Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A3F6B45F1711EF8FE53D96762E951A.roa
File: 62A3F6B45F1711EF8FE53D96762E951A.roa (raw, json)
Hash identifier: XH+8VFqVpKaZX+EQV8UJOXCkkRz2pEWP6YokgFIeu1Y=
Subject key identifier: D9:9E:67:D9:4E:DF:38:6D:7B:1B:F0:7F:BB:D3:54:55:DB:D1:61:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E344
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A3F6B45F1711EF8FE53D96762E951A.roa
Signing time: Tue 20 Aug 2024 17:12:32 +0000
ROA not before: Tue 20 Aug 2024 17:12:28 +0000
ROA not after: Tue 21 Jan 2025 17:12:28 +0000
asID: 63199
IP address blocks: 154.223.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58180 (0xe344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 17:12:28 2024 GMT
Not After : Jan 21 17:12:28 2025 GMT
Subject: CN=66c4ce7f-4e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:5e:b6:f1:cf:8a:ee:5f:33:0d:be:2e:fb:
49:f5:a4:29:db:78:0b:4d:53:71:52:3d:4d:18:1f:
fe:c1:6b:8e:d9:2d:89:06:c0:84:4e:d9:03:dc:33:
84:f2:dc:99:b5:ee:c4:57:03:d0:72:72:4b:24:07:
c0:4d:19:33:1d:08:36:70:55:c9:66:9c:d5:ae:75:
03:16:19:14:a6:70:92:14:fe:7b:27:ca:97:70:ce:
2c:ee:87:cb:8b:f1:c2:47:58:1c:dd:e0:b5:ee:e1:
b4:68:27:ff:07:fd:a1:ce:e9:12:0e:7c:3c:3b:df:
a7:1d:a5:f3:ea:5a:df:34:36:7b:22:d0:56:4f:56:
f6:49:c0:2e:bb:3c:fb:b1:3a:0f:47:1e:47:18:df:
7b:1b:b0:61:55:3f:50:2b:fa:66:28:14:e9:72:c0:
26:90:b2:68:6d:b1:c3:b5:48:60:73:e6:02:2d:32:
ac:6d:b6:ea:8d:b1:e3:36:36:7e:ec:98:6b:9b:08:
b0:a2:f3:dc:04:11:e1:b4:18:6b:e7:64:0e:cc:58:
fc:a7:ba:db:27:2d:59:bb:4f:28:c8:99:62:11:ed:
0b:18:98:6f:50:89:ec:cb:52:bb:73:2d:52:cb:1d:
34:7c:14:96:77:b5:6f:21:4f:b3:a9:35:10:1c:d8:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9E:67:D9:4E:DF:38:6D:7B:1B:F0:7F:BB:D3:54:55:DB:D1:61:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62A3F6B45F1711EF8FE53D96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.84.0/22
Signature Algorithm: sha256WithRSAEncryption
32:6d:38:c2:4d:69:59:62:a2:ac:f9:37:17:75:81:a9:6d:91:
0e:e3:82:cf:6e:20:82:c6:03:f8:f7:d3:24:5e:84:32:02:26:
10:0a:11:1a:43:24:70:bd:3f:02:da:e9:1e:3b:c6:8e:7f:44:
ea:42:76:1e:32:a4:00:8c:80:29:13:0b:1a:68:69:f6:df:83:
6a:e6:9e:8a:2e:88:29:03:ea:dc:cd:61:88:ec:fa:25:a1:44:
8e:4f:c3:0e:47:60:56:90:01:a2:68:15:0a:e8:9b:aa:d7:bc:
3b:ad:9f:40:87:93:f4:fd:25:05:6b:11:81:b1:32:80:78:63:
35:71:ef:06:1e:ca:f1:bf:a5:b4:18:d3:56:ca:2b:e7:7e:86:
a6:5b:a1:4e:c1:64:c2:3c:b2:78:9b:f1:a2:3f:c5:2e:a3:83:
97:d4:49:d2:f5:77:12:65:c2:44:c7:59:d9:32:4d:89:08:ce:
eb:d9:84:8b:69:0e:36:82:22:83:4d:71:26:82:82:92:70:bb:
a5:de:4f:88:c1:56:a8:16:05:6d:db:00:ad:d3:4a:db:cf:7f:
68:c8:d4:10:98:4f:f9:94:66:7a:43:98:f5:b0:82:47:af:9d:
51:2a:de:70:b8:b9:c8:ae:f0:8d:36:db:b4:bd:dd:e6:fc:80:
69:dc:77:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAONEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODIwMTcxMjI4WhcNMjUwMTIxMTcxMjI4WjAYMRYw
FAYDVQQDEw02NmM0Y2U3Zi00ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx8xetvHPiu5fMw2+LvtJ9aQp23gLTVNxUj1NGB/+wWuO2S2JBsCETtkD
3DOE8tyZte7EVwPQcnJLJAfATRkzHQg2cFXJZpzVrnUDFhkUpnCSFP57J8qXcM4s
7ofLi/HCR1gc3eC17uG0aCf/B/2hzukSDnw8O9+nHaXz6lrfNDZ7ItBWT1b2ScAu
uzz7sToPRx5HGN97G7BhVT9QK/pmKBTpcsAmkLJobbHDtUhgc+YCLTKsbbbqjbHj
NjZ+7JhrmwiwovPcBBHhtBhr52QOzFj8p7rbJy1Zu08oyJliEe0LGJhvUInsy1K7
cy1Syx00fBSWd7VvIU+zqTUQHNiVawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNme
Z9lO3zhtexvwf7vTVFXb0WEAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MkEzRjZCNDVGMTcxMUVGOEZFNTNEOTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt9UMA0GCSqGSIb3DQEB
CwUAA4IBAQAybTjCTWlZYqKs+TcXdYGpbZEO44LPbiCCxgP499MkXoQyAiYQChEa
QyRwvT8C2ukeO8aOf0TqQnYeMqQAjIApEwsaaGn234Nq5p6KLogpA+rczWGI7Pol
oUSOT8MOR2BWkAGiaBUK6Juq17w7rZ9Ah5P0/SUFaxGBsTKAeGM1ce8GHsrxv6W0
GNNWyivnfoamW6FOwWTCPLJ4m/GiP8Uuo4OX1EnS9XcSZcJEx1nZMk2JCM7r2YSL
aQ42giKDTXEmgoKScLul3k+IwVaoFgVt2wCt00rbz39oyNQQmE/5lGZ6Q5j1sIJH
r51RKt5wuLnIrvCNNtu0vd3m/IBp3Hcr
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org