Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E7AAEB033A411EF9B632A90762E951A.roa
File: 4E7AAEB033A411EF9B632A90762E951A.roa (raw, json)
Hash identifier: i05u6YY9Z+z+d+BXfzXX077niByDohCDWGBadXuaUCY=
Subject key identifier: BA:C2:3C:90:89:2C:19:4E:9E:D5:A9:21:4B:57:4B:58:0A:97:65:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C76E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E7AAEB033A411EF9B632A90762E951A.roa
Signing time: Wed 26 Jun 2024 10:10:26 +0000
ROA not before: Wed 26 Jun 2024 10:10:22 +0000
ROA not after: Mon 30 Dec 2024 10:10:22 +0000
asID: 984
IP address blocks: 154.90.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51054 (0xc76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 10:10:22 2024 GMT
Not After : Dec 30 10:10:22 2024 GMT
Subject: CN=667be912-d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:7c:1e:c0:2e:94:0b:4f:89:80:b9:04:f0:
7b:b4:71:fe:65:86:36:80:45:92:d5:b4:cc:c0:af:
79:74:e3:6c:9d:31:1b:41:a4:dc:f3:b9:06:48:de:
50:35:ab:d0:b5:31:cf:fc:4b:93:d9:fe:87:37:35:
60:8a:7f:74:94:c1:4f:23:7b:e1:c2:f6:dc:d7:6a:
05:b7:e0:a1:15:ce:af:73:e8:f4:20:ec:0a:ea:22:
de:72:b7:87:57:cc:4c:78:92:71:2c:10:9b:7a:29:
b9:8c:1f:81:87:8b:cb:da:cc:2c:f1:93:45:01:53:
1d:19:65:8c:4d:11:99:7b:a0:6c:22:15:69:ba:cf:
a5:fe:22:0a:06:83:2f:75:b8:88:85:df:43:d0:75:
21:30:c3:e9:be:12:31:d0:f0:d4:50:38:ef:0f:d6:
b6:be:92:1e:18:11:4b:d3:6a:39:3b:95:3f:eb:cf:
42:cb:6f:24:43:d0:c1:ad:26:ac:56:42:7d:dd:19:
01:41:99:39:77:05:6a:68:98:d9:43:de:a2:4b:f9:
8a:a1:ee:f2:ba:6b:78:7b:b6:b7:9b:73:96:a9:4a:
63:16:83:c3:cd:d9:a1:27:2f:f7:4e:b1:4f:22:4f:
1c:33:a4:f5:0e:78:49:17:82:fa:5e:f7:0d:94:b3:
e4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:3C:90:89:2C:19:4E:9E:D5:A9:21:4B:57:4B:58:0A:97:65:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E7AAEB033A411EF9B632A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:27:ff:1c:db:40:de:40:b4:a3:12:97:3f:35:cf:73:dd:fd:
95:95:22:91:a1:71:73:dc:82:dd:ca:d3:1d:5a:ae:f7:57:b8:
02:24:6e:a0:93:b6:04:da:d9:c9:da:9a:33:81:58:10:da:1a:
b9:4b:9e:2d:71:ef:ff:09:18:fb:21:b4:66:e9:2a:63:57:48:
fd:81:da:83:5a:be:35:a8:f3:e8:12:0e:cf:53:40:6c:dc:d7:
20:c0:c7:97:26:15:8f:9d:5f:27:d2:dc:db:04:55:d8:ab:3c:
0f:53:fe:c2:ff:aa:a0:24:d2:4e:79:a0:3a:9d:f1:da:5b:0d:
48:ce:2d:00:c2:b9:60:43:6b:1e:d0:1f:56:e8:7e:72:22:44:
7a:8d:50:38:9a:10:65:3e:19:e1:65:57:cf:17:81:fb:ab:7d:
39:01:74:8c:9e:01:74:fa:8a:66:11:d6:88:99:35:3a:e7:e8:
28:16:7f:92:c2:4a:4d:03:f0:3e:77:a6:38:93:81:27:7f:43:
6c:de:a3:65:e0:97:32:c8:e4:fd:4e:ce:06:16:c9:1b:10:ae:
8a:f8:66:5e:b9:d8:9b:71:ea:84:65:44:52:05:bf:bc:47:8b:
20:27:ce:33:2e:71:ae:c6:7d:1d:76:24:81:f7:f9:29:08:19:
a5:9c:ee:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMduMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI2MTAxMDIyWhcNMjQxMjMwMTAxMDIyWjAYMRYw
FAYDVQQDEw02NjdiZTkxMi1kN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3498HsAulAtPiYC5BPB7tHH+ZYY2gEWS1bTMwK95dONsnTEbQaTc87kG
SN5QNavQtTHP/EuT2f6HNzVgin90lMFPI3vhwvbc12oFt+ChFc6vc+j0IOwK6iLe
creHV8xMeJJxLBCbeim5jB+Bh4vL2sws8ZNFAVMdGWWMTRGZe6BsIhVpus+l/iIK
BoMvdbiIhd9D0HUhMMPpvhIx0PDUUDjvD9a2vpIeGBFL02o5O5U/689Cy28kQ9DB
rSasVkJ93RkBQZk5dwVqaJjZQ96iS/mKoe7yumt4e7a3m3OWqUpjFoPDzdmhJy/3
TrFPIk8cM6T1DnhJF4L6XvcNlLPkbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLrC
PJCJLBlOntWpIUtXS1gKl2W5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTdBQUVCMDMzQTQxMUVGOUI2MzJBOTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmlpAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwJ/8c20DeQLSjEpc/Nc9z3f2VlSKRoXFz3ILdytMdWq73V7gCJG6g
k7YE2tnJ2pozgVgQ2hq5S54tce//CRj7IbRm6SpjV0j9gdqDWr41qPPoEg7PU0Bs
3NcgwMeXJhWPnV8n0tzbBFXYqzwPU/7C/6qgJNJOeaA6nfHaWw1Izi0AwrlgQ2se
0B9W6H5yIkR6jVA4mhBlPhnhZVfPF4H7q305AXSMngF0+opmEdaImTU65+goFn+S
wkpNA/A+d6Y4k4Enf0Ns3qNl4JcyyOT9Ts4GFskbEK6K+GZeudibceqEZURSBb+8
R4sgJ84zLnGuxn0ddiSB9/kpCBmlnO45
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org