Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A184FA95DB11EF88EAD988762E951A.roa
File: 54A184FA95DB11EF88EAD988762E951A.roa (raw, json)
Hash identifier: q1YdyULPnL/2W4ZN0QJBxvFtSrJKFMp83lLkHno8iJ0=
Subject key identifier: F5:FF:96:6C:61:83:B5:13:C3:A2:98:79:50:08:E7:59:DD:F1:CB:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01039C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A184FA95DB11EF88EAD988762E951A.roa
Signing time: Tue 29 Oct 2024 09:51:12 +0000
ROA not before: Tue 29 Oct 2024 09:51:08 +0000
ROA not after: Wed 04 Dec 2024 09:51:08 +0000
asID: 61112
IP address blocks: 154.83.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66460 (0x1039c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 29 09:51:08 2024 GMT
Not After : Dec 4 09:51:08 2024 GMT
Subject: CN=6720b010-a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:65:9c:c5:90:86:90:2e:e9:b9:0d:4f:dd:
49:5a:e9:23:60:59:4f:05:71:79:74:0c:47:2b:50:
7e:5d:26:f6:36:85:2d:eb:7a:89:83:71:12:89:0f:
5f:23:06:36:57:9a:e0:b4:5a:71:76:5c:60:b8:24:
f0:7a:74:15:8d:c6:57:f5:02:9a:be:7b:72:07:1f:
ae:1b:e7:47:28:a6:16:a7:6b:8b:f4:4a:59:46:65:
0b:5e:48:ac:31:ea:f1:6b:a5:1f:2a:c9:23:59:e8:
38:f9:47:5e:9b:b3:55:74:4d:ca:4c:27:eb:9e:84:
4d:27:2b:61:2c:0a:b1:ab:e0:9f:fc:8a:c9:a2:7b:
aa:0b:b7:fa:62:dd:51:15:ca:db:d4:e9:7b:8a:d6:
0f:21:2a:7f:bb:78:44:a0:65:97:68:a5:fa:fd:f5:
9d:32:f2:e3:27:cd:b3:97:8f:ed:46:a4:97:f7:40:
1d:8b:0b:6f:55:d5:68:73:4d:6f:5a:8a:30:e9:ce:
8f:29:8e:65:7a:1c:f5:a2:a0:07:2d:af:e1:61:df:
45:a2:12:e5:0c:7d:1f:c6:ef:bc:ea:21:03:07:fe:
55:df:60:01:0a:17:94:e6:b9:4e:a1:f8:c1:0e:fb:
78:10:3e:85:09:d5:3d:4e:9b:76:cf:ce:c7:2d:51:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:96:6C:61:83:B5:13:C3:A2:98:79:50:08:E7:59:DD:F1:CB:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A184FA95DB11EF88EAD988762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.92.0/22
Signature Algorithm: sha256WithRSAEncryption
80:4a:7b:a1:87:ce:a1:cf:07:71:51:5e:57:8b:7e:23:4c:78:
75:18:0c:c6:51:4e:17:dc:04:47:58:7b:d7:07:3b:37:e7:cb:
65:43:7b:cc:9b:e6:95:58:ac:a5:15:da:c3:75:c0:ae:e2:a1:
54:1f:1b:49:2e:0d:b3:6c:45:f8:77:2b:b1:36:08:c2:35:ec:
b2:c8:dc:7c:4e:e9:83:bd:1b:83:f8:ab:24:96:d0:eb:85:ae:
5d:95:22:3d:71:32:5c:74:3d:51:8d:5a:35:88:14:a0:6d:6c:
8d:d3:8e:30:f5:f0:e0:1a:26:c0:f8:50:c6:59:a7:82:60:68:
dc:da:c3:ab:3e:cd:eb:87:7b:45:73:ca:83:e3:e4:d0:a8:af:
7a:98:47:b4:be:5a:ed:fa:59:e2:40:65:b5:e2:f4:9e:02:43:
5d:ef:90:7c:77:9c:cc:4b:ef:2c:a8:32:3c:a1:36:5b:06:ef:
36:96:0b:21:5b:bb:c2:19:f4:ad:2f:4e:17:da:4b:32:50:1d:
75:e8:e7:35:11:76:ef:59:f0:f5:1e:b1:2e:e3:33:cf:e9:1a:
ad:4b:06:56:2b:c3:d7:39:d2:30:bf:37:f2:9f:0b:b0:64:2f:
f0:33:e0:ad:8c:f1:a0:eb:a1:29:0c:75:2d:5c:b8:fa:0c:95:
27:32:07:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQOcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI5MDk1MTA4WhcNMjQxMjA0MDk1MTA4WjAYMRYw
FAYDVQQDEw02NzIwYjAxMC1hOTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo4RlnMWQhpAu6bkNT91JWukjYFlPBXF5dAxHK1B+XSb2NoUt63qJg3ES
iQ9fIwY2V5rgtFpxdlxguCTwenQVjcZX9QKavntyBx+uG+dHKKYWp2uL9EpZRmUL
XkisMerxa6UfKskjWeg4+Udem7NVdE3KTCfrnoRNJythLAqxq+Cf/IrJonuqC7f6
Yt1RFcrb1Ol7itYPISp/u3hEoGWXaKX6/fWdMvLjJ82zl4/tRqSX90AdiwtvVdVo
c01vWoow6c6PKY5lehz1oqAHLa/hYd9FohLlDH0fxu+86iEDB/5V32ABCheU5rlO
ofjBDvt4ED6FCdU9Tpt2z87HLVEpwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPX/
lmxhg7UTw6KYeVAI51nd8ct9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NEExODRGQTk1REIxMUVGODhFQUQ5ODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlNcMA0GCSqGSIb3DQEB
CwUAA4IBAQCASnuhh86hzwdxUV5Xi34jTHh1GAzGUU4X3ARHWHvXBzs358tlQ3vM
m+aVWKylFdrDdcCu4qFUHxtJLg2zbEX4dyuxNgjCNeyyyNx8TumDvRuD+KskltDr
ha5dlSI9cTJcdD1RjVo1iBSgbWyN044w9fDgGibA+FDGWaeCYGjc2sOrPs3rh3tF
c8qD4+TQqK96mEe0vlrt+lniQGW14vSeAkNd75B8d5zMS+8sqDI8oTZbBu82lgsh
W7vCGfStL04X2ksyUB116Oc1EXbvWfD1HrEu4zPP6RqtSwZWK8PXOdIwvzfynwuw
ZC/wM+CtjPGg66EpDHUtXLj6DJUnMgfv
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:04 2024 by rpki-client on console-ams.rpki-client.org