Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C18DEE0A9D111EF8577E764762E951A.roa
File: 5C18DEE0A9D111EF8577E764762E951A.roa (raw, json)
Hash identifier: o/8BPjSdWoiMn1jTUb6w6ZiQuMnL/5no271Ti/lSUpM=
Subject key identifier: 5C:37:A1:61:50:CD:02:B2:BD:95:EA:D1:52:28:11:B4:9F:8C:59:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011220
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C18DEE0A9D111EF8577E764762E951A.roa
Signing time: Sat 23 Nov 2024 19:30:13 +0000
ROA not before: Sat 23 Nov 2024 19:30:09 +0000
ROA not after: Tue 03 Dec 2024 19:30:09 +0000
asID: 62240
IP address blocks: 154.195.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70176 (0x11220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 19:30:09 2024 GMT
Not After : Dec 3 19:30:09 2024 GMT
Subject: CN=67422d45-5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:df:90:44:af:26:f7:c1:93:44:ab:ae:0c:
1b:a4:fb:f7:06:0a:e5:1f:f3:9b:4d:00:f8:af:90:
4b:f8:6a:ab:3f:93:47:cf:d1:39:1d:5d:db:90:a7:
fa:0d:97:82:54:6e:ec:6d:f5:17:a5:94:1b:6d:4a:
8b:64:e0:b4:1d:ac:c0:9e:5f:34:85:06:9e:90:04:
f9:77:69:26:79:e3:5d:1f:5c:41:47:fb:fb:0c:e7:
b9:fb:44:ca:56:c0:5f:25:5b:f2:2e:2e:22:a1:3b:
d7:3d:d1:cc:3a:75:ea:fc:b5:19:d5:a9:89:30:97:
83:08:b0:a4:bb:1d:35:96:b1:9d:a5:f5:b5:c9:40:
6d:78:89:17:92:9e:8c:7e:66:23:db:8e:59:79:05:
e9:9a:47:06:85:b9:b3:a9:c6:ee:ad:b7:7f:2f:45:
1d:e8:13:2b:51:1d:3f:d8:eb:40:8d:0e:f4:37:af:
0a:f0:a8:bd:d6:d7:6a:3c:39:e1:47:16:ef:d4:a5:
db:13:a6:59:14:0c:78:45:ad:7a:b1:3e:8f:fe:17:
6a:22:fb:c1:00:17:a3:51:51:11:9d:be:77:71:76:
45:fb:56:e5:c7:07:3f:b9:ac:02:98:62:dd:26:52:
02:5c:91:f2:16:64:b8:22:e2:47:11:0b:a8:78:07:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:37:A1:61:50:CD:02:B2:BD:95:EA:D1:52:28:11:B4:9F:8C:59:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C18DEE0A9D111EF8577E764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:dd:ba:17:6b:5e:23:1f:49:c0:3c:87:b8:4c:2f:d3:92:fa:
ad:dc:62:78:bc:aa:d2:cd:d2:c0:46:78:51:71:f4:fe:c5:2c:
89:31:8a:05:e4:69:27:a7:fc:cc:b4:1a:dd:c1:16:e3:2f:36:
3f:81:e6:4a:c1:00:4d:66:6a:5c:f9:3c:a2:36:6f:bc:b3:23:
a6:e9:59:12:ab:41:69:d2:bf:b9:d5:d1:b4:1a:40:f1:37:50:
a6:ce:21:ad:1f:2b:57:a9:1d:99:5e:b2:31:8e:ba:ee:74:c6:
a2:8c:e3:3c:e5:2b:f1:8b:bb:f2:ad:6d:22:9f:6d:cd:05:38:
1f:68:f0:a6:b6:ac:d7:80:ff:aa:97:28:b3:a0:29:5e:57:77:
2c:de:75:39:9b:d7:50:eb:d1:b7:a4:64:fc:d5:32:87:ef:ff:
01:91:76:d7:c0:fe:0a:06:16:c9:e3:e2:1e:6f:ab:fe:30:7c:
9c:8e:7b:53:43:9b:7d:fc:87:85:25:1b:9b:2b:ae:d4:3c:23:
83:64:66:8a:f1:44:86:e1:54:78:33:56:17:f2:1e:b9:f0:81:
8e:3d:a5:0a:57:1e:81:a4:6a:33:02:0c:f0:b0:95:cd:32:4d:
fe:5e:35:18:6c:86:f4:8e:a5:ef:85:41:5a:e1:ef:f7:9f:01:
f5:5c:83:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARIgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTkzMDA5WhcNMjQxMjAzMTkzMDA5WjAYMRYw
FAYDVQQDEw02NzQyMmQ0NS01NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxKjfkESvJvfBk0SrrgwbpPv3BgrlH/ObTQD4r5BL+GqrP5NHz9E5HV3b
kKf6DZeCVG7sbfUXpZQbbUqLZOC0HazAnl80hQaekAT5d2kmeeNdH1xBR/v7DOe5
+0TKVsBfJVvyLi4ioTvXPdHMOnXq/LUZ1amJMJeDCLCkux01lrGdpfW1yUBteIkX
kp6MfmYj245ZeQXpmkcGhbmzqcburbd/L0Ud6BMrUR0/2OtAjQ70N68K8Ki91tdq
PDnhRxbv1KXbE6ZZFAx4Ra16sT6P/hdqIvvBABejUVERnb53cXZF+1blxwc/uawC
mGLdJlICXJHyFmS4IuJHEQuoeAel+QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFw3
oWFQzQKyvZXq0VIoEbSfjFn9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QzE4REVFMEE5RDExMUVGODU3N0U3NjQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsMAMA0GCSqGSIb3DQEB
CwUAA4IBAQAc3boXa14jH0nAPIe4TC/Tkvqt3GJ4vKrSzdLARnhRcfT+xSyJMYoF
5Gknp/zMtBrdwRbjLzY/geZKwQBNZmpc+TyiNm+8syOm6VkSq0Fp0r+51dG0GkDx
N1CmziGtHytXqR2ZXrIxjrrudMaijOM85Svxi7vyrW0in23NBTgfaPCmtqzXgP+q
lyizoCleV3cs3nU5m9dQ69G3pGT81TKH7/8BkXbXwP4KBhbJ4+Ieb6v+MHycjntT
Q5t9/IeFJRubK67UPCODZGaK8USG4VR4M1YX8h658IGOPaUKVx6BpGozAgzwsJXN
Mk3+XjUYbIb0jqXvhUFa4e/3nwH1XIN2
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:31 2024 by rpki-client on console-fra.rpki-client.org