Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43C49A0A92DE11EF849DC2AD762E951A.roa
File: 43C49A0A92DE11EF849DC2AD762E951A.roa (raw, json)
Hash identifier: 9ttTT3YIEZzxI7KPGSUzcPnDkeA77eyB9pOKYKwLqm8=
Subject key identifier: 66:39:B3:64:7C:A7:4F:90:39:16:2A:1F:93:BA:16:F2:98:82:41:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010238
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43C49A0A92DE11EF849DC2AD762E951A.roa
Signing time: Fri 25 Oct 2024 14:34:39 +0000
ROA not before: Fri 25 Oct 2024 14:34:34 +0000
ROA not after: Sun 01 Dec 2024 14:34:34 +0000
asID: 48031
IP address blocks: 154.218.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66104 (0x10238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:34:34 2024 GMT
Not After : Dec 1 14:34:34 2024 GMT
Subject: CN=671bac7f-c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:9f:c7:c6:eb:9f:8a:38:5e:6c:ab:74:ec:
07:13:e0:5f:8e:32:8b:a5:ab:c6:57:be:36:f5:84:
ad:ba:97:f4:87:29:4b:cc:ca:35:71:9b:e0:8a:14:
65:5e:cd:9f:a8:16:3d:7f:b8:5d:79:d4:c4:28:4d:
1a:92:6a:d8:a8:be:fa:40:7e:2c:42:cc:c8:36:df:
cb:05:f2:64:90:61:eb:70:dd:bc:ed:14:c6:9f:28:
d7:75:57:a8:d7:b2:b2:22:dd:10:9f:f9:cd:26:35:
5b:81:ae:fa:93:70:6e:46:c0:ed:f4:40:cc:89:e5:
ca:8d:ea:c8:e3:d7:f1:c3:e0:c4:b9:af:7a:46:25:
50:6f:e5:3c:96:d0:6a:82:4e:d2:32:10:85:78:79:
09:b1:b5:1a:94:91:87:3a:46:38:c5:ad:92:c8:bc:
6c:3b:ee:16:0a:42:5a:58:cb:62:94:93:5a:ec:79:
03:de:34:a6:2c:dc:7d:f9:28:1d:1d:7f:92:5a:47:
32:1e:7a:aa:46:3e:47:b3:98:bb:13:0e:b9:44:a2:
d3:ca:2c:96:8f:b9:14:dd:15:c2:d6:35:cd:83:18:
28:21:82:88:39:c9:ef:29:b3:63:8e:ce:54:e0:1f:
57:ea:f2:67:b3:96:ed:c7:ea:3f:d4:b9:7e:05:cd:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:39:B3:64:7C:A7:4F:90:39:16:2A:1F:93:BA:16:F2:98:82:41:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43C49A0A92DE11EF849DC2AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.1.0/24
Signature Algorithm: sha256WithRSAEncryption
84:43:f3:ac:fc:65:be:3e:06:07:12:f7:b8:72:46:3f:e0:88:
3d:1e:d0:19:0b:31:ac:d0:ec:bd:a7:af:42:1c:da:bd:3c:74:
28:a7:0d:c2:d0:ad:ad:fd:a7:2c:fd:27:54:15:65:32:a8:f3:
c7:73:d8:7c:d5:e7:17:98:6a:29:86:62:9e:7d:ee:8b:83:b5:
5d:0c:83:23:84:30:d1:ae:c2:8d:a9:b1:ca:a3:af:d4:a7:69:
0b:31:e9:02:42:75:0d:e0:c0:7f:8c:0e:49:8a:d9:ca:93:38:
4a:9f:93:34:14:55:b4:6c:e3:83:ed:af:c8:09:df:5d:5e:60:
7c:07:b4:55:a8:b9:19:ea:49:e4:a4:45:ec:11:cf:eb:ce:92:
b8:4e:85:9c:99:7b:c3:30:5d:2e:35:34:b7:fd:4c:9c:83:88:
f5:f0:9c:7e:12:2a:29:c1:50:f4:63:8a:86:7b:02:f4:6d:e8:
b2:ed:bd:48:fe:4f:26:22:f3:30:49:be:c8:7e:0c:8d:c4:a6:
d1:e9:24:05:05:2b:97:fd:eb:7a:9d:99:cd:c6:e9:62:98:17:
f2:37:37:ee:a1:01:0c:eb:92:91:39:52:63:c8:4b:1b:44:d2:
9e:23:cf:fb:4c:2f:48:8d:16:5f:6f:2c:ea:90:cb:bd:60:06:
bc:46:83:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQI4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MTQzNDM0WhcNMjQxMjAxMTQzNDM0WjAYMRYw
FAYDVQQDEw02NzFiYWM3Zi1jNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxrKfx8brn4o4XmyrdOwHE+BfjjKLpavGV7429YStupf0hylLzMo1cZvg
ihRlXs2fqBY9f7hdedTEKE0akmrYqL76QH4sQszINt/LBfJkkGHrcN287RTGnyjX
dVeo17KyIt0Qn/nNJjVbga76k3BuRsDt9EDMieXKjerI49fxw+DEua96RiVQb+U8
ltBqgk7SMhCFeHkJsbUalJGHOkY4xa2SyLxsO+4WCkJaWMtilJNa7HkD3jSmLNx9
+SgdHX+SWkcyHnqqRj5Hs5i7Ew65RKLTyiyWj7kU3RXC1jXNgxgoIYKIOcnvKbNj
js5U4B9X6vJns5btx+o/1Ll+Bc3FawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGY5
s2R8p0+QORYqH5O6FvKYgkEGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80M0M0OUEwQTkyREUxMUVGODQ5REMyQUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoBMA0GCSqGSIb3DQEB
CwUAA4IBAQCEQ/Os/GW+PgYHEve4ckY/4Ig9HtAZCzGs0Oy9p69CHNq9PHQopw3C
0K2t/acs/SdUFWUyqPPHc9h81ecXmGophmKefe6Lg7VdDIMjhDDRrsKNqbHKo6/U
p2kLMekCQnUN4MB/jA5JitnKkzhKn5M0FFW0bOOD7a/ICd9dXmB8B7RVqLkZ6knk
pEXsEc/rzpK4ToWcmXvDMF0uNTS3/Uycg4j18Jx+EiopwVD0Y4qGewL0beiy7b1I
/k8mIvMwSb7IfgyNxKbR6SQFBSuX/et6nZnNxulimBfyNzfuoQEM65KROVJjyEsb
RNKeI8/7TC9IjRZfbyzqkMu9YAa8RoNo
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org