Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54202640A8EA11EF80BC8BB6762E951A.roa
File: 54202640A8EA11EF80BC8BB6762E951A.roa (raw, json)
Hash identifier: EOqavqLPTPG3cjTv8RlnA7trAmN4nhqH7fBJ9ouY3rw=
Subject key identifier: CA:A3:EE:4C:DE:E1:8D:E9:C0:DC:FE:06:2D:E8:3D:BE:AF:61:84:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011103
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54202640A8EA11EF80BC8BB6762E951A.roa
Signing time: Fri 22 Nov 2024 15:56:26 +0000
ROA not before: Fri 22 Nov 2024 15:56:22 +0000
ROA not after: Tue 03 Dec 2024 15:56:22 +0000
asID: 62240
IP address blocks: 154.195.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69891 (0x11103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:56:22 2024 GMT
Not After : Dec 3 15:56:22 2024 GMT
Subject: CN=6740a9aa-5f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:cb:b3:c2:71:94:dc:ca:ce:26:75:c9:79:
33:63:80:67:19:75:c8:97:3b:de:63:28:cf:0c:95:
2b:f8:13:4e:dc:17:49:d2:3b:83:cd:c3:f0:de:15:
88:1b:5b:8f:b2:92:ca:7f:a7:9e:7a:aa:de:ef:1a:
1c:50:ea:26:c7:ff:db:55:c9:0a:5e:a8:69:66:0d:
4e:a5:97:6b:fb:3e:80:a1:24:a8:e4:a2:93:4f:49:
6a:ce:cc:33:74:43:53:9d:9a:13:2f:27:df:c2:80:
94:cb:39:93:52:36:06:07:01:41:df:20:68:f1:be:
2e:88:d3:cf:5b:bd:04:55:b1:72:f4:6a:d6:08:a0:
47:bf:c1:95:a2:25:fc:0f:ef:5f:f1:43:d1:47:37:
e2:d9:d6:e0:c8:db:4c:8c:22:d2:8b:41:75:ea:6d:
ac:9e:71:ba:aa:d9:f5:24:8b:69:bd:59:3c:89:20:
75:8c:07:23:65:5b:7f:bd:1d:d4:0e:83:36:92:89:
72:37:27:f8:fe:45:ab:32:e9:05:65:b1:17:57:8b:
c9:d1:6b:ad:99:b0:eb:50:6e:04:12:8f:99:a5:9b:
07:6a:b2:42:0e:2b:4d:13:1e:db:82:9c:f9:56:fd:
cb:a7:f8:1f:a1:bd:46:17:ac:1c:d9:8a:2d:9a:bc:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:EE:4C:DE:E1:8D:E9:C0:DC:FE:06:2D:E8:3D:BE:AF:61:84:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54202640A8EA11EF80BC8BB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:82:6d:aa:d6:59:67:05:6f:58:ee:90:2f:93:c4:a1:c3:23:
04:57:5b:e4:5f:50:a1:be:23:a0:a6:04:1a:9b:2a:f7:a4:56:
dd:b7:be:cd:63:14:e1:fb:60:5b:01:50:3a:f1:7f:a1:48:61:
47:c4:cb:fd:93:d7:bf:43:93:5e:2d:6f:c2:4c:96:68:80:00:
05:7b:31:b2:5f:3c:05:69:14:3f:81:89:20:3b:86:d8:24:2d:
be:0a:35:88:20:3f:4b:b5:1d:30:b3:30:02:5b:a2:a5:f4:20:
dd:83:25:0b:47:a8:51:5d:bc:72:91:3d:24:26:03:5e:a1:ac:
68:45:a6:09:19:5f:8b:82:97:c3:7f:4b:7c:b2:dc:55:31:68:
fd:a7:a9:40:60:1e:fd:a4:3a:03:b4:25:a6:09:51:e1:bd:51:
df:2c:50:eb:0c:a7:18:65:3b:ba:fe:c0:64:f9:02:41:fe:58:
b7:1e:c6:90:fc:de:68:1d:5f:57:0d:69:2c:87:47:b4:bc:fd:
52:56:b1:6b:ed:a7:2d:f8:c7:03:85:ec:3f:d3:29:8a:41:00:
c8:b8:88:ac:8a:96:7f:c5:b6:98:cd:b9:c4:9d:25:4f:07:95:
97:47:10:b7:9a:c0:b6:e7:a5:78:e1:f6:8c:a4:e1:22:b5:e5:
cf:6a:ae:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAREDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTU1NjIyWhcNMjQxMjAzMTU1NjIyWjAYMRYw
FAYDVQQDEw02NzQwYTlhYS01ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwtHLs8JxlNzKziZ1yXkzY4BnGXXIlzveYyjPDJUr+BNO3BdJ0juDzcPw
3hWIG1uPspLKf6eeeqre7xocUOomx//bVckKXqhpZg1OpZdr+z6AoSSo5KKTT0lq
zswzdENTnZoTLyffwoCUyzmTUjYGBwFB3yBo8b4uiNPPW70EVbFy9GrWCKBHv8GV
oiX8D+9f8UPRRzfi2dbgyNtMjCLSi0F16m2snnG6qtn1JItpvVk8iSB1jAcjZVt/
vR3UDoM2kolyNyf4/kWrMukFZbEXV4vJ0WutmbDrUG4EEo+ZpZsHarJCDitNEx7b
gpz5Vv3Lp/gfob1GF6wc2Yotmry1pwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMqj
7kze4Y3pwNz+Bi3oPb6vYYSLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDIwMjY0MEE4RUExMUVGODBCQzhCQjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsMBMA0GCSqGSIb3DQEB
CwUAA4IBAQBsgm2q1llnBW9Y7pAvk8ShwyMEV1vkX1ChviOgpgQamyr3pFbdt77N
YxTh+2BbAVA68X+hSGFHxMv9k9e/Q5NeLW/CTJZogAAFezGyXzwFaRQ/gYkgO4bY
JC2+CjWIID9LtR0wszACW6Kl9CDdgyULR6hRXbxykT0kJgNeoaxoRaYJGV+LgpfD
f0t8stxVMWj9p6lAYB79pDoDtCWmCVHhvVHfLFDrDKcYZTu6/sBk+QJB/li3HsaQ
/N5oHV9XDWksh0e0vP1SVrFr7act+McDhew/0ymKQQDIuIisipZ/xbaYzbnEnSVP
B5WXRxC3msC256V44faMpOEiteXPaq5s
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:10 2024 by rpki-client on console-ams.rpki-client.org