Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1B94DEA19611EF8CF5F09D762E951A.roa
File: 3E1B94DEA19611EF8CF5F09D762E951A.roa (raw, json)
Hash identifier: DsNIkgMBJ9v72CIFbunAtwqS+NmQ7j/wTm75SMDfgoY=
Subject key identifier: AA:44:F4:18:D9:72:73:F8:66:C5:39:41:39:AA:EB:25:87:D0:49:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1B94DEA19611EF8CF5F09D762E951A.roa
Signing time: Wed 13 Nov 2024 08:06:53 +0000
ROA not before: Wed 13 Nov 2024 08:06:49 +0000
ROA not after: Sat 07 Dec 2024 08:06:49 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68783 (0x10caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:06:49 2024 GMT
Not After : Dec 7 08:06:49 2024 GMT
Subject: CN=67345e1d-3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:2a:2f:3c:17:46:9f:c8:ae:06:2a:fb:af:
5b:cf:7c:2e:d8:b0:e8:e3:1a:e1:ee:14:cc:a0:d7:
60:fc:cb:03:2b:33:95:40:2d:cd:d4:89:a2:ce:bc:
88:85:51:79:71:73:36:77:92:bd:bf:73:91:c0:95:
3f:fb:97:13:9e:d2:f1:ca:1e:51:ef:5f:99:64:75:
c5:db:fc:66:ce:94:d4:b9:3d:d3:63:1f:08:31:73:
ea:2c:74:a2:df:13:4e:71:cc:db:e6:2f:f5:9e:bc:
e5:40:b4:51:a2:18:e2:71:1e:7b:d5:eb:ed:ff:20:
87:b9:01:61:5b:66:c8:c0:9d:0d:4d:48:5e:29:6e:
f9:8b:5d:68:12:45:34:cc:cc:f4:38:13:01:eb:8e:
0c:9a:9a:22:0c:f2:7a:69:ab:03:6a:61:b9:6f:9b:
2e:41:67:a6:50:3e:6a:6b:f9:d9:34:7e:a2:b7:b1:
18:85:f9:3f:a2:48:de:68:b8:2b:ff:2c:f4:ac:02:
81:ca:47:b9:aa:6c:cc:6f:ef:25:1b:a0:bb:6c:70:
65:1c:30:4e:fe:fd:21:fb:d6:e2:f1:e0:cc:35:72:
d1:9b:c3:a4:03:27:fa:db:2f:9e:0e:e5:e2:55:b5:
7a:6a:a3:d9:ca:38:1b:b9:25:a5:58:cc:cc:a9:4b:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:44:F4:18:D9:72:73:F8:66:C5:39:41:39:AA:EB:25:87:D0:49:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1B94DEA19611EF8CF5F09D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fb:c4:a0:50:5a:33:f5:02:33:31:f2:15:c2:53:ae:a0:e7:
e3:c7:f6:fb:f6:9c:43:4d:4f:b6:47:7f:e8:16:fe:2c:d5:17:
25:b9:bb:fe:1d:87:cf:bc:ce:d0:6a:2b:ed:19:e2:8b:d5:c0:
be:86:43:f1:40:9a:e1:a0:d2:53:87:d5:7d:b0:f0:0b:44:ca:
89:8e:58:87:86:dd:a4:7b:2b:ff:f2:9b:60:dd:f3:85:c6:48:
a0:71:9b:0c:05:89:f2:fb:cb:55:4f:61:54:29:a0:fb:d2:87:
30:f8:57:7c:ec:f1:8d:8e:59:39:11:0d:1b:6d:61:85:05:e5:
8c:65:92:b7:d4:d4:e1:76:9e:89:af:76:b4:51:76:7f:33:24:
b7:8e:f9:4d:0d:aa:8b:67:45:17:19:22:4c:8f:fe:24:3a:c6:
7c:ba:8e:94:ce:53:1d:0d:a6:09:64:0b:0c:04:8a:76:75:51:
5b:d4:a1:c1:29:63:5c:9d:e2:ed:a6:fc:3b:26:6f:43:cc:2b:
f9:c3:d2:09:5b:e0:7f:7f:0b:31:6c:84:6c:85:61:5e:90:d6:
70:19:1a:12:c6:8f:f0:f5:9c:f5:62:53:28:c4:da:0a:dd:24:
66:4e:9a:26:31:18:3b:cc:09:4c:67:33:92:57:e4:96:c5:4a:
32:ac:d7:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQyvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEzMDgwNjQ5WhcNMjQxMjA3MDgwNjQ5WjAYMRYw
FAYDVQQDEw02NzM0NWUxZC0zYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmGoqLzwXRp/IrgYq+69bz3wu2LDo4xrh7hTMoNdg/MsDKzOVQC3N1Imi
zryIhVF5cXM2d5K9v3ORwJU/+5cTntLxyh5R71+ZZHXF2/xmzpTUuT3TYx8IMXPq
LHSi3xNOcczb5i/1nrzlQLRRohjicR571evt/yCHuQFhW2bIwJ0NTUheKW75i11o
EkU0zMz0OBMB644MmpoiDPJ6aasDamG5b5suQWemUD5qa/nZNH6it7EYhfk/okje
aLgr/yz0rAKByke5qmzMb+8lG6C7bHBlHDBO/v0h+9bi8eDMNXLRm8OkAyf62y+e
DuXiVbV6aqPZyjgbuSWlWMzMqUvynQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKpE
9BjZcnP4ZsU5QTmq6yWH0ElTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRTFCOTRERUExOTYxMUVGOENGNUYwOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt9BMA0GCSqGSIb3DQEB
CwUAA4IBAQCB+8SgUFoz9QIzMfIVwlOuoOfjx/b79pxDTU+2R3/oFv4s1Rclubv+
HYfPvM7QaivtGeKL1cC+hkPxQJrhoNJTh9V9sPALRMqJjliHht2keyv/8ptg3fOF
xkigcZsMBYny+8tVT2FUKaD70ocw+Fd87PGNjlk5EQ0bbWGFBeWMZZK31NThdp6J
r3a0UXZ/MyS3jvlNDaqLZ0UXGSJMj/4kOsZ8uo6UzlMdDaYJZAsMBIp2dVFb1KHB
KWNcneLtpvw7Jm9DzCv5w9IJW+B/fwsxbIRshWFekNZwGRoSxo/w9Zz1YlMoxNoK
3SRmTpomMRg7zAlMZzOSV+SWxUoyrNd5
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:27 2024 by rpki-client on console-fra.rpki-client.org