad:8d:fb:e6:e1:47:bb:42:
12:66:a5:b0:e6:43:28:38:84:e0:c7:7b:91:00:31:
1b:23:ca:67:3f:21:7c:dd:f5:ba:47:64:2f:5d:40:
be:cc:e9:72:98:47:b5:04:09:45:e1:8b:64:55:6b:
cd:66:cf:61:17:75:f2:8b:17:a8:4c:a4:81:f9:7e:
ca:72:3a:0e:3f:46:ea:be:6a:bd:d1:95:6a:d7:c6:
45:88:d4:5a:ca:48:54:5a:b8:9f:c9:43:94:10:1b:
3c:09:57:7f:16:77:f7:56:a0:07:17:5f:78:59:88:
06:06:c0:e7:08:cb:74:92:36:51:5c:b4:cb:c0:ab:
b7:f7:b9:7b:5d:4b:2d:d1:88:4e:d4:bc:94:1a:10:
0c:e5:b1:6b:5a:39:4c:c7:ce:5a:35:a2:cd:8a:91:
21:e5:44:10:2f:9f:a5:c3:30:48:c4:bd:8f:5b:58:
49:ab:7e:52:ac:1d:53:50:45:50:5f:43:bc:28:b9:
72:0e:c0:a0:0c:c4:0f:fd:0e:19:59:42:6d:6d:9c:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:EA:93:2A:75:3E:F9:E0:F6:33:50:AC:E9:54:BD:56:E9:DA:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35A8C7807B1D11EFAE2CCF86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:06:d6:d4:55:5c:9e:99:f6:73:9c:69:ee:8a:af:8b:34:03:
8a:e5:c8:46:8b:f9:75:a9:a2:dd:25:3a:71:c4:f2:4e:52:3b:
31:5b:dd:2d:e2:a0:9f:43:fb:09:36:52:ce:6e:14:aa:59:c7:
e1:5f:07:d7:cd:24:1a:48:d1:13:b2:bd:73:bf:12:93:fd:dc:
d4:5c:06:fd:fc:43:59:0f:a0:7c:78:bd:e1:49:b3:50:0a:db:
87:ac:1a:7e:2b:ca:0e:24:4a:8b:3c:1e:bb:01:9c:ae:30:dd:
1b:84:b6:be:55:4e:a0:7d:a4:16:0b:5a:98:61:08:51:75:ba:
14:f3:32:81:34:e9:5c:57:35:f1:cf:91:b2:da:db:c8:a0:3d:
9c:9d:61:d1:94:c2:19:2e:76:d9:8e:fe:05:ab:89:ee:24:09:
74:c2:42:21:ea:8d:37:94:1a:5f:b7:fa:3a:52:dd:c3:db:db:
2b:b5:59:b3:85:e4:4f:cd:d7:2a:a6:a5:2b:52:55:c5:e6:76:
e0:04:bc:de:b6:ec:1c:19:9a:95:d4:05:10:79:2c:d9:1d:df:
19:44:13:3c:9d:d7:8b:a1:8e:d5:cc:6f:35:97:a4:05:07:c4:
85:f4:32:66:5f:a0:d6:bd:68:a1:59:0e:d8:ed:98:59:55:7f:
52:85:8b:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPMcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTI1MDkwNDQyWhcNMjQxMjE4MDkwNDQyWjAYMRYw
FAYDVQQDEw02NmYzZDIyZS1kNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Xqg0lJevPBguFLxMPHxsgrbgppaElDlIDztYZejB9RZYmpJtccCACMH
z0YVBO+OKUxHrY375uFHu0ISZqWw5kMoOITgx3uRADEbI8pnPyF83fW6R2QvXUC+
zOlymEe1BAlF4YtkVWvNZs9hF3XyixeoTKSB+X7KcjoOP0bqvmq90ZVq18ZFiNRa
ykhUWrifyUOUEBs8CVd/Fnf3VqAHF194WYgGBsDnCMt0kjZRXLTLwKu397l7XUst
0YhO1LyUGhAM5bFrWjlMx85aNaLNipEh5UQQL5+lwzBIxL2PW1hJq35SrB1TUEVQ
X0O8KLlyDsCgDMQP/Q4ZWUJtbZzO/wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNfQ
6pMqdT754PYzUKzpVL1W6dqKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNUE4Qzc4MDdCMUQxMUVGQUUyQ0NGODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbEMA0GCSqGSIb3DQEB
CwUAA4IBAQB+BtbUVVyemfZznGnuiq+LNAOK5chGi/l1qaLdJTpxxPJOUjsxW90t
4qCfQ/sJNlLObhSqWcfhXwfXzSQaSNETsr1zvxKT/dzUXAb9/ENZD6B8eL3hSbNQ
CtuHrBp+K8oOJEqLPB67AZyuMN0bhLa+VU6gfaQWC1qYYQhRdboU8zKBNOlcVzXx
z5Gy2tvIoD2cnWHRlMIZLnbZjv4Fq4nuJAl0wkIh6o03lBpft/o6Ut3D29srtVmz
heRPzdcqpqUrUlXF5nbgBLzetuwcGZqV1AUQeSzZHd8ZRBM8ndeLoY7VzG81l6QF
B8SF9DJmX6DWvWihWQ7Y7ZhZVX9ShYuw
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:03 2024 by rpki-client on console-fra.rpki-client.org