Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EE04476A0D911EF8A8CD14E762E951A.roa
File: 4EE04476A0D911EF8A8CD14E762E951A.roa (raw, json)
Hash identifier: WV+vxxVfHs3+id2mKV3i6L1HCRPIqWxBe4Ye7JAPBKw=
Subject key identifier: 38:2D:11:94:47:F2:6C:E8:F2:89:E1:69:32:86:B3:B3:0D:2C:0D:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EE04476A0D911EF8A8CD14E762E951A.roa
Signing time: Tue 12 Nov 2024 09:34:26 +0000
ROA not before: Tue 12 Nov 2024 09:34:23 +0000
ROA not after: Sat 07 Dec 2024 09:34:23 +0000
asID: 138915
IP address blocks: 154.223.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68636 (0x10c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:34:23 2024 GMT
Not After : Dec 7 09:34:23 2024 GMT
Subject: CN=67332122-b9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:62:da:5f:99:3e:c5:09:1f:83:43:36:d6:
08:51:62:f9:26:3e:2f:21:8d:79:35:c7:11:a8:55:
9a:fc:bc:9e:b5:56:9c:45:14:bb:d0:17:2a:f0:cc:
67:27:8b:ff:de:21:ae:39:18:d4:5b:37:2b:ec:9b:
45:3e:30:3b:7c:93:4a:be:80:09:99:c8:30:e2:24:
36:79:a4:ef:8d:63:dd:ff:aa:5b:04:4f:f2:23:76:
0a:93:48:86:cd:e6:7e:6b:49:74:73:cb:c2:29:00:
0c:9d:42:98:36:ba:10:98:ba:f7:02:92:94:54:c1:
64:9c:14:a1:19:fd:33:14:d0:98:63:b9:1a:08:9e:
16:ba:70:24:51:43:0e:18:14:07:6f:dc:0f:2f:b9:
2c:7a:26:fe:ba:3a:52:11:6f:40:9a:a6:65:d8:72:
8f:6c:ee:51:3a:11:f0:b6:42:0d:3b:69:fe:eb:5b:
76:92:c7:9d:64:f3:25:18:5f:93:a4:0d:57:9c:e4:
a9:b9:a9:c7:d3:c2:fa:8b:48:16:d5:ea:ab:3d:78:
0a:b1:f5:a6:ff:db:c3:03:95:d1:a7:9e:a9:cb:b7:
ce:bb:2a:6c:4a:d4:14:fc:ce:44:f1:a2:d4:0f:03:
5d:d6:26:42:5d:c8:90:e5:52:2b:5e:d8:12:5b:c5:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:11:94:47:F2:6C:E8:F2:89:E1:69:32:86:B3:B3:0D:2C:0D:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EE04476A0D911EF8A8CD14E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.51.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:db:bd:c5:8a:3a:b7:56:14:f4:79:58:15:cf:c7:6a:b3:9d:
fe:b5:1a:4b:60:e7:fa:c2:81:30:f7:dc:dd:99:8c:80:5b:85:
e4:f4:73:8d:74:a1:37:82:a2:f7:bb:59:03:cc:7f:37:0d:2e:
4e:0e:d2:49:48:b5:10:2a:ff:86:c4:55:a0:38:06:91:72:b9:
3a:b0:61:77:a4:e4:fe:12:b8:ec:3a:ad:38:60:28:7b:69:2e:
db:c8:10:87:5b:de:4b:b1:7a:48:c2:e1:75:4e:33:0c:b4:27:
8b:b0:07:01:0d:c2:25:ee:f0:ed:7f:b5:bf:43:8e:7a:16:68:
82:89:97:fa:6e:55:b9:53:54:51:63:5d:c8:c3:98:97:21:50:
ea:4f:a0:09:2d:42:91:22:98:bd:cb:a4:5f:89:7b:3e:5a:c7:
91:9f:77:b4:b8:7d:79:ab:fb:a1:fa:97:4e:1f:50:27:db:35:
08:4b:cb:43:db:04:9e:d8:14:ba:5b:3d:9e:74:fe:08:e6:26:
61:84:ca:c0:f9:09:1d:bf:f9:4a:46:37:76:c2:02:8b:a6:0e:
57:99:04:8a:68:f4:c9:3e:f3:35:50:8c:17:58:4a:60:ae:45:
e7:10:d9:29:14:6a:e5:6f:1b:e3:ae:72:05:b5:d5:ee:4f:de:
20:e2:fc:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQwcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEyMDkzNDIzWhcNMjQxMjA3MDkzNDIzWjAYMRYw
FAYDVQQDEw02NzMzMjEyMi1iOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4VBi2l+ZPsUJH4NDNtYIUWL5Jj4vIY15NccRqFWa/LyetVacRRS70Bcq
8MxnJ4v/3iGuORjUWzcr7JtFPjA7fJNKvoAJmcgw4iQ2eaTvjWPd/6pbBE/yI3YK
k0iGzeZ+a0l0c8vCKQAMnUKYNroQmLr3ApKUVMFknBShGf0zFNCYY7kaCJ4WunAk
UUMOGBQHb9wPL7kseib+ujpSEW9AmqZl2HKPbO5ROhHwtkINO2n+61t2ksedZPMl
GF+TpA1XnOSpuanH08L6i0gW1eqrPXgKsfWm/9vDA5XRp56py7fOuypsStQU/M5E
8aLUDwNd1iZCXciQ5VIrXtgSW8Vg9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDgt
EZRH8mzo8onhaTKGs7MNLA34MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RUUwNDQ3NkEwRDkxMUVGOEE4Q0QxNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8zMA0GCSqGSIb3DQEB
CwUAA4IBAQC8273Fijq3VhT0eVgVz8dqs53+tRpLYOf6woEw99zdmYyAW4Xk9HON
dKE3gqL3u1kDzH83DS5ODtJJSLUQKv+GxFWgOAaRcrk6sGF3pOT+ErjsOq04YCh7
aS7byBCHW95LsXpIwuF1TjMMtCeLsAcBDcIl7vDtf7W/Q456FmiCiZf6blW5U1RR
Y13Iw5iXIVDqT6AJLUKRIpi9y6RfiXs+WseRn3e0uH15q/uh+pdOH1An2zUIS8tD
2wSe2BS6Wz2edP4I5iZhhMrA+Qkdv/lKRjd2wgKLpg5XmQSKaPTJPvM1UIwXWEpg
rkXnENkpFGrlbxvjrnIFtdXuT94g4vw7
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:09 2024 by rpki-client on console-ams.rpki-client.org