Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40E4DE949C1B11EFB5CE4478762E951A.roa
File: 40E4DE949C1B11EFB5CE4478762E951A.roa (raw, json)
Hash identifier: 8yNbggwGAb13y5rWIZE1ytQuOrbLH9OlphrlOLJCCEs=
Subject key identifier: 88:04:4F:EE:0D:36:23:B9:7D:C1:2D:C0:85:AA:99:D5:5E:88:9B:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010860
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40E4DE949C1B11EFB5CE4478762E951A.roa
Signing time: Wed 06 Nov 2024 08:43:54 +0000
ROA not before: Wed 06 Nov 2024 08:43:50 +0000
ROA not after: Mon 30 Dec 2024 08:43:50 +0000
asID: 138915
IP address blocks: 154.93.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67680 (0x10860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 08:43:50 2024 GMT
Not After : Dec 30 08:43:50 2024 GMT
Subject: CN=672b2c4a-f3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:8e:c3:3c:dd:d4:43:ea:be:d0:09:ad:71:
5d:3a:2c:45:95:27:5f:67:47:bf:42:55:41:a8:60:
f4:08:67:1c:20:e1:92:76:81:1e:a8:e0:e3:ce:2f:
63:e6:d2:be:d5:bf:95:ed:b0:15:d3:20:06:23:35:
f1:c8:69:32:92:e4:72:47:d1:cd:4f:9f:37:6b:7a:
56:d3:f2:83:4c:d8:99:d0:95:a9:27:d4:43:50:34:
d2:c9:23:8e:0d:f4:49:45:2e:da:59:83:3b:c8:c1:
0b:65:00:1f:3c:62:fe:a4:ec:33:92:41:cc:88:69:
a3:0a:50:ee:6c:72:78:73:9a:66:47:3a:b8:ff:07:
3c:5c:79:39:60:c0:88:83:23:d2:95:27:3b:a4:23:
26:2f:cf:51:b1:a2:fa:dd:c1:02:39:c5:7b:3e:2e:
7e:3b:7b:60:1f:f6:38:16:74:1a:7d:86:99:fa:db:
03:ec:c8:72:e7:7b:74:ee:8d:7e:24:3b:92:3f:55:
c2:f8:c5:13:a0:65:57:48:e4:49:30:42:7b:24:24:
2a:a7:fc:37:f6:30:b9:5b:b6:a2:8a:34:61:08:d6:
fb:d8:6a:54:9d:d6:6c:4e:42:21:88:b3:fc:ba:26:
d9:00:91:75:7b:19:83:34:f1:15:ff:8a:75:64:d7:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:4F:EE:0D:36:23:B9:7D:C1:2D:C0:85:AA:99:D5:5E:88:9B:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40E4DE949C1B11EFB5CE4478762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:71:03:f4:4d:2c:b4:1d:d9:ae:7f:03:7e:2e:9e:02:69:9b:
d7:d4:da:25:02:55:d7:4f:96:7e:cb:e4:7e:f8:e6:d6:94:ef:
14:51:7b:5f:59:2f:1c:c3:e6:72:a4:31:1d:b7:5c:8f:4b:24:
9e:8f:5a:88:3f:5d:b7:ba:f8:a1:6b:03:11:5b:06:5d:32:d6:
35:ef:01:da:1c:05:c9:cc:27:ad:7d:48:8d:79:e5:65:b6:78:
e3:b2:3e:92:db:51:db:d9:49:97:41:d6:51:20:b6:43:dd:ab:
c7:f4:74:71:5c:f4:6f:c7:68:42:1a:ed:e5:01:2d:c9:3b:6a:
c1:b1:68:92:9a:3a:ea:df:f7:eb:69:35:a6:00:00:4c:d8:a9:
fc:43:d4:16:d6:04:07:4c:1c:0a:22:3f:7b:fe:e7:18:38:16:
de:9b:f3:1c:b2:92:66:43:9b:40:6a:d7:2b:68:ba:13:3a:dc:
15:6c:79:c7:52:3c:bb:95:0b:cf:56:d9:cf:22:9b:44:0d:f9:
4e:7a:1f:fc:fb:99:99:a1:f3:d8:e4:2c:eb:09:67:c1:de:26:
8a:a6:1e:f6:bd:ac:b1:be:df:c7:5a:b5:9c:d3:81:2f:ac:0c:
f9:ee:45:1b:95:29:b2:32:b2:69:63:11:8c:ea:fe:80:87:ce:
0c:08:ae:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQhgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA2MDg0MzUwWhcNMjQxMjMwMDg0MzUwWjAYMRYw
FAYDVQQDEw02NzJiMmM0YS1mM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv8qOwzzd1EPqvtAJrXFdOixFlSdfZ0e/QlVBqGD0CGccIOGSdoEeqODj
zi9j5tK+1b+V7bAV0yAGIzXxyGkykuRyR9HNT583a3pW0/KDTNiZ0JWpJ9RDUDTS
ySOODfRJRS7aWYM7yMELZQAfPGL+pOwzkkHMiGmjClDubHJ4c5pmRzq4/wc8XHk5
YMCIgyPSlSc7pCMmL89RsaL63cECOcV7Pi5+O3tgH/Y4FnQafYaZ+tsD7Mhy53t0
7o1+JDuSP1XC+MUToGVXSORJMEJ7JCQqp/w39jC5W7aiijRhCNb72GpUndZsTkIh
iLP8uibZAJF1exmDNPEV/4p1ZNdM0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIgE
T+4NNiO5fcEtwIWqmdVeiJtjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MEU0REU5NDlDMUIxMUVGQjVDRTQ0Nzg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCml1gMA0GCSqGSIb3DQEB
CwUAA4IBAQB/cQP0TSy0HdmufwN+Lp4CaZvX1NolAlXXT5Z+y+R++ObWlO8UUXtf
WS8cw+ZypDEdt1yPSySej1qIP123uvihawMRWwZdMtY17wHaHAXJzCetfUiNeeVl
tnjjsj6S21Hb2UmXQdZRILZD3avH9HRxXPRvx2hCGu3lAS3JO2rBsWiSmjrq3/fr
aTWmAABM2Kn8Q9QW1gQHTBwKIj97/ucYOBbem/McspJmQ5tAatcraLoTOtwVbHnH
Ujy7lQvPVtnPIptEDflOeh/8+5mZofPY5CzrCWfB3iaKph72vayxvt/HWrWc04Ev
rAz57kUblSmyMrJpYxGM6v6Ah84MCK77
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:06 2024 by rpki-client on console-ams.rpki-client.org