Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DF493D0953211EFB19F395C762E951A.roa
File: 4DF493D0953211EFB19F395C762E951A.roa (raw, json)
Hash identifier: hjDd0AcBit/NKIyX7U9WO+1uwJ1mY/3PQAneTjwgoP8=
Subject key identifier: 2C:E1:E3:D4:38:D6:5B:A1:03:15:AF:2A:0D:F5:D1:77:A8:FF:61:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DF493D0953211EFB19F395C762E951A.roa
Signing time: Mon 28 Oct 2024 13:41:16 +0000
ROA not before: Mon 28 Oct 2024 13:41:12 +0000
ROA not after: Sat 07 Dec 2024 13:41:12 +0000
asID: 272369
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66293 (0x102f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:41:12 2024 GMT
Not After : Dec 7 13:41:12 2024 GMT
Subject: CN=671f947c-3e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:60:b0:35:80:d5:66:76:86:24:d1:44:10:
7b:59:cb:e5:dd:a1:b0:3c:c2:34:ba:c3:c4:9a:cb:
21:fa:04:e4:94:a3:47:ce:cf:cd:a3:75:62:36:e9:
7d:22:e7:55:c1:1b:48:50:3b:48:a1:e1:dc:59:0f:
b8:18:b5:13:a3:4f:64:36:5c:41:44:91:8e:4c:66:
9e:7a:e6:7a:b3:5a:58:c5:b1:c9:2e:a8:00:1b:70:
2e:a1:80:80:ef:db:59:d0:b2:fa:16:5a:43:88:75:
cb:59:e4:94:58:ab:a4:2b:03:26:13:30:d8:dc:e7:
1f:8a:8d:30:85:5c:11:07:ea:e1:32:79:a1:c8:e2:
5f:75:85:37:b6:2d:80:03:1a:29:13:e6:99:38:a8:
68:0a:39:48:6a:33:6a:73:0b:c4:09:67:df:39:3b:
f8:9b:35:e0:4d:0e:ec:d5:6a:9a:89:66:34:b0:78:
e3:5a:06:37:d8:7e:0b:f7:37:63:f8:c0:d4:ad:16:
7d:8f:42:0d:4a:b5:86:fe:b4:02:f0:8a:12:1a:d7:
12:15:86:6a:2c:78:60:71:83:b1:c5:8c:45:d1:0e:
e7:b1:90:04:1b:2d:d5:31:c6:c5:94:ec:06:97:4a:
ea:eb:d6:77:d5:51:a0:9c:cc:65:38:7c:82:98:f2:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E1:E3:D4:38:D6:5B:A1:03:15:AF:2A:0D:F5:D1:77:A8:FF:61:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DF493D0953211EFB19F395C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8d:55:01:78:3e:d2:03:4f:58:21:09:61:18:c6:9d:a3:bd:
a4:66:97:8b:00:0b:66:bb:e6:6f:c1:5d:4a:d6:10:c0:da:58:
80:dc:27:31:fa:10:c4:71:68:7b:22:87:87:51:e6:76:97:94:
49:4d:9e:c2:8c:2d:0e:a7:1e:67:08:96:1d:18:16:2d:cd:27:
08:c2:3e:2c:32:4f:c0:ea:4c:a2:13:c3:cc:b0:02:e1:a1:4e:
36:69:c2:57:60:06:ed:27:97:fb:6f:02:a6:6f:c9:f4:69:04:
83:5c:73:86:9d:35:2b:1b:7a:7b:0c:0e:93:12:2a:49:86:d9:
38:65:33:11:9a:36:96:55:16:28:05:57:a9:ad:44:ea:23:ee:
70:49:82:93:ad:91:a0:58:8f:85:56:12:ab:57:64:2b:d8:52:
dc:e0:54:48:93:09:fe:e2:77:87:36:2d:73:22:87:83:d7:fc:
ce:0e:cb:ba:d6:63:ce:0e:49:27:91:5f:d6:3d:62:bc:44:3e:
6a:93:d8:65:e5:f1:b7:06:5e:49:8d:15:cf:a2:76:88:a9:44:
bb:da:12:94:51:dd:57:01:bd:b0:50:ca:d2:54:6f:1d:a1:f2:
94:56:79:32:f3:e5:8e:4c:89:f1:32:92:48:60:84:1a:dc:df:
cd:d3:4d:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQL1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MTM0MTEyWhcNMjQxMjA3MTM0MTEyWjAYMRYw
FAYDVQQDEw02NzFmOTQ3Yy0zZTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3MRgsDWA1WZ2hiTRRBB7Wcvl3aGwPMI0usPEmssh+gTklKNHzs/No3Vi
Nul9IudVwRtIUDtIoeHcWQ+4GLUTo09kNlxBRJGOTGaeeuZ6s1pYxbHJLqgAG3Au
oYCA79tZ0LL6FlpDiHXLWeSUWKukKwMmEzDY3Ocfio0whVwRB+rhMnmhyOJfdYU3
ti2AAxopE+aZOKhoCjlIajNqcwvECWffOTv4mzXgTQ7s1WqaiWY0sHjjWgY32H4L
9zdj+MDUrRZ9j0INSrWG/rQC8IoSGtcSFYZqLHhgcYOxxYxF0Q7nsZAEGy3VMcbF
lOwGl0rq69Z31VGgnMxlOHyCmPLc0QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCzh
49Q41luhAxWvKg310Xeo/2EvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80REY0OTNEMDk1MzIxMUVGQjE5RjM5NUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI4MA0GCSqGSIb3DQEB
CwUAA4IBAQBojVUBeD7SA09YIQlhGMado72kZpeLAAtmu+ZvwV1K1hDA2liA3Ccx
+hDEcWh7IoeHUeZ2l5RJTZ7CjC0Opx5nCJYdGBYtzScIwj4sMk/A6kyiE8PMsALh
oU42acJXYAbtJ5f7bwKmb8n0aQSDXHOGnTUrG3p7DA6TEipJhtk4ZTMRmjaWVRYo
BVeprUTqI+5wSYKTrZGgWI+FVhKrV2Qr2FLc4FRIkwn+4neHNi1zIoeD1/zODsu6
1mPODkknkV/WPWK8RD5qk9hl5fG3Bl5JjRXPonaIqUS72hKUUd1XAb2wUMrSVG8d
ofKUVnky8+WOTInxMpJIYIQa3N/N002j
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:29 2024 by rpki-client on console-fra.rpki-client.org