Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E7D3FC0A7DD11EFA7A1A49E762E951A.roa
File: 3E7D3FC0A7DD11EFA7A1A49E762E951A.roa (raw, json)
Hash identifier: y7Fs3xQZVFN6LRkOM5fj99Bb9YNSVNl2uyjkqNy0fI4=
Subject key identifier: C3:43:04:29:F6:A2:26:84:85:F5:2B:D2:DB:4B:F5:6F:D1:F3:E5:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E7D3FC0A7DD11EFA7A1A49E762E951A.roa
Signing time: Thu 21 Nov 2024 07:50:15 +0000
ROA not before: Thu 21 Nov 2024 07:50:11 +0000
ROA not after: Sun 23 Nov 2025 07:50:11 +0000
asID: 152920
IP address blocks: 154.91.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69602 (0x10fe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 21 07:50:11 2024 GMT
Not After : Nov 23 07:50:11 2025 GMT
Subject: CN=673ee637-3875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:75:53:2f:c4:3c:ef:90:0a:a3:af:73:f2:
dc:e9:bc:19:06:7c:a3:c7:d3:7c:3b:ee:b3:de:2e:
12:68:52:de:42:f8:94:9f:03:b5:8c:95:59:df:da:
ad:fc:fa:52:9b:d0:be:3c:3f:0d:82:43:a2:e0:65:
17:86:48:7d:26:43:f1:8a:61:5b:67:21:9c:4c:2b:
b4:4e:d6:55:b0:0c:a8:90:bb:21:18:d1:f4:25:ab:
a5:9a:37:21:d4:3c:0e:7e:c8:e2:d7:06:b2:77:71:
b9:c5:03:73:c9:10:13:8a:97:68:4b:0f:b2:24:51:
22:80:d0:04:29:d5:19:45:5d:d5:0e:93:7d:31:fe:
38:3f:14:a5:1a:bf:a0:19:72:31:6e:69:d0:d4:99:
42:d5:91:34:cc:56:b2:7e:4c:ce:6c:fa:31:3e:58:
4a:e4:cb:38:38:9c:e3:89:71:43:9f:94:f4:42:d5:
18:1a:a3:bc:a2:8d:de:6e:e0:ed:d7:22:d8:4e:37:
0d:4d:7c:97:5d:c9:7f:14:48:bc:c4:f3:7d:9f:d4:
4d:e4:71:22:e6:a9:86:a7:b9:26:5f:7d:87:31:1c:
30:ad:45:ba:74:45:e4:9d:bb:4c:1a:1d:dc:ae:15:
58:21:25:70:2a:e0:ad:3b:95:f7:09:5b:c3:0e:01:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:04:29:F6:A2:26:84:85:F5:2B:D2:DB:4B:F5:6F:D1:F3:E5:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E7D3FC0A7DD11EFA7A1A49E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.158.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ad:75:81:71:c7:ed:03:76:c5:ef:6f:e5:08:90:02:e0:e7:
10:df:d5:b7:31:08:9e:17:be:32:ac:1c:55:e5:ba:08:21:87:
05:98:65:68:8d:77:69:b2:9d:80:2a:fd:1e:3e:10:e4:03:dc:
52:45:26:95:9c:e1:d6:81:3c:54:ee:35:69:78:1c:e8:1f:4f:
36:0a:34:27:7d:9c:2c:0e:42:24:10:9b:15:5c:f3:e9:36:90:
de:9a:cf:5f:90:8e:2c:3b:b9:7c:ef:47:77:6d:64:6d:a2:3a:
ed:d4:e0:9d:c1:20:5b:b1:4c:22:3c:f8:0a:4d:65:e9:f1:2e:
51:29:39:a9:95:7e:1d:65:ad:9d:83:3a:b3:12:28:68:3b:87:
56:db:f8:d8:8f:f9:be:0d:3c:c8:0d:b8:2f:9e:e0:bf:d0:83:
a6:52:40:e7:eb:73:c9:b8:d2:ef:c8:40:74:ea:64:38:c3:fc:
1c:fc:ff:27:48:73:ba:ba:8f:0c:2e:f5:72:ee:98:c3:33:1c:
96:5b:07:25:af:2b:85:bb:c6:3a:f4:26:11:89:ef:56:29:b9:
80:5b:cb:c8:08:fc:48:2a:51:92:e7:5b:f3:49:8b:e3:37:b5:
dc:fe:cc:15:d7:53:e7:7e:8e:6e:b9:91:5c:84:61:0e:36:f5:
2b:f5:4a:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ/iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIxMDc1MDExWhcNMjUxMTIzMDc1MDExWjAYMRYw
FAYDVQQDEw02NzNlZTYzNy0zODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwMp1Uy/EPO+QCqOvc/Lc6bwZBnyjx9N8O+6z3i4SaFLeQviUnwO1jJVZ
39qt/PpSm9C+PD8NgkOi4GUXhkh9JkPximFbZyGcTCu0TtZVsAyokLshGNH0Jaul
mjch1DwOfsji1wayd3G5xQNzyRATipdoSw+yJFEigNAEKdUZRV3VDpN9Mf44PxSl
Gr+gGXIxbmnQ1JlC1ZE0zFayfkzObPoxPlhK5Ms4OJzjiXFDn5T0QtUYGqO8oo3e
buDt1yLYTjcNTXyXXcl/FEi8xPN9n9RN5HEi5qmGp7kmX32HMRwwrUW6dEXknbtM
Gh3crhVYISVwKuCtO5X3CVvDDgHitwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMND
BCn2oiaEhfUr0ttL9W/R8+U2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRTdEM0ZDMEE3REQxMUVGQTdBMUE0OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlueMA0GCSqGSIb3DQEB
CwUAA4IBAQBkrXWBccftA3bF72/lCJAC4OcQ39W3MQieF74yrBxV5boIIYcFmGVo
jXdpsp2AKv0ePhDkA9xSRSaVnOHWgTxU7jVpeBzoH082CjQnfZwsDkIkEJsVXPPp
NpDems9fkI4sO7l870d3bWRtojrt1OCdwSBbsUwiPPgKTWXp8S5RKTmplX4dZa2d
gzqzEihoO4dW2/jYj/m+DTzIDbgvnuC/0IOmUkDn63PJuNLvyEB06mQ4w/wc/P8n
SHO6uo8MLvVy7pjDMxyWWwclryuFu8Y69CYRie9WKbmAW8vICPxIKlGS51vzSYvj
N7Xc/swV11Pnfo5uuZFchGEONvUr9UqQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org