Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5659C8D25B9A11EFB54C3446762E951A.roa
File: 5659C8D25B9A11EFB54C3446762E951A.roa (raw, json)
Hash identifier: de3w5ovkxzyDyVwli5nPLR3OjiH/sRl/y9j7xzVTShk=
Subject key identifier: B8:C4:60:44:3A:D5:D3:F0:30:9A:6E:3B:6C:01:FC:04:02:8E:77:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E09A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5659C8D25B9A11EFB54C3446762E951A.roa
Signing time: Fri 16 Aug 2024 06:39:50 +0000
ROA not before: Fri 16 Aug 2024 06:39:47 +0000
ROA not after: Mon 24 Mar 2025 06:39:47 +0000
asID: 132513
IP address blocks: 154.85.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57498 (0xe09a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 16 06:39:47 2024 GMT
Not After : Mar 24 06:39:47 2025 GMT
Subject: CN=66bef436-17b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:74:be:b0:e3:43:f3:19:f6:51:24:23:57:
4f:a6:56:8e:33:e1:bb:b2:b7:60:22:7a:62:4f:a7:
81:75:19:d3:9f:43:03:2e:b8:33:dc:7a:ff:cc:8d:
01:5f:91:3e:ac:9c:6b:41:ff:5d:1a:7c:51:3b:9f:
63:fd:dd:89:07:6c:4d:d8:fe:62:cf:57:8a:35:3f:
55:a2:8b:08:de:9b:2e:26:a5:8d:78:1f:aa:31:68:
da:89:94:e1:a9:cc:64:44:41:29:f3:5f:b5:98:d4:
77:6a:f1:cc:22:de:e4:75:df:31:a6:d5:9e:41:ec:
59:b8:c7:09:ec:a7:b6:7a:74:03:6f:23:09:09:76:
ca:f4:78:bc:c2:d2:5d:38:02:29:4e:28:93:a7:09:
a6:af:ae:08:c8:dd:0f:37:63:47:90:95:de:21:a8:
52:5f:08:4a:e0:37:61:37:81:7f:23:01:ba:dc:e3:
7b:aa:31:39:e6:1c:ab:aa:2b:0b:a6:ae:6c:a1:21:
8b:34:a2:ee:85:df:b8:83:c4:1f:96:1a:65:64:b8:
01:2d:d4:3a:5a:62:e0:d3:11:55:1a:c9:64:2b:fe:
ed:7c:49:6e:a5:2c:62:54:2e:18:94:43:75:5f:2d:
08:f9:d5:4f:46:e0:e5:93:eb:9e:03:35:c9:20:68:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C4:60:44:3A:D5:D3:F0:30:9A:6E:3B:6C:01:FC:04:02:8E:77:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5659C8D25B9A11EFB54C3446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:30:e0:20:2a:66:ec:b8:d8:6f:e8:d0:a0:62:52:6e:94:84:
d8:79:7c:66:63:8a:05:1b:57:0e:00:0e:d2:cd:9a:10:97:db:
45:4c:e9:c9:89:c9:5c:fa:8b:4b:b3:c9:5c:95:c8:b8:32:11:
03:3a:b6:be:74:4a:33:dc:b0:98:c9:da:f3:5e:4d:dc:ba:f9:
78:fe:47:93:3c:ec:29:f6:fd:0e:1d:84:24:ed:86:08:81:72:
c6:34:17:c7:3c:6e:71:b0:76:5a:1d:2d:70:57:6a:96:94:68:
d1:91:87:be:7e:c3:e9:0c:e3:88:ce:93:05:49:d7:b5:da:fd:
0a:80:d7:5b:72:19:ae:25:5a:9c:9b:81:2d:95:32:cf:cb:76:
fd:67:2e:90:2a:60:91:ff:c1:39:44:8a:13:8b:fb:f9:13:69:
88:48:02:97:e1:d3:60:93:2a:59:15:85:0f:fa:d2:c9:a0:98:
0a:0e:82:a9:77:cc:8b:60:52:12:69:3d:48:6c:7f:44:dd:55:
92:9a:f4:69:87:a2:55:ce:fe:78:57:f0:29:fb:5d:37:5e:38:
31:37:bc:48:7a:53:4d:35:7c:17:db:46:63:09:c2:63:3b:f3:
ec:06:a3:06:22:c2:73:d9:ca:dc:88:f1:91:33:62:60:20:6d:
5f:ce:00:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOCaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODE2MDYzOTQ3WhcNMjUwMzI0MDYzOTQ3WjAYMRYw
FAYDVQQDEw02NmJlZjQzNi0xN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuG50vrDjQ/MZ9lEkI1dPplaOM+G7srdgInpiT6eBdRnTn0MDLrgz3Hr/
zI0BX5E+rJxrQf9dGnxRO59j/d2JB2xN2P5iz1eKNT9VoosI3psuJqWNeB+qMWja
iZThqcxkREEp81+1mNR3avHMIt7kdd8xptWeQexZuMcJ7Ke2enQDbyMJCXbK9Hi8
wtJdOAIpTiiTpwmmr64IyN0PN2NHkJXeIahSXwhK4DdhN4F/IwG63ON7qjE55hyr
qisLpq5soSGLNKLuhd+4g8QflhplZLgBLdQ6WmLg0xFVGslkK/7tfElupSxiVC4Y
lEN1Xy0I+dVPRuDlk+ueAzXJIGiFGQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLjE
YEQ61dPwMJpuO2wB/AQCjnetMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NjU5QzhEMjVCOUExMUVGQjU0QzM0NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlViMA0GCSqGSIb3DQEB
CwUAA4IBAQC6MOAgKmbsuNhv6NCgYlJulITYeXxmY4oFG1cOAA7SzZoQl9tFTOnJ
iclc+otLs8lclci4MhEDOra+dEoz3LCYydrzXk3cuvl4/keTPOwp9v0OHYQk7YYI
gXLGNBfHPG5xsHZaHS1wV2qWlGjRkYe+fsPpDOOIzpMFSde12v0KgNdbchmuJVqc
m4EtlTLPy3b9Zy6QKmCR/8E5RIoTi/v5E2mISAKX4dNgkypZFYUP+tLJoJgKDoKp
d8yLYFISaT1IbH9E3VWSmvRph6JVzv54V/Ap+103XjgxN7xIelNNNXwX20ZjCcJj
O/PsBqMGIsJz2crciPGRM2JgIG1fzgBs
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:31 2024 by rpki-client on console-fra.rpki-client.org