Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F958D8292B811EF85FAA646762E951A.roa
File: 5F958D8292B811EF85FAA646762E951A.roa (raw, json)
Hash identifier: 5saRtH92Z5T+dNfAzL5oAWVR82mkpG9hz9W/1lQzR1U=
Subject key identifier: C5:F3:AF:24:23:34:E5:08:59:81:A9:42:E7:21:91:B8:8A:08:6D:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010218
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F958D8292B811EF85FAA646762E951A.roa
Signing time: Fri 25 Oct 2024 10:03:25 +0000
ROA not before: Fri 25 Oct 2024 10:03:21 +0000
ROA not after: Sun 01 Dec 2024 10:03:21 +0000
asID: 49505
IP address blocks: 154.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66072 (0x10218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 10:03:21 2024 GMT
Not After : Dec 1 10:03:21 2024 GMT
Subject: CN=671b6ced-0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:89:6b:70:5f:6c:ea:62:5d:55:cf:42:72:
d6:5f:12:56:b2:22:e3:09:c4:2b:4e:3d:79:17:d6:
c9:28:8b:63:75:36:ca:88:39:7d:21:26:a8:43:f0:
9f:06:36:1a:4d:c9:8d:a2:1b:d4:a4:14:2b:71:49:
15:04:28:23:17:ec:71:8d:01:59:6e:d1:c5:99:ef:
1a:7d:40:7f:bb:61:c3:55:bb:ce:b4:19:e0:30:2d:
f4:fa:da:02:fd:4c:b9:3e:eb:c2:44:48:e1:4e:cb:
04:31:43:3b:0f:c1:0f:ad:a0:38:ff:be:ee:8e:d5:
ec:f2:9e:34:d3:6b:42:dc:ee:5c:fc:bf:17:7a:30:
05:52:d2:d3:15:1d:88:b2:29:b5:95:7d:bc:61:30:
2b:57:f8:45:5d:1b:53:1e:39:0e:27:8f:88:04:8b:
14:8b:2f:ad:8a:9c:c6:84:c5:25:75:70:44:78:22:
bb:68:0e:84:49:31:18:0f:bb:89:40:b0:98:ae:56:
71:12:df:db:a4:12:45:97:bd:5e:a1:3e:15:b1:8c:
4d:85:d1:3b:6d:6c:05:8f:f1:7d:27:96:c9:58:b6:
ac:a3:69:c6:23:09:f5:85:c1:dc:31:88:37:aa:13:
35:06:75:29:04:99:1f:df:ca:40:0d:5f:77:f9:0d:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:AF:24:23:34:E5:08:59:81:A9:42:E7:21:91:B8:8A:08:6D:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F958D8292B811EF85FAA646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:10:e0:bc:c4:63:6a:9b:f5:34:0a:4f:9d:9f:93:03:84:a6:
f2:dd:ed:d0:3b:32:fa:5c:91:2a:c9:ed:43:fa:b9:6b:c5:b3:
45:87:c1:d4:01:56:13:fe:77:aa:c2:f2:89:5a:38:b5:27:6d:
53:92:d5:88:7b:96:05:3b:26:f1:fc:aa:1a:86:8e:9b:04:28:
f8:7d:5b:98:6a:8f:67:c2:17:5d:6a:c3:75:8c:68:f7:b2:f6:
dc:41:66:5d:15:ea:ca:78:eb:13:62:c6:6c:6f:1d:63:b9:a2:
91:c9:3c:fe:e7:e1:5d:93:7c:79:df:94:2c:6a:7b:8b:39:c3:
74:54:d7:10:1d:07:da:4d:11:ff:53:e9:1f:80:cb:b4:0a:04:
94:4e:a2:87:e4:92:08:0d:f3:5b:97:10:58:10:85:a2:0a:c8:
0f:74:b9:ee:58:8b:fc:12:bf:f5:10:0e:9f:a2:14:10:a6:bb:
e1:b6:65:c8:11:17:6d:3a:d7:5f:b1:6e:c4:07:8b:e8:d5:cf:
87:0f:fe:fc:ab:10:06:41:86:19:bf:66:56:41:8d:c2:1a:17:
04:ef:7c:86:6d:35:05:65:a8:b5:26:4e:31:d5:cc:84:bd:7a:
8b:1d:11:3d:b1:ff:05:84:74:38:06:6c:a0:ea:9c:99:d1:e7:
60:f0:94:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQIYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MTAwMzIxWhcNMjQxMjAxMTAwMzIxWjAYMRYw
FAYDVQQDEw02NzFiNmNlZC0wYjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0R+Ja3BfbOpiXVXPQnLWXxJWsiLjCcQrTj15F9bJKItjdTbKiDl9ISao
Q/CfBjYaTcmNohvUpBQrcUkVBCgjF+xxjQFZbtHFme8afUB/u2HDVbvOtBngMC30
+toC/Uy5PuvCREjhTssEMUM7D8EPraA4/77ujtXs8p4002tC3O5c/L8XejAFUtLT
FR2Isim1lX28YTArV/hFXRtTHjkOJ4+IBIsUiy+tipzGhMUldXBEeCK7aA6ESTEY
D7uJQLCYrlZxEt/bpBJFl71eoT4VsYxNhdE7bWwFj/F9J5bJWLaso2nGIwn1hcHc
MYg3qhM1BnUpBJkf38pADV93+Q129wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMXz
ryQjNOUIWYGpQuchkbiKCG0aMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81Rjk1OEQ4MjkyQjgxMUVGODVGQUE2NDY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtQcMA0GCSqGSIb3DQEB
CwUAA4IBAQDAEOC8xGNqm/U0Ck+dn5MDhKby3e3QOzL6XJEqye1D+rlrxbNFh8HU
AVYT/neqwvKJWji1J21TktWIe5YFOybx/Koaho6bBCj4fVuYao9nwhddasN1jGj3
svbcQWZdFerKeOsTYsZsbx1juaKRyTz+5+Fdk3x535QsanuLOcN0VNcQHQfaTRH/
U+kfgMu0CgSUTqKH5JIIDfNblxBYEIWiCsgPdLnuWIv8Er/1EA6fohQQprvhtmXI
ERdtOtdfsW7EB4vo1c+HD/78qxAGQYYZv2ZWQY3CGhcE73yGbTUFZai1Jk4x1cyE
vXqLHRE9sf8FhHQ4Bmyg6pyZ0edg8JQ+
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org