Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63591446864411EF9A1980AD762E951A.roa
File: 63591446864411EF9A1980AD762E951A.roa (raw, json)
Hash identifier: P+sctnfwNd2vZ+irE+rpWqnirQ+zThAYexXD/x7wHYg=
Subject key identifier: A2:DB:9B:6B:E7:D3:B7:0D:B4:97:CF:32:74:FA:9E:33:57:53:94:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FC79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63591446864411EF9A1980AD762E951A.roa
Signing time: Wed 09 Oct 2024 13:42:55 +0000
ROA not before: Wed 09 Oct 2024 13:42:52 +0000
ROA not after: Fri 10 Oct 2025 13:42:52 +0000
asID: 138456
IP address blocks: 154.197.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64633 (0xfc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 9 13:42:52 2024 GMT
Not After : Oct 10 13:42:52 2025 GMT
Subject: CN=6706885f-7741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:bb:0e:c0:df:5b:b9:a3:fd:71:af:56:5a:
65:46:96:c1:87:90:ac:50:88:8f:bd:3e:38:e2:73:
ea:74:d5:02:20:59:12:19:fd:61:4b:40:a7:38:f2:
fb:79:ab:9f:0f:a1:8b:4f:9d:8f:24:88:83:f0:85:
eb:72:af:ee:35:08:aa:1d:0f:90:d5:6f:88:67:ed:
68:d0:16:f4:1c:c6:cc:72:f2:16:3c:0f:b7:9b:96:
11:d6:54:52:37:9c:50:43:b6:2d:45:8c:68:c6:8d:
3c:41:6a:0a:6b:95:01:de:6c:37:3e:44:38:72:29:
ac:5e:5a:a9:4c:e6:cd:a1:57:2a:43:0b:e6:55:3c:
ef:6e:10:f8:5e:69:01:5e:e1:64:97:b9:01:eb:af:
6c:5a:4b:61:ea:03:a6:1e:0d:5d:82:bc:4d:7a:18:
71:3f:83:e8:3d:b0:5b:71:38:f7:6f:ca:38:f6:78:
1d:3f:bc:fe:ac:fa:cc:9b:6e:a5:3e:3e:2d:e6:ce:
a2:fa:0a:f6:4f:92:2e:56:7b:5b:be:54:8c:9b:5c:
02:a7:41:02:52:58:4b:f8:a0:db:91:d0:6c:a2:25:
e6:85:ba:39:66:ce:e2:5c:13:9c:ce:90:39:97:5b:
ab:0c:43:ee:6a:a3:c2:cf:92:e9:ba:fa:58:99:34:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:9B:6B:E7:D3:B7:0D:B4:97:CF:32:74:FA:9E:33:57:53:94:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63591446864411EF9A1980AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.52.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:a6:c3:dd:74:21:2f:9d:69:1f:c2:ad:fb:de:71:f1:bf:01:
4a:e1:5f:0c:4d:f4:5e:dd:54:89:c3:02:ff:ba:fe:4d:d0:40:
48:79:0d:a2:f7:41:9e:18:88:fc:5d:2c:dd:65:58:ff:cb:63:
b0:36:e6:65:31:24:ba:a9:df:ba:c1:5e:58:c5:75:fe:e0:30:
e0:d1:4a:ac:f6:c7:15:b6:ce:13:c0:cb:b6:ec:dc:d8:88:0b:
22:e4:58:e9:25:88:cf:b1:27:9c:0e:45:54:34:6c:92:67:9f:
ca:81:97:4f:a4:ed:68:2d:e9:64:78:7f:a1:9f:8b:1b:c8:e9:
22:78:09:1b:34:38:b5:f2:3e:e1:d8:ce:60:64:31:ee:60:2e:
ee:7c:3e:ae:6b:ed:da:9c:6b:97:fa:0e:f7:ea:6f:44:66:95:
e1:bb:ac:39:3c:30:29:98:9b:c5:b5:e5:24:64:56:b6:3a:8c:
c1:d9:4c:34:f6:e2:54:a2:2a:6c:f3:6c:9b:20:c3:c5:b8:b5:
43:17:2e:33:f5:c6:71:a0:e7:7a:6a:bc:f3:02:b1:11:d1:a2:
a1:42:3b:17:89:49:50:f9:b3:09:d2:2c:b0:e7:ae:49:cb:45:
7e:66:b0:29:f6:c7:36:8a:a1:36:b5:8d:cb:49:88:2e:e1:0e:
bd:70:d9:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPx5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDA5MTM0MjUyWhcNMjUxMDEwMTM0MjUyWjAYMRYw
FAYDVQQDEw02NzA2ODg1Zi03NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw0C7DsDfW7mj/XGvVlplRpbBh5CsUIiPvT444nPqdNUCIFkSGf1hS0Cn
OPL7eaufD6GLT52PJIiD8IXrcq/uNQiqHQ+Q1W+IZ+1o0Bb0HMbMcvIWPA+3m5YR
1lRSN5xQQ7YtRYxoxo08QWoKa5UB3mw3PkQ4cimsXlqpTObNoVcqQwvmVTzvbhD4
XmkBXuFkl7kB669sWkth6gOmHg1dgrxNehhxP4PoPbBbcTj3b8o49ngdP7z+rPrM
m26lPj4t5s6i+gr2T5IuVntbvlSMm1wCp0ECUlhL+KDbkdBsoiXmhbo5Zs7iXBOc
zpA5l1urDEPuaqPCz5LpuvpYmTROqwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKLb
m2vn07cNtJfPMnT6njNXU5QwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MzU5MTQ0Njg2NDQxMUVGOUExOTgwQUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsU0MA0GCSqGSIb3DQEB
CwUAA4IBAQB9psPddCEvnWkfwq373nHxvwFK4V8MTfRe3VSJwwL/uv5N0EBIeQ2i
90GeGIj8XSzdZVj/y2OwNuZlMSS6qd+6wV5YxXX+4DDg0Uqs9scVts4TwMu27NzY
iAsi5FjpJYjPsSecDkVUNGySZ5/KgZdPpO1oLelkeH+hn4sbyOkieAkbNDi18j7h
2M5gZDHuYC7ufD6ua+3anGuX+g736m9EZpXhu6w5PDApmJvFteUkZFa2OozB2Uw0
9uJUoips82ybIMPFuLVDFy4z9cZxoOd6arzzArER0aKhQjsXiUlQ+bMJ0iyw565J
y0V+ZrAp9sc2iqE2tY3LSYgu4Q69cNm1
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:07 2024 by rpki-client on console-ams.rpki-client.org