Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40E30B46A19D11EF84066F4B762E951A.roa
File: 40E30B46A19D11EF84066F4B762E951A.roa (raw, json)
Hash identifier: kgK4emH0GbMJbPERqAxmh/gAOKv8HAlk3coeLm1q2cg=
Subject key identifier: 99:43:6D:4D:04:77:C7:40:9F:37:E6:F8:ED:50:80:90:8F:8B:92:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40E30B46A19D11EF84066F4B762E951A.roa
Signing time: Wed 13 Nov 2024 08:57:04 +0000
ROA not before: Wed 13 Nov 2024 08:57:01 +0000
ROA not after: Sat 23 Nov 2024 08:57:01 +0000
asID: 142062
IP address blocks: 154.212.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68811 (0x10ccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:57:01 2024 GMT
Not After : Nov 23 08:57:01 2024 GMT
Subject: CN=673469e0-0713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:28:12:e9:e8:38:ca:4d:be:f5:00:98:7d:
bf:3a:35:aa:2e:0c:f4:73:12:cf:0d:30:43:95:66:
23:6d:3b:30:74:ed:3c:31:1e:c1:d6:4d:99:d0:6f:
d9:57:09:32:32:e9:5d:40:ae:21:9b:8f:da:97:3f:
72:cf:b4:57:61:9a:c0:20:d0:98:27:87:83:aa:d4:
90:3e:93:c7:72:dc:78:49:c6:07:53:56:62:15:f6:
87:f4:f6:03:12:a5:f4:0d:67:f1:48:a8:9b:f3:ae:
b5:f2:fb:8a:99:b8:93:7f:b8:c3:c9:ce:3d:12:a2:
82:99:b7:b9:26:7a:bd:b2:b1:9a:d9:d5:2a:2a:6d:
24:e3:f4:47:ee:3e:f4:fd:65:e1:5f:96:2b:f4:e7:
d9:18:94:29:03:f5:15:67:7a:df:4f:bd:71:69:20:
d5:8f:6b:ee:57:fc:86:57:d4:76:6f:64:62:85:05:
7b:8e:cd:34:1a:b6:78:ac:32:11:52:3e:f4:0d:53:
f8:f8:8c:b1:48:1c:4f:e3:0c:3a:8b:6a:ad:f1:e3:
ef:54:97:c7:11:77:11:8b:06:86:fb:67:bd:32:79:
a6:a3:8d:47:5c:a8:83:06:38:c9:41:77:22:3d:e9:
65:24:d5:36:8b:b6:01:21:60:2e:45:d4:04:95:0d:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:6D:4D:04:77:C7:40:9F:37:E6:F8:ED:50:80:90:8F:8B:92:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40E30B46A19D11EF84066F4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.154.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:36:ae:84:01:33:19:84:69:2c:e1:51:bf:78:c4:33:b0:52:
69:dd:16:eb:04:06:23:0a:53:d1:71:d0:7d:8b:85:10:ef:99:
b6:66:48:15:15:14:fe:4b:c6:1e:38:4d:12:ff:04:5c:d8:62:
e1:9a:75:08:1c:a2:ab:21:0b:c2:aa:73:d0:07:42:8a:fe:1b:
63:8c:de:68:ad:51:a2:e2:32:57:ee:0e:4c:84:d4:60:92:19:
1b:0b:92:25:d1:fe:59:bd:fd:cc:45:fb:66:d0:e2:85:02:2f:
b8:92:44:2e:85:40:38:a8:44:8c:0e:d3:06:66:0b:79:b5:a0:
15:e8:93:72:2c:11:cc:ad:3b:27:25:e5:5f:e1:e1:94:9a:51:
6a:a5:5f:a3:3a:b4:26:6f:c9:99:75:2b:a9:09:9e:45:a6:12:
28:80:96:20:6c:33:a8:75:4b:9c:11:16:f8:34:fe:a4:ed:2b:
5e:ff:b7:89:f5:6e:e4:b1:46:bd:99:c8:0d:8c:2e:b2:3e:ea:
2c:06:e2:f4:79:83:7a:55:87:7a:fa:5b:9a:f8:9c:4f:b8:35:
0c:49:df:72:0c:f2:c9:4e:50:de:37:b2:55:4d:6e:78:ed:a9:
0a:19:da:e0:8c:eb:f8:5e:e4:50:78:72:f0:c8:0f:02:96:0e:
fb:69:94:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQzLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEzMDg1NzAxWhcNMjQxMTIzMDg1NzAxWjAYMRYw
FAYDVQQDEw02NzM0NjllMC0wNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxYIoEunoOMpNvvUAmH2/OjWqLgz0cxLPDTBDlWYjbTswdO08MR7B1k2Z
0G/ZVwkyMuldQK4hm4/alz9yz7RXYZrAINCYJ4eDqtSQPpPHctx4ScYHU1ZiFfaH
9PYDEqX0DWfxSKib86618vuKmbiTf7jDyc49EqKCmbe5Jnq9srGa2dUqKm0k4/RH
7j70/WXhX5Yr9OfZGJQpA/UVZ3rfT71xaSDVj2vuV/yGV9R2b2RihQV7js00GrZ4
rDIRUj70DVP4+IyxSBxP4ww6i2qt8ePvVJfHEXcRiwaG+2e9Mnmmo41HXKiDBjjJ
QXciPellJNU2i7YBIWAuRdQElQ3odQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJlD
bU0Ed8dAnzfm+O1QgJCPi5JoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MEUzMEI0NkExOUQxMUVGODQwNjZGNEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtSaMA0GCSqGSIb3DQEB
CwUAA4IBAQC/Nq6EATMZhGks4VG/eMQzsFJp3RbrBAYjClPRcdB9i4UQ75m2ZkgV
FRT+S8YeOE0S/wRc2GLhmnUIHKKrIQvCqnPQB0KK/htjjN5orVGi4jJX7g5MhNRg
khkbC5Il0f5Zvf3MRftm0OKFAi+4kkQuhUA4qESMDtMGZgt5taAV6JNyLBHMrTsn
JeVf4eGUmlFqpV+jOrQmb8mZdSupCZ5FphIogJYgbDOodUucERb4NP6k7Ste/7eJ
9W7ksUa9mcgNjC6yPuosBuL0eYN6VYd6+lua+JxPuDUMSd9yDPLJTlDeN7JVTW54
7akKGdrgjOv4XuRQeHLwyA8Clg77aZSA
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org