Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/629CCAD6A8DE11EFB8FF706C762E951A.roa
File: 629CCAD6A8DE11EFB8FF706C762E951A.roa (raw, json)
Hash identifier: 6QHJbxkxbs27U4bIRhhIgJv/Ow4yT3wKL9/9k9cCvgY=
Subject key identifier: BE:E7:51:EF:F0:11:26:CA:B7:41:D8:CF:65:FE:42:C0:5D:91:0B:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011073
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/629CCAD6A8DE11EFB8FF706C762E951A.roa
Signing time: Fri 22 Nov 2024 14:30:56 +0000
ROA not before: Fri 22 Nov 2024 14:30:53 +0000
ROA not after: Tue 03 Dec 2024 14:30:53 +0000
asID: 8796
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69747 (0x11073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:30:53 2024 GMT
Not After : Dec 3 14:30:53 2024 GMT
Subject: CN=674095a0-d807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:2b:cd:33:93:b6:c0:04:e9:9c:82:2b:e7:
77:64:05:e9:69:21:56:9c:4d:59:47:9b:2c:7f:af:
91:ca:19:4e:e3:32:be:77:40:4d:2f:1b:79:51:80:
0d:1f:60:9f:e7:8c:bd:33:6c:66:2f:92:60:4f:b3:
8d:5d:ce:31:6f:cf:7b:47:de:98:7b:a7:d7:74:74:
11:de:31:73:9b:8c:90:0d:54:08:fc:b1:b0:18:45:
3e:6d:33:f6:d8:42:51:1f:c7:09:5f:45:49:9c:ad:
a5:79:55:d9:eb:36:3e:d7:a6:5a:3a:da:8f:31:89:
89:f8:4a:6d:63:08:64:e0:66:d3:19:cf:30:25:e7:
d0:c0:c8:81:15:65:76:11:79:62:ed:fa:a7:a8:35:
b6:d4:79:3c:6d:99:4d:4b:22:4e:93:a8:6b:b9:8f:
19:c1:84:c7:25:0a:c3:3c:92:dd:73:f4:72:04:4f:
ba:f5:21:7a:df:d9:72:96:e3:4c:81:20:85:da:9b:
7e:1c:33:31:7f:bb:f5:db:97:0f:34:2b:50:db:74:
83:ac:be:28:d7:68:ec:e6:a7:41:c9:d8:22:c6:71:
7b:67:65:13:7b:b7:9e:2f:65:39:54:8a:88:8a:f1:
8c:c5:55:a0:7f:c3:3b:70:1d:ad:17:c1:c3:b9:68:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:51:EF:F0:11:26:CA:B7:41:D8:CF:65:FE:42:C0:5D:91:0B:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/629CCAD6A8DE11EFB8FF706C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
72:b4:93:87:bd:0e:0d:af:ca:4b:9a:49:aa:5d:bd:c9:c3:e4:
53:48:42:29:a2:85:e7:ae:d8:fa:93:d8:62:33:48:c1:0a:51:
09:4e:5e:a5:9b:5a:a6:7a:18:5b:1b:a0:c8:06:ae:7a:3a:6c:
c6:1e:bb:40:e9:fd:4f:b3:7a:43:80:e3:83:db:c8:0c:38:ff:
88:ab:22:dd:76:e1:24:de:44:fd:97:18:f4:d4:29:44:cd:39:
17:e7:d0:c4:46:33:72:08:66:f7:85:4e:4c:e2:e2:a3:64:ca:
1d:dc:ed:fa:74:53:78:ae:5c:3c:0a:56:f3:a2:a6:80:05:6b:
a2:69:fc:76:8e:08:f5:91:3a:87:6d:1d:5e:1a:94:2d:dc:11:
cf:2b:bf:dd:aa:40:b4:0a:35:d0:18:bf:e9:a3:99:f2:37:f4:
04:db:22:0f:77:18:23:a8:b0:6a:65:1b:7d:6b:63:f5:9e:72:
e1:86:8f:77:55:30:6a:e6:a6:fe:c2:6d:9c:ea:c4:8a:cf:a9:
8b:d6:1f:a8:8b:57:a1:44:d7:46:d8:a4:3a:d2:df:9a:d7:2c:
66:d2:02:d1:7b:3b:00:f0:bb:e1:f1:99:d6:a0:c4:05:2b:66:
27:36:03:44:63:cb:ff:96:07:e0:bb:dd:6a:aa:c9:29:8d:9b:
0a:30:7f:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARBzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTQzMDUzWhcNMjQxMjAzMTQzMDUzWjAYMRYw
FAYDVQQDEw02NzQwOTVhMC1kODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvoUrzTOTtsAE6ZyCK+d3ZAXpaSFWnE1ZR5ssf6+RyhlO4zK+d0BNLxt5
UYANH2Cf54y9M2xmL5JgT7ONXc4xb897R96Ye6fXdHQR3jFzm4yQDVQI/LGwGEU+
bTP22EJRH8cJX0VJnK2leVXZ6zY+16ZaOtqPMYmJ+EptYwhk4GbTGc8wJefQwMiB
FWV2EXli7fqnqDW21Hk8bZlNSyJOk6hruY8ZwYTHJQrDPJLdc/RyBE+69SF639ly
luNMgSCF2pt+HDMxf7v125cPNCtQ23SDrL4o12js5qdBydgixnF7Z2UTe7eeL2U5
VIqIivGMxVWgf8M7cB2tF8HDuWiksQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL7n
Ue/wESbKt0HYz2X+QsBdkQvIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MjlDQ0FENkE4REUxMUVGQjhGRjcwNkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmslIMA0GCSqGSIb3DQEB
CwUAA4IBAQBytJOHvQ4Nr8pLmkmqXb3Jw+RTSEIpooXnrtj6k9hiM0jBClEJTl6l
m1qmehhbG6DIBq56OmzGHrtA6f1Ps3pDgOOD28gMOP+IqyLdduEk3kT9lxj01ClE
zTkX59DERjNyCGb3hU5M4uKjZMod3O36dFN4rlw8ClbzoqaABWuiafx2jgj1kTqH
bR1eGpQt3BHPK7/dqkC0CjXQGL/po5nyN/QE2yIPdxgjqLBqZRt9a2P1nnLhho93
VTBq5qb+wm2c6sSKz6mL1h+oi1ehRNdG2KQ60t+a1yxm0gLRezsA8Lvh8ZnWoMQF
K2YnNgNEY8v/lgfgu91qqskpjZsKMH+Q
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:13 2024 by rpki-client on console-ams.rpki-client.org