Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/582ACCF8A26011EFA9354992762E951A.roa
File: 582ACCF8A26011EFA9354992762E951A.roa (raw, json)
Hash identifier: AHWcbvWe5UzHXbLMkmJ9J2b3rg/XpHQcZLrYS10V3RU=
Subject key identifier: 55:D0:B8:C0:41:FF:8C:3E:58:DA:9B:89:34:8A:24:6C:61:5E:9E:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/582ACCF8A26011EFA9354992762E951A.roa
Signing time: Thu 14 Nov 2024 08:13:35 +0000
ROA not before: Thu 14 Nov 2024 08:13:31 +0000
ROA not after: Mon 13 Jan 2025 08:13:31 +0000
asID: 5065
IP address blocks: 154.198.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68836 (0x10ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 08:13:31 2024 GMT
Not After : Jan 13 08:13:31 2025 GMT
Subject: CN=6735b12f-e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:17:a5:07:92:49:07:76:3d:a0:af:a6:10:
cb:b3:78:dc:03:fb:df:d0:62:ca:06:77:56:1f:c1:
29:22:3d:2e:5c:be:aa:ec:37:13:60:d8:be:9b:d2:
e6:a8:81:cc:75:b0:ce:18:1c:02:e5:e0:96:8c:d2:
39:2b:1f:53:bd:ce:63:5e:cc:3f:37:48:e4:ec:06:
22:fc:ff:8e:91:5c:34:8a:fc:87:5d:c0:b4:9e:2c:
82:17:2b:fb:2a:aa:3b:3d:52:6c:f5:b2:26:a4:62:
fd:0e:dc:05:84:88:b8:ec:cb:47:7f:c7:ef:89:0a:
f8:7e:5f:ee:3f:5a:55:b7:b6:0b:4f:ec:3a:48:29:
06:03:af:2c:d9:08:4a:66:1f:5c:bb:38:de:ed:1e:
f6:b5:a4:e4:e4:d3:47:a8:b8:f6:2a:64:73:de:69:
59:8d:b4:7b:f4:7d:20:dd:c6:09:d7:4d:e7:db:be:
96:74:93:14:f2:42:56:67:29:09:e1:79:eb:d3:69:
08:22:74:12:f4:d6:aa:b9:04:8b:77:eb:61:26:c9:
e5:f9:bb:3d:72:2c:a3:16:c5:9d:b7:2c:e7:1a:0c:
9c:71:ad:a4:17:31:84:9a:07:b3:a9:45:fa:22:b7:
46:78:23:97:16:33:9d:6d:09:cb:48:db:de:6c:89:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:B8:C0:41:FF:8C:3E:58:DA:9B:89:34:8A:24:6C:61:5E:9E:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/582ACCF8A26011EFA9354992762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:65:73:37:bb:ed:42:4d:30:8d:20:b9:bc:e4:28:ef:05:d9:
73:dd:1a:20:b6:2d:2a:2f:f6:3b:99:4f:20:08:9b:a1:1b:60:
4c:f1:34:72:9a:5e:cb:e8:b4:4c:df:c0:57:21:54:16:e8:a8:
63:ea:d2:28:5b:f7:ec:93:f4:3b:95:1e:9b:d4:db:40:bc:6a:
0c:f1:f7:70:89:3a:11:f9:c7:3b:67:2f:7e:5b:7f:ed:0d:78:
b0:c0:e7:fe:60:0d:65:43:46:be:a7:94:20:7e:61:48:e5:4b:
20:55:a4:8a:0d:8b:c6:de:f9:50:10:4d:52:0e:b9:20:84:89:
fd:15:4b:3e:09:db:f0:e3:c1:a9:ee:25:6e:46:92:98:95:69:
37:fa:90:5a:56:d0:84:1c:e5:82:0a:ca:25:4d:23:26:5e:c5:
57:97:f7:bf:7a:f0:89:92:cc:b0:e1:cd:54:a2:92:3c:f6:9f:
8a:b3:6a:23:0d:b4:09:a5:db:c7:a7:d8:92:b2:5c:15:36:28:
99:bf:8e:76:15:c8:54:51:f9:46:c4:dc:e1:f0:34:d7:a9:cd:
a5:28:db:81:00:5e:5f:e8:f1:cb:46:76:cb:38:eb:70:59:06:
ba:88:53:d3:91:1c:4e:d5:86:85:f4:d7:14:07:ad:95:52:fe:
dd:e9:00:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQzkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE0MDgxMzMxWhcNMjUwMTEzMDgxMzMxWjAYMRYw
FAYDVQQDEw02NzM1YjEyZi1lM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt8EXpQeSSQd2PaCvphDLs3jcA/vf0GLKBndWH8EpIj0uXL6q7DcTYNi+
m9LmqIHMdbDOGBwC5eCWjNI5Kx9Tvc5jXsw/N0jk7AYi/P+OkVw0ivyHXcC0niyC
Fyv7Kqo7PVJs9bImpGL9DtwFhIi47MtHf8fviQr4fl/uP1pVt7YLT+w6SCkGA68s
2QhKZh9cuzje7R72taTk5NNHqLj2KmRz3mlZjbR79H0g3cYJ103n276WdJMU8kJW
ZykJ4Xnr02kIInQS9NaquQSLd+thJsnl+bs9ciyjFsWdtyznGgycca2kFzGEmgez
qUX6IrdGeCOXFjOdbQnLSNvebImfzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFXQ
uMBB/4w+WNqbiTSKJGxhXp6/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81ODJBQ0NGOEEyNjAxMUVGQTkzNTQ5OTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYXMA0GCSqGSIb3DQEB
CwUAA4IBAQAMZXM3u+1CTTCNILm85CjvBdlz3Rogti0qL/Y7mU8gCJuhG2BM8TRy
ml7L6LRM38BXIVQW6Khj6tIoW/fsk/Q7lR6b1NtAvGoM8fdwiToR+cc7Zy9+W3/t
DXiwwOf+YA1lQ0a+p5QgfmFI5UsgVaSKDYvG3vlQEE1SDrkghIn9FUs+Cdvw48Gp
7iVuRpKYlWk3+pBaVtCEHOWCCsolTSMmXsVXl/e/evCJksyw4c1UopI89p+Ks2oj
DbQJpdvHp9iSslwVNiiZv452FchUUflGxNzh8DTXqc2lKNuBAF5f6PHLRnbLOOtw
WQa6iFPTkRxO1YaF9NcUB62VUv7d6QDD
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:22:37 2024 by rpki-client on console-ams.rpki-client.org