Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E374482676E11EF934C3158762E951A.roa
File: 5E374482676E11EF934C3158762E951A.roa (raw, json)
Hash identifier: BNNjSxhG3IdcaMq/obtbHn1KwbSjFIWn4q7BZEvFDds=
Subject key identifier: 87:A9:3A:A5:CF:EA:9D:70:82:91:70:06:9C:EC:67:2B:8C:FB:33:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E811
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E374482676E11EF934C3158762E951A.roa
Signing time: Sat 31 Aug 2024 07:55:20 +0000
ROA not before: Sat 31 Aug 2024 07:55:16 +0000
ROA not after: Fri 25 Jul 2025 07:55:16 +0000
asID: 63199
IP address blocks: 154.223.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59409 (0xe811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 31 07:55:16 2024 GMT
Not After : Jul 25 07:55:16 2025 GMT
Subject: CN=66d2cc68-0de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:02:89:b2:17:e9:df:b7:8f:19:2f:b7:42:
ad:29:17:6a:63:41:c0:d5:13:25:f3:a2:d1:8b:f2:
b6:3f:69:b7:01:0a:c1:6c:7c:bc:8e:08:f0:67:f9:
8b:1d:47:9f:e5:f6:a1:85:ac:f8:69:31:50:c1:eb:
f2:63:f8:96:28:1e:aa:6c:46:31:63:35:55:73:c6:
a0:08:1b:57:b7:c6:69:ba:76:07:a2:f1:f3:b8:b2:
48:6f:a9:c8:ea:3f:81:62:02:18:3c:5a:2e:4b:5d:
95:4c:24:f0:75:e4:09:a5:ee:0b:a4:e0:d7:5e:f9:
23:7b:4c:6d:82:b3:5a:8e:1f:5a:cb:68:dd:49:d7:
9b:05:10:d4:a8:eb:40:fd:77:9b:93:ca:27:6c:af:
af:37:b5:38:b0:03:68:02:92:57:9c:43:fa:ec:6a:
61:a1:e0:80:94:59:63:d9:e3:e9:96:7a:eb:56:f0:
75:e8:67:01:da:a9:0e:d4:75:74:3a:87:1b:65:b7:
74:26:28:66:54:df:19:6c:ea:cc:05:a7:25:43:ff:
8f:2e:eb:26:3f:a6:49:3a:ea:51:ab:99:78:6a:37:
92:77:6c:76:4c:44:3c:e0:2c:3f:d2:61:bd:62:d8:
14:72:ca:15:46:c6:93:46:dd:5d:45:18:cd:19:ad:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:3A:A5:CF:EA:9D:70:82:91:70:06:9C:EC:67:2B:8C:FB:33:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E374482676E11EF934C3158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.132.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:c0:0b:a0:94:c2:2b:ff:e3:21:00:60:52:74:92:41:e0:7a:
9e:d6:27:9d:0b:e0:3c:11:a1:d2:c7:ea:bb:bf:d4:34:df:fa:
1d:b6:a2:0d:3d:71:54:e5:02:3d:2b:b8:df:12:ae:b1:33:4c:
69:2d:4b:fd:a2:23:32:02:26:89:a2:dc:d6:18:30:0f:ee:65:
a8:0b:7a:0d:e2:d7:ee:eb:d3:ff:4f:53:7c:d3:ef:45:5e:53:
2c:d4:4d:a3:c9:f0:6e:66:e1:5d:3f:03:2b:4b:6a:4c:bf:27:
e2:73:00:03:0f:60:cf:fd:92:3c:46:84:d7:14:5b:2c:5c:ec:
78:78:1a:9b:17:16:59:52:83:4a:45:f2:c1:72:43:ac:e4:50:
e2:b8:15:35:fb:18:87:b0:c3:a1:ef:d9:74:bf:47:f2:2f:9d:
c9:df:50:21:80:64:57:55:f7:46:8f:d7:26:bf:81:d2:41:07:
a9:9f:96:b6:08:a2:56:74:9d:90:1b:e1:55:88:d0:ba:10:8b:
15:b0:4d:77:6b:ef:c6:d3:3c:6a:85:ff:c1:10:f3:c0:d7:a1:
70:d3:e1:2f:5d:b6:fb:7a:b5:a2:f3:ae:c8:c0:06:02:52:c1:
32:bb:13:f1:56:ed:f8:cc:34:1f:a1:0b:d3:73:2a:fb:72:d5:
a0:db:96:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOgRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODMxMDc1NTE2WhcNMjUwNzI1MDc1NTE2WjAYMRYw
FAYDVQQDEw02NmQyY2M2OC0wZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAySUCibIX6d+3jxkvt0KtKRdqY0HA1RMl86LRi/K2P2m3AQrBbHy8jgjw
Z/mLHUef5fahhaz4aTFQwevyY/iWKB6qbEYxYzVVc8agCBtXt8ZpunYHovHzuLJI
b6nI6j+BYgIYPFouS12VTCTwdeQJpe4LpODXXvkje0xtgrNajh9ay2jdSdebBRDU
qOtA/Xebk8onbK+vN7U4sANoApJXnEP67GphoeCAlFlj2ePplnrrVvB16GcB2qkO
1HV0OocbZbd0JihmVN8ZbOrMBaclQ/+PLusmP6ZJOupRq5l4ajeSd2x2TEQ84Cw/
0mG9YtgUcsoVRsaTRt1dRRjNGa1bjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIep
OqXP6p1wgpFwBpzsZyuM+zNEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RTM3NDQ4MjY3NkUxMUVGOTM0QzMxNTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+EMA0GCSqGSIb3DQEB
CwUAA4IBAQDDwAuglMIr/+MhAGBSdJJB4Hqe1iedC+A8EaHSx+q7v9Q03/odtqIN
PXFU5QI9K7jfEq6xM0xpLUv9oiMyAiaJotzWGDAP7mWoC3oN4tfu69P/T1N80+9F
XlMs1E2jyfBuZuFdPwMrS2pMvyficwADD2DP/ZI8RoTXFFssXOx4eBqbFxZZUoNK
RfLBckOs5FDiuBU1+xiHsMOh79l0v0fyL53J31AhgGRXVfdGj9cmv4HSQQepn5a2
CKJWdJ2QG+FViNC6EIsVsE13a+/G0zxqhf/BEPPA16Fw0+EvXbb7erWi867IwAYC
UsEyuxPxVu34zDQfoQvTcyr7ctWg25bX
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:08 2024 by rpki-client on console-fra.rpki-client.org