Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3CE33A5DF811EF9A1E16B0762E951A.roa
File: 3B3CE33A5DF811EF9A1E16B0762E951A.roa (raw, json)
Hash identifier: yn56ufsObflIbx1GABq5w+EwjzqUQ+EMYEvTgOhnGhE=
Subject key identifier: 70:05:B1:F8:BD:E8:5F:51:F6:92:D1:78:77:56:EE:F1:F6:12:64:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E135
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3CE33A5DF811EF9A1E16B0762E951A.roa
Signing time: Mon 19 Aug 2024 06:57:00 +0000
ROA not before: Mon 19 Aug 2024 06:56:56 +0000
ROA not after: Sat 22 Feb 2025 06:56:56 +0000
asID: 28458
IP address blocks: 154.197.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57653 (0xe135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 19 06:56:56 2024 GMT
Not After : Feb 22 06:56:56 2025 GMT
Subject: CN=66c2ecbc-f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:ed:79:7b:cf:aa:15:e4:39:f0:d1:ff:92:
ef:97:4c:6a:3e:f4:5d:70:b1:6f:d4:d2:05:87:8b:
e6:c4:9e:f5:0e:d3:a4:57:7c:cf:19:b2:15:c5:94:
fa:a1:a4:da:a7:1b:ce:96:76:f9:a0:86:07:0d:1e:
61:be:96:51:47:ed:93:64:72:a0:02:c6:8f:fc:8b:
6c:4c:f4:50:d7:0b:80:2d:77:2d:72:3a:4f:be:9a:
8b:5a:0a:17:ff:2b:b8:60:3b:9d:78:e3:2e:25:26:
4a:6a:dd:d0:d2:01:20:c7:a2:7a:0d:0a:ee:b3:03:
0f:b4:2b:f1:a8:75:7e:92:a8:19:c1:de:e0:7c:a9:
25:64:fe:f5:7a:de:65:8e:7e:65:a2:8f:1b:d8:01:
de:22:42:d8:20:a4:e1:41:f1:2f:f8:b7:3d:9d:58:
ac:1d:e5:80:cf:39:a6:d2:99:4b:0e:ed:84:18:7b:
76:07:f5:23:94:b9:30:02:a3:8e:17:ca:af:00:8d:
3f:05:7f:4d:28:6a:f1:20:20:25:77:8b:fd:75:2a:
47:eb:b2:9a:21:d5:b8:1c:66:e3:9e:5c:2c:9c:51:
c8:c5:ed:bc:40:62:d1:13:27:79:1b:49:63:b6:92:
22:a9:02:2a:f3:53:de:1d:5d:ca:10:cf:da:02:a6:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:B1:F8:BD:E8:5F:51:F6:92:D1:78:77:56:EE:F1:F6:12:64:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B3CE33A5DF811EF9A1E16B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.58.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a6:b7:43:dd:77:46:20:67:d7:d6:25:f7:a1:9f:6b:c6:c5:
c1:c5:b5:01:83:97:82:fb:09:a6:6d:f8:eb:30:ee:bd:2a:ec:
08:7f:9c:d9:76:ef:44:de:1e:01:82:62:12:ff:ee:31:39:19:
fa:ed:6f:10:44:e9:a2:b6:b1:f4:2a:01:af:58:de:03:30:6b:
7e:3e:1f:41:91:48:19:f4:f3:97:09:29:d0:65:a3:2b:54:cb:
58:bf:68:f3:56:5e:be:2c:99:bb:9c:c8:f1:1d:26:81:38:17:
d8:5b:3c:75:5e:f9:63:d2:a7:ed:2c:b6:15:94:0f:df:75:c9:
bc:f7:78:9a:63:7d:32:97:54:33:45:0a:fe:50:d0:38:68:a8:
d5:86:57:c2:34:cb:3f:0e:85:53:31:c2:1a:f0:b7:bb:09:29:
21:02:e3:d9:84:d6:93:df:71:cf:d4:72:d3:09:82:ee:3e:cc:
4b:6b:0f:f4:c6:f8:54:1f:13:a7:e0:ad:59:ea:63:29:8a:0d:
07:90:9d:ee:c0:dc:0b:09:d5:a3:b6:e2:00:95:c8:d7:fc:42:
13:22:0e:2f:5f:4d:97:53:73:22:ab:a7:0c:6a:7f:4d:6d:78:
3c:9b:1a:e8:48:10:aa:39:c3:8a:5b:ec:5a:87:bb:5f:6b:29:
1a:e8:20:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOE1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODE5MDY1NjU2WhcNMjUwMjIyMDY1NjU2WjAYMRYw
FAYDVQQDEw02NmMyZWNiYy1mMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwvnteXvPqhXkOfDR/5Lvl0xqPvRdcLFv1NIFh4vmxJ71DtOkV3zPGbIV
xZT6oaTapxvOlnb5oIYHDR5hvpZRR+2TZHKgAsaP/ItsTPRQ1wuALXctcjpPvpqL
WgoX/yu4YDudeOMuJSZKat3Q0gEgx6J6DQruswMPtCvxqHV+kqgZwd7gfKklZP71
et5ljn5loo8b2AHeIkLYIKThQfEv+Lc9nVisHeWAzzmm0plLDu2EGHt2B/UjlLkw
AqOOF8qvAI0/BX9NKGrxICAld4v9dSpH67KaIdW4HGbjnlwsnFHIxe28QGLREyd5
G0ljtpIiqQIq81PeHV3KEM/aAqYacQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHAF
sfi96F9R9pLReHdW7vH2EmTgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQjNDRTMzQTVERjgxMUVGOUExRTE2QjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsU6MA0GCSqGSIb3DQEB
CwUAA4IBAQAQprdD3XdGIGfX1iX3oZ9rxsXBxbUBg5eC+wmmbfjrMO69KuwIf5zZ
du9E3h4BgmIS/+4xORn67W8QROmitrH0KgGvWN4DMGt+Ph9BkUgZ9POXCSnQZaMr
VMtYv2jzVl6+LJm7nMjxHSaBOBfYWzx1Xvlj0qftLLYVlA/fdcm893iaY30yl1Qz
RQr+UNA4aKjVhlfCNMs/DoVTMcIa8Le7CSkhAuPZhNaT33HP1HLTCYLuPsxLaw/0
xvhUHxOn4K1Z6mMpig0HkJ3uwNwLCdWjtuIAlcjX/EITIg4vX02XU3Miq6cMan9N
bXg8mxroSBCqOcOKW+xah7tfayka6CCU
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org