Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0045F89A9211EFA54BEA47762E951A.roa
File: 3A0045F89A9211EFA54BEA47762E951A.roa (raw, json)
Hash identifier: Hu2nq3Y3wJuC5CROJrC3SW0tclwT3VCi5LtPnIhMv7M=
Subject key identifier: 7C:D6:C6:A3:7C:30:28:6E:B8:EF:43:5A:71:54:67:25:E2:34:54:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010678
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0045F89A9211EFA54BEA47762E951A.roa
Signing time: Mon 04 Nov 2024 09:50:30 +0000
ROA not before: Mon 04 Nov 2024 09:50:26 +0000
ROA not after: Sun 04 May 2025 09:50:26 +0000
asID: 134687
IP address blocks: 154.89.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67192 (0x10678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 09:50:26 2024 GMT
Not After : May 4 09:50:26 2025 GMT
Subject: CN=672898e6-d9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:dd:af:0a:a1:85:61:4f:6b:f3:86:a0:23:
41:67:d5:07:b9:78:0d:f1:fa:59:69:4c:11:36:0c:
bf:cc:ec:a9:45:9a:5f:9e:2f:96:6d:f7:95:57:92:
fd:dc:68:a1:01:3f:b0:f8:73:33:07:f3:2c:ec:d9:
f1:3e:03:7e:8f:4c:d8:69:c6:2f:87:0b:6b:26:1b:
70:16:15:f4:85:27:0b:41:6c:e5:3d:49:6f:05:17:
31:68:3d:7f:9d:c4:0a:3f:75:d2:eb:02:a7:17:bc:
5a:c2:ca:a0:c8:a2:36:b6:93:ca:79:1b:aa:08:31:
92:0d:0c:cf:2e:54:3d:5f:68:54:14:4b:0e:a4:0c:
c4:4c:15:8f:2d:60:ed:92:10:e6:f0:70:3a:eb:bc:
04:9a:dc:c2:56:dd:c6:6d:6d:a3:93:71:5c:6d:9c:
4d:88:39:98:eb:a2:63:e0:d4:fe:84:33:97:84:f1:
95:fc:35:9f:1a:6e:fa:a4:df:6a:2c:60:74:72:6a:
73:73:2f:a5:e9:ec:0e:59:74:03:1b:32:89:b3:73:
f5:bd:80:c5:1b:19:8f:31:c5:d9:a0:28:d8:ce:fc:
0c:d8:e3:82:64:d5:8c:b3:e7:4d:60:95:62:5c:1e:
eb:39:bd:f9:13:b4:f3:4f:c5:0a:c0:46:32:fc:6f:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:C6:A3:7C:30:28:6E:B8:EF:43:5A:71:54:67:25:E2:34:54:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0045F89A9211EFA54BEA47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.12.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:0a:65:d9:12:1a:4c:4e:19:c0:f7:c7:f1:41:bb:ac:ac:cf:
46:a3:8b:f0:92:6a:c0:46:00:97:b6:de:ca:ce:f3:a6:a5:91:
09:93:8f:9a:00:0f:62:7e:7e:81:38:3a:2e:7f:d6:64:2d:29:
74:5f:6a:43:35:eb:11:40:c3:bb:9f:4f:12:7b:d0:e6:1d:43:
04:1a:74:47:9e:4b:1b:53:83:3c:04:a8:be:e3:4e:ef:f7:5a:
32:2d:87:2e:69:79:71:dc:6b:c3:c5:88:98:a3:4d:b1:9a:29:
fb:ec:e6:2e:5f:89:27:6b:2e:de:ff:ec:1c:7c:ae:13:6e:f6:
3e:5e:ca:ac:e4:1c:96:16:73:52:6e:f9:ea:9f:6d:f1:59:0f:
83:24:d4:01:18:89:94:28:e9:44:84:9a:d9:3b:f1:d8:39:7e:
a5:51:80:0d:1a:52:2f:cc:3e:38:e4:53:f9:67:84:2a:b3:3b:
67:d6:fe:14:63:be:01:5a:c7:12:37:eb:a2:d9:a5:35:cb:26:
94:f1:64:a4:4c:2a:d0:18:18:11:fa:38:82:d1:20:f3:8b:e2:
ca:5b:40:73:3e:1f:df:22:9f:d8:09:c6:64:36:61:8f:ed:da:
06:a8:a5:7e:ba:ed:ee:7d:fc:ae:9f:de:67:e6:43:06:60:f9:
17:96:fd:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQZ4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA0MDk1MDI2WhcNMjUwNTA0MDk1MDI2WjAYMRYw
FAYDVQQDEw02NzI4OThlNi1kOWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxuTdrwqhhWFPa/OGoCNBZ9UHuXgN8fpZaUwRNgy/zOypRZpfni+WbfeV
V5L93GihAT+w+HMzB/Ms7NnxPgN+j0zYacYvhwtrJhtwFhX0hScLQWzlPUlvBRcx
aD1/ncQKP3XS6wKnF7xawsqgyKI2tpPKeRuqCDGSDQzPLlQ9X2hUFEsOpAzETBWP
LWDtkhDm8HA667wEmtzCVt3GbW2jk3FcbZxNiDmY66Jj4NT+hDOXhPGV/DWfGm76
pN9qLGB0cmpzcy+l6ewOWXQDGzKJs3P1vYDFGxmPMcXZoCjYzvwM2OOCZNWMs+dN
YJViXB7rOb35E7TzT8UKwEYy/G/M1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHzW
xqN8MChuuO9DWnFUZyXiNFSWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQTAwNDVGODlBOTIxMUVGQTU0QkVBNDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlkMMA0GCSqGSIb3DQEB
CwUAA4IBAQCtCmXZEhpMThnA98fxQbusrM9Go4vwkmrARgCXtt7KzvOmpZEJk4+a
AA9ifn6BODouf9ZkLSl0X2pDNesRQMO7n08Se9DmHUMEGnRHnksbU4M8BKi+407v
91oyLYcuaXlx3GvDxYiYo02xmin77OYuX4knay7e/+wcfK4TbvY+Xsqs5ByWFnNS
bvnqn23xWQ+DJNQBGImUKOlEhJrZO/HYOX6lUYANGlIvzD445FP5Z4Qqsztn1v4U
Y74BWscSN+ui2aU1yyaU8WSkTCrQGBgR+jiC0SDzi+LKW0BzPh/fIp/YCcZkNmGP
7doGqKV+uu3uffyun95n5kMGYPkXlv3N
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org