Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/497B6C4C8F8911EF9FC7DBB7762E951A.roa
File: 497B6C4C8F8911EF9FC7DBB7762E951A.roa (raw, json)
Hash identifier: PwMKjX/pENXEE1xtR+1olfTdMQ5XEBRiqTa5yUv+tPc=
Subject key identifier: 7E:5D:C0:95:CA:19:32:6A:BE:A0:E3:14:8B:21:A9:DF:17:75:C9:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010036
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/497B6C4C8F8911EF9FC7DBB7762E951A.roa
Signing time: Mon 21 Oct 2024 08:48:48 +0000
ROA not before: Mon 21 Oct 2024 08:48:44 +0000
ROA not after: Sun 24 Nov 2024 08:48:44 +0000
asID: 147176
IP address blocks: 154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65590 (0x10036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 21 08:48:44 2024 GMT
Not After : Nov 24 08:48:44 2024 GMT
Subject: CN=67161570-1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:13:23:a4:dc:cc:fd:b8:d5:19:a3:6d:c3:
7c:77:be:43:41:87:14:45:5a:28:50:e2:6f:92:bf:
83:56:52:4d:bf:36:d3:7b:34:dd:8e:cf:6d:48:4c:
66:ab:c5:42:90:cc:c6:f4:1e:f2:58:3e:a9:bd:ac:
ad:98:a9:14:f3:1f:5f:7a:8f:49:e4:fc:29:fb:a3:
97:09:3e:80:75:5b:bb:ea:5e:65:f9:9b:ae:64:b2:
4b:1f:02:d7:48:a5:d9:48:69:11:9b:a3:5b:c1:40:
40:51:9c:d0:a7:7e:6d:ac:d7:fd:8e:66:16:a9:2c:
dc:c8:4a:61:82:06:b7:00:c2:df:cd:b7:b9:c7:50:
19:77:32:25:45:85:9a:f4:46:fe:c1:dc:de:4f:2a:
9f:a9:d1:fe:22:19:d0:4b:00:e9:5a:e6:53:74:9c:
6a:fc:d8:fc:f4:2b:2c:7d:3c:2d:c7:5c:a9:78:dd:
d1:b0:fd:88:42:06:bf:71:51:4b:c8:5e:12:51:27:
16:a9:7c:85:0b:86:19:98:b7:63:11:47:b4:aa:56:
0c:3a:2d:74:35:9a:2c:ae:14:50:6f:e7:f9:ee:b3:
35:db:1f:ad:48:e4:52:8c:0c:2d:e9:93:a0:7d:d4:
61:fc:66:96:c5:ce:cb:d2:c3:39:3d:48:80:e3:f6:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:C0:95:CA:19:32:6A:BE:A0:E3:14:8B:21:A9:DF:17:75:C9:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/497B6C4C8F8911EF9FC7DBB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:65:2e:06:e5:f1:c4:9c:78:6f:1d:56:43:dd:22:b4:ad:23:
4d:5b:fb:13:da:43:2b:2d:a3:a5:93:82:16:19:d0:64:0f:86:
38:17:76:11:48:fa:fa:33:bd:87:eb:91:d5:27:9c:f3:f2:b4:
83:5a:a5:4f:2a:ac:1f:bd:9a:63:15:27:42:a7:f1:60:9c:69:
d1:08:99:7f:9d:61:b7:ac:6c:9a:ef:e1:1e:bc:6d:ed:bb:c5:
f4:0b:ba:09:8a:f7:06:97:d1:1e:ad:d4:ab:f2:f7:57:73:cf:
00:86:4a:38:37:a9:35:ac:1a:87:a8:5f:cd:27:fb:91:9b:26:
f9:2d:e7:bc:cd:5a:46:fe:5e:78:c4:9a:fa:23:9a:09:7f:29:
1c:a8:e1:f8:e7:09:6d:91:89:26:d1:e0:98:03:9a:20:a5:af:
fc:c1:e4:b2:7b:40:b8:b3:b2:d8:d8:7d:51:8d:0a:a6:77:c4:
bf:56:eb:6c:52:82:58:eb:fc:6c:1d:2e:19:04:8b:a6:2c:db:
c5:23:1d:51:4d:40:6b:a7:e5:02:63:56:0b:7e:36:b2:1c:86:
d9:75:d2:f4:4e:5e:c3:35:38:f9:58:70:8e:7b:a0:58:12:2b:
db:4f:25:14:62:1b:1e:57:09:4b:a0:4e:04:a4:e4:de:49:b4:
9f:3a:94:3a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQA2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIxMDg0ODQ0WhcNMjQxMTI0MDg0ODQ0WjAYMRYw
FAYDVQQDEw02NzE2MTU3MC0xMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtAMTI6TczP241RmjbcN8d75DQYcURVooUOJvkr+DVlJNvzbTezTdjs9t
SExmq8VCkMzG9B7yWD6pvaytmKkU8x9feo9J5Pwp+6OXCT6AdVu76l5l+ZuuZLJL
HwLXSKXZSGkRm6NbwUBAUZzQp35trNf9jmYWqSzcyEphgga3AMLfzbe5x1AZdzIl
RYWa9Eb+wdzeTyqfqdH+IhnQSwDpWuZTdJxq/Nj89CssfTwtx1ypeN3RsP2IQga/
cVFLyF4SUScWqXyFC4YZmLdjEUe0qlYMOi10NZosrhRQb+f57rM12x+tSORSjAwt
6ZOgfdRh/GaWxc7L0sM5PUiA4/YLEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH5d
wJXKGTJqvqDjFIshqd8XdcnrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80OTdCNkM0QzhGODkxMUVGOUZDN0RCQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtcOMA0GCSqGSIb3DQEB
CwUAA4IBAQBrZS4G5fHEnHhvHVZD3SK0rSNNW/sT2kMrLaOlk4IWGdBkD4Y4F3YR
SPr6M72H65HVJ5zz8rSDWqVPKqwfvZpjFSdCp/FgnGnRCJl/nWG3rGya7+EevG3t
u8X0C7oJivcGl9EerdSr8vdXc88Ahko4N6k1rBqHqF/NJ/uRmyb5Lee8zVpG/l54
xJr6I5oJfykcqOH45wltkYkm0eCYA5ogpa/8weSye0C4s7LY2H1RjQqmd8S/Vuts
UoJY6/xsHS4ZBIumLNvFIx1RTUBrp+UCY1YLfjayHIbZddL0Tl7DNTj5WHCOe6BY
EivbTyUUYhseVwlLoE4EpOTeSbSfOpQ6
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:05 2024 by rpki-client on console-fra.rpki-client.org