Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/438A2A7432B611EFA6D41C8D762E951A.roa
File: 438A2A7432B611EFA6D41C8D762E951A.roa (raw, json)
Hash identifier: dcxec8GhUQnkSHsUmjogCJ5dxae1DieSoSNavTTboXU=
Subject key identifier: CB:5A:E3:3F:D6:41:B5:EC:8F:3F:38:48:EC:7B:1D:FB:29:C0:C1:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C631
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/438A2A7432B611EFA6D41C8D762E951A.roa
Signing time: Tue 25 Jun 2024 05:46:27 +0000
ROA not before: Tue 25 Jun 2024 05:46:24 +0000
ROA not after: Fri 03 Jan 2025 05:46:24 +0000
asID: 40065
IP address blocks: 154.198.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50737 (0xc631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 05:46:24 2024 GMT
Not After : Jan 3 05:46:24 2025 GMT
Subject: CN=667a59b3-cee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:fc:65:f7:29:bd:cd:d4:82:b5:f1:78:f7:
3e:68:49:9a:1c:af:23:fb:83:c3:fc:6d:92:1e:0c:
75:bc:c6:5f:6e:b4:d5:ec:73:f8:3b:31:2b:45:44:
d8:64:e7:30:70:47:af:64:26:ff:50:dd:4a:3c:ea:
96:6b:13:ab:6f:dd:0a:06:4b:88:53:ab:6a:ce:42:
e7:c0:3d:49:fd:f1:d4:de:62:85:85:7b:2c:53:4b:
92:99:68:73:86:7f:e3:00:6b:6d:be:a6:73:86:8c:
8d:a9:ef:8d:4e:00:f3:44:44:e5:ae:65:f0:39:d8:
0c:f6:9d:26:da:94:ce:c5:73:31:25:e7:6c:0a:ee:
a1:f3:6f:00:49:2d:91:d7:ec:44:cd:b4:b9:c8:67:
50:2d:91:e9:48:4f:b4:0b:c0:bc:8d:7b:a7:2c:cb:
14:2d:18:18:7e:44:78:8e:e8:ee:b2:3b:75:0e:47:
ac:7b:eb:40:e6:f7:eb:fb:59:8e:8e:ea:a4:e6:73:
2c:bb:bb:69:df:83:ff:6e:74:53:1f:cc:31:4e:d9:
0d:f7:b3:24:bc:d1:c6:54:13:89:c0:cf:cd:85:17:
37:10:ab:d8:d3:f7:d6:bb:92:03:3f:52:c2:07:19:
22:03:01:fd:24:7f:a6:d4:2c:94:5a:cc:d3:7c:15:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:E3:3F:D6:41:B5:EC:8F:3F:38:48:EC:7B:1D:FB:29:C0:C1:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/438A2A7432B611EFA6D41C8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.192.0/18
Signature Algorithm: sha256WithRSAEncryption
d2:27:8d:32:0b:a6:af:aa:83:a3:68:31:7f:9f:fb:39:9e:cd:
37:3b:7e:5e:98:bb:df:56:5e:3a:83:5e:99:fb:d4:ec:22:8f:
b2:e8:86:ff:27:5e:ae:3f:35:2a:80:11:e4:1d:26:fe:45:2d:
a1:cd:17:22:a2:e2:fa:92:6a:fa:bd:0e:e0:e2:b5:6b:a3:69:
38:91:72:10:e9:1a:f3:cd:68:89:f9:90:9b:56:ea:ae:e6:a7:
ad:fe:8f:8f:92:06:d8:b0:bc:f0:e2:3c:66:d8:60:41:9c:50:
0a:4f:73:3e:f2:34:39:1a:3f:fa:be:23:75:0a:99:bc:40:d3:
be:c6:8a:21:83:9f:33:a2:fa:cf:8e:09:25:c5:3e:c0:5e:32:
13:4c:cd:f7:39:0e:fc:38:8e:5f:e6:69:57:41:89:ca:ca:67:
2c:7e:fd:c9:ec:66:08:fe:41:1e:d8:da:66:04:8a:3d:fe:a0:
e0:a6:7d:6e:6f:56:c9:2c:10:66:aa:19:1b:4e:83:7c:02:d6:
12:d5:9c:6d:46:87:b4:fa:f4:58:25:d4:63:d2:ff:64:26:30:
39:87:57:13:4a:4f:9e:6e:4c:0a:48:b7:1b:64:03:72:e2:db:
03:e8:e5:61:ce:18:97:09:24:57:33:1e:4d:a5:3a:bc:be:7b:
24:82:71:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMYxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI1MDU0NjI0WhcNMjUwMTAzMDU0NjI0WjAYMRYw
FAYDVQQDEw02NjdhNTliMy1jZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApI/8Zfcpvc3UgrXxePc+aEmaHK8j+4PD/G2SHgx1vMZfbrTV7HP4OzEr
RUTYZOcwcEevZCb/UN1KPOqWaxOrb90KBkuIU6tqzkLnwD1J/fHU3mKFhXssU0uS
mWhzhn/jAGttvqZzhoyNqe+NTgDzRETlrmXwOdgM9p0m2pTOxXMxJedsCu6h828A
SS2R1+xEzbS5yGdQLZHpSE+0C8C8jXunLMsULRgYfkR4jujusjt1Dkese+tA5vfr
+1mOjuqk5nMsu7tp34P/bnRTH8wxTtkN97MkvNHGVBOJwM/NhRc3EKvY0/fWu5ID
P1LCBxkiAwH9JH+m1CyUWszTfBVfEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMta
4z/WQbXsjz84SOx7HfspwMHAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MzhBMkE3NDMyQjYxMUVGQTZENDFDOEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsbAMA0GCSqGSIb3DQEB
CwUAA4IBAQDSJ40yC6avqoOjaDF/n/s5ns03O35emLvfVl46g16Z+9TsIo+y6Ib/
J16uPzUqgBHkHSb+RS2hzRciouL6kmr6vQ7g4rVro2k4kXIQ6RrzzWiJ+ZCbVuqu
5qet/o+PkgbYsLzw4jxm2GBBnFAKT3M+8jQ5Gj/6viN1Cpm8QNO+xoohg58zovrP
jgklxT7AXjITTM33OQ78OI5f5mlXQYnKymcsfv3J7GYI/kEe2NpmBIo9/qDgpn1u
b1bJLBBmqhkbToN8AtYS1ZxtRoe0+vRYJdRj0v9kJjA5h1cTSk+ebkwKSLcbZANy
4tsD6OVhzhiXCSRXMx5NpTq8vnskgnEI
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:06 2024 by rpki-client on console-ams.rpki-client.org