Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56291CF87F0F11EFB4056453762E951A.roa
File: 56291CF87F0F11EFB4056453762E951A.roa (raw, json)
Hash identifier: +JdTh7FGJq48bh7zY0+NgK5ExkX+uCI6mkIhS/u9Jwk=
Subject key identifier: 68:B3:28:8E:DD:32:19:72:2A:AB:6F:41:3F:55:4A:99:05:E1:17:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F5B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56291CF87F0F11EFB4056453762E951A.roa
Signing time: Mon 30 Sep 2024 09:35:32 +0000
ROA not before: Mon 30 Sep 2024 09:35:28 +0000
ROA not after: Sat 30 Nov 2024 09:35:28 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62900 (0xf5b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 09:35:28 2024 GMT
Not After : Nov 30 09:35:28 2024 GMT
Subject: CN=66fa70e4-c4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:52:a5:5b:4a:4e:8a:0e:29:2b:7f:6b:05:
7f:9e:a3:58:f6:80:27:d2:db:e2:d0:d0:a2:07:98:
af:30:ca:e8:29:8d:56:e7:0f:0b:80:1c:22:a9:3f:
ff:27:aa:00:3f:19:e2:81:48:8c:dd:f2:7a:3a:63:
61:21:f3:32:af:a6:16:9c:db:7f:c9:46:4b:81:f3:
3d:e9:8a:2c:e8:39:a7:88:52:16:52:12:11:0e:be:
30:3c:3a:d3:20:72:a6:f8:ff:27:65:d2:fc:d6:ce:
83:4b:14:00:aa:20:26:42:af:83:e3:c0:d6:9a:d5:
a0:b4:d7:1a:b3:25:db:70:f7:ac:5c:93:c0:9a:5d:
1f:1c:17:60:68:87:19:b4:cd:6f:fe:f8:d8:1e:bb:
a9:ff:30:d2:26:04:64:45:8d:e7:1e:b9:c5:52:02:
86:21:99:0a:ba:84:31:07:17:d9:0c:5f:77:17:3e:
57:68:b5:52:2e:dd:50:7b:75:2c:f7:2f:1c:f8:e8:
6c:de:37:d7:22:b9:39:21:af:ca:b2:a6:b6:87:f6:
34:a9:c5:72:4c:34:98:3b:25:a8:67:4b:9d:09:3c:
53:ed:98:76:5d:14:74:c2:5a:69:64:22:0b:2f:3c:
b1:10:85:55:9c:dd:03:82:59:e1:a4:39:3c:c4:e8:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B3:28:8E:DD:32:19:72:2A:AB:6F:41:3F:55:4A:99:05:E1:17:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56291CF87F0F11EFB4056453762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
48:84:2b:95:a8:3e:97:c4:59:76:4d:61:6e:a2:4a:e1:00:19:
48:44:22:fb:dd:7c:08:97:2b:69:9b:68:ea:53:16:53:a3:09:
18:29:18:69:c6:39:fa:77:70:67:49:b3:2e:62:48:90:9e:32:
e0:1d:56:88:af:b4:c4:d6:96:3b:b3:93:4e:19:6e:31:ce:08:
e4:b2:74:f0:f2:43:c9:cd:e5:f4:bd:ae:ed:64:93:2a:4f:61:
8f:70:f4:56:2b:57:59:c0:44:33:8b:4c:cd:05:7b:d3:00:95:
6e:83:60:a4:67:83:02:87:70:43:01:bb:f2:00:75:6c:d7:b8:
d6:24:2e:a4:e3:d9:fe:36:30:77:2c:dd:15:00:36:02:7a:2b:
53:43:11:64:93:40:98:1b:bb:04:80:a3:e2:b2:b0:e9:9a:aa:
f6:b3:a2:ba:1e:d5:01:5b:db:a4:cd:7f:3d:be:a2:c4:11:07:
00:16:b5:e1:8e:74:33:4d:16:ea:af:16:54:1b:e9:9e:f6:0b:
78:af:d7:3d:70:86:7d:ee:cc:7c:4b:ce:5a:02:6f:ab:16:4a:
7b:7b:8b:cd:3b:58:0e:d0:99:ec:21:d2:87:01:63:45:16:fd:
99:f4:0c:34:c5:a3:20:b0:c7:47:cb:d3:bf:d7:05:7f:63:b4:
f3:45:0b:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPW0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTMwMDkzNTI4WhcNMjQxMTMwMDkzNTI4WjAYMRYw
FAYDVQQDEw02NmZhNzBlNC1jNGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq4RSpVtKTooOKSt/awV/nqNY9oAn0tvi0NCiB5ivMMroKY1W5w8LgBwi
qT//J6oAPxnigUiM3fJ6OmNhIfMyr6YWnNt/yUZLgfM96Yos6DmniFIWUhIRDr4w
PDrTIHKm+P8nZdL81s6DSxQAqiAmQq+D48DWmtWgtNcasyXbcPesXJPAml0fHBdg
aIcZtM1v/vjYHrup/zDSJgRkRY3nHrnFUgKGIZkKuoQxBxfZDF93Fz5XaLVSLt1Q
e3Us9y8c+Ohs3jfXIrk5Ia/Ksqa2h/Y0qcVyTDSYOyWoZ0udCTxT7Zh2XRR0wlpp
ZCILLzyxEIVVnN0DglnhpDk8xOhRwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGiz
KI7dMhlyKqtvQT9VSpkF4RdOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjI5MUNGODdGMEYxMUVGQjQwNTY0NTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml1iMA0GCSqGSIb3DQEB
CwUAA4IBAQBIhCuVqD6XxFl2TWFuokrhABlIRCL73XwIlytpm2jqUxZTowkYKRhp
xjn6d3BnSbMuYkiQnjLgHVaIr7TE1pY7s5NOGW4xzgjksnTw8kPJzeX0va7tZJMq
T2GPcPRWK1dZwEQzi0zNBXvTAJVug2CkZ4MCh3BDAbvyAHVs17jWJC6k49n+NjB3
LN0VADYCeitTQxFkk0CYG7sEgKPisrDpmqr2s6K6HtUBW9ukzX89vqLEEQcAFrXh
jnQzTRbqrxZUG+me9gt4r9c9cIZ97sx8S85aAm+rFkp7e4vNO1gO0JnsIdKHAWNF
Fv2Z9Aw0xaMgsMdHy9O/1wV/Y7TzRQuk
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org