Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EEC9158950F11EF978D9182762E951A.roa
File: 3EEC9158950F11EF978D9182762E951A.roa (raw, json)
Hash identifier: b4pCerfJ6D4YWweXb1Koom12HtMLDxByRuRCtYyIQYQ=
Subject key identifier: D8:EF:E7:1B:50:0E:0D:2D:23:CE:94:60:5D:33:0B:58:ED:FF:7E:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EEC9158950F11EF978D9182762E951A.roa
Signing time: Mon 28 Oct 2024 09:30:19 +0000
ROA not before: Mon 28 Oct 2024 09:30:15 +0000
ROA not after: Wed 27 Nov 2024 09:30:15 +0000
asID: 44559
IP address blocks: 154.203.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66233 (0x102b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:30:15 2024 GMT
Not After : Nov 27 09:30:15 2024 GMT
Subject: CN=671f59aa-3a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:5f:43:5c:32:26:25:67:96:7b:95:c7:42:
9d:9f:71:7a:c0:81:7b:bc:40:76:06:f7:f7:9e:23:
ad:c4:9c:f9:04:d3:cc:6b:67:99:3e:35:fa:51:8a:
4b:10:53:5d:2a:b5:9a:49:12:f8:19:28:a3:66:6b:
17:71:2e:de:05:6a:d2:1e:46:ea:ad:2a:92:c4:6d:
3c:3d:d0:88:d5:19:fa:97:11:03:96:69:28:1f:91:
0c:15:88:a4:28:2b:9b:d3:80:2e:68:c9:78:a8:86:
5e:3a:85:2a:81:da:97:db:40:7a:bf:3c:bb:ba:cc:
af:7d:96:49:88:97:0c:59:b8:64:47:08:88:dd:c4:
58:f7:f6:57:66:3e:5a:f8:89:9c:7d:01:1c:9a:36:
99:40:93:54:ee:3d:e1:d8:ca:47:67:9c:6e:c9:10:
48:e7:9c:e3:7a:a7:a2:8c:bf:37:ef:5e:ff:a6:e0:
b4:73:6f:f4:c4:23:de:65:6a:81:29:cf:ab:05:0f:
0e:0f:90:02:b6:c1:aa:a3:9d:d7:b9:d4:33:41:85:
89:c3:6d:4a:85:d9:a3:22:f1:25:dd:70:f5:70:28:
00:2e:0c:bd:d8:0d:1e:5d:1a:81:05:c6:59:9c:14:
dc:06:a4:50:0a:f7:54:d6:a6:d6:7b:d9:2d:36:65:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:E7:1B:50:0E:0D:2D:23:CE:94:60:5D:33:0B:58:ED:FF:7E:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EEC9158950F11EF978D9182762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:01:73:c0:4c:2e:c8:ba:94:fa:15:2e:28:fc:33:20:b0:98:
e1:18:6d:ad:66:8a:0e:9e:12:e4:0a:a7:24:b6:39:f0:8d:20:
7c:0f:b0:14:0f:b0:09:53:b9:50:e4:a0:ef:ce:c6:dd:b2:74:
6c:0d:d7:bc:51:f2:a9:49:0f:f7:06:de:08:12:aa:37:77:f2:
b4:d9:cd:aa:6a:8e:13:7b:bf:f1:3b:68:8e:9f:5c:bf:9c:0c:
e0:66:af:23:33:fb:30:06:c8:9b:4e:c1:b2:a4:66:2d:66:24:
54:19:5c:65:79:bc:0f:cc:5d:9f:31:0c:b4:52:ec:30:c7:1c:
35:51:02:14:2e:c8:d8:a4:3c:bf:96:15:52:07:9b:94:ee:d4:
56:ce:ef:8b:ff:9c:d0:fd:57:15:0c:21:d6:01:1b:0f:ae:25:
54:6b:ab:d5:7d:1d:71:2c:e0:35:db:78:07:ba:81:20:e5:5e:
a0:28:ec:97:18:4c:45:72:7d:e8:bd:c7:6b:fa:c2:62:b1:27:
15:06:62:d7:e0:48:4b:ca:f8:ec:74:b7:4d:60:58:16:c7:47:
96:fc:f6:54:d8:3b:5c:21:97:64:16:b7:27:0d:11:6a:69:0b:
66:cc:10:31:88:f5:7b:6b:2b:56:4b:84:ae:21:36:e3:90:6f:
c6:7e:77:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQK5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MDkzMDE1WhcNMjQxMTI3MDkzMDE1WjAYMRYw
FAYDVQQDEw02NzFmNTlhYS0zYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvutfQ1wyJiVnlnuVx0Kdn3F6wIF7vEB2Bvf3niOtxJz5BNPMa2eZPjX6
UYpLEFNdKrWaSRL4GSijZmsXcS7eBWrSHkbqrSqSxG08PdCI1Rn6lxEDlmkoH5EM
FYikKCub04AuaMl4qIZeOoUqgdqX20B6vzy7usyvfZZJiJcMWbhkRwiI3cRY9/ZX
Zj5a+ImcfQEcmjaZQJNU7j3h2MpHZ5xuyRBI55zjeqeijL83717/puC0c2/0xCPe
ZWqBKc+rBQ8OD5ACtsGqo53XudQzQYWJw21KhdmjIvEl3XD1cCgALgy92A0eXRqB
BcZZnBTcBqRQCvdU1qbWe9ktNmWROwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNjv
5xtQDg0tI86UYF0zC1jt/36ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zRUVDOTE1ODk1MEYxMUVGOTc4RDkxODI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsvOMA0GCSqGSIb3DQEB
CwUAA4IBAQCOAXPATC7IupT6FS4o/DMgsJjhGG2tZooOnhLkCqcktjnwjSB8D7AU
D7AJU7lQ5KDvzsbdsnRsDde8UfKpSQ/3Bt4IEqo3d/K02c2qao4Te7/xO2iOn1y/
nAzgZq8jM/swBsibTsGypGYtZiRUGVxlebwPzF2fMQy0Uuwwxxw1UQIULsjYpDy/
lhVSB5uU7tRWzu+L/5zQ/VcVDCHWARsPriVUa6vVfR1xLOA123gHuoEg5V6gKOyX
GExFcn3ovcdr+sJisScVBmLX4EhLyvjsdLdNYFgWx0eW/PZU2DtcIZdkFrcnDRFq
aQtmzBAxiPV7aytWS4SuITbjkG/Gfnfz
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:04 2024 by rpki-client on console-fra.rpki-client.org