Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638797F0A8E311EF9B51A28B762E951A.roa
File: 638797F0A8E311EF9B51A28B762E951A.roa (raw, json)
Hash identifier: 7kXlTU7JDi1PjLwQu7ECDsgC4DTH87V+0b+o8z9qNwc=
Subject key identifier: EF:CB:D9:60:17:E6:CE:31:47:DA:08:EB:4D:D8:6B:D8:81:0E:39:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638797F0A8E311EF9B51A28B762E951A.roa
Signing time: Fri 22 Nov 2024 15:06:45 +0000
ROA not before: Fri 22 Nov 2024 15:06:42 +0000
ROA not after: Tue 03 Dec 2024 15:06:42 +0000
asID: 62240
IP address blocks: 154.194.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69807 (0x110af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:06:42 2024 GMT
Not After : Dec 3 15:06:42 2024 GMT
Subject: CN=67409e05-9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:aa:63:4e:13:35:19:5e:a0:9f:03:6c:c0:
8e:a7:50:70:2e:46:26:bf:19:bc:68:88:82:1f:db:
ba:f4:50:4d:51:ed:8e:e0:22:51:e2:8e:8d:36:ba:
f8:5d:f7:7f:d4:0b:53:78:7a:fe:f1:19:53:f3:9b:
71:5f:41:3e:99:f7:3e:3d:ec:52:bc:fa:92:fb:a5:
32:76:cb:90:b9:59:eb:db:aa:11:fb:48:98:bd:71:
5a:6d:91:67:8f:8a:02:2c:b7:7d:5b:9c:c4:27:38:
93:70:de:f5:7a:28:b2:6c:0c:d9:f5:aa:60:c2:64:
b3:06:75:29:ef:6e:58:f4:67:89:be:37:f8:f5:eb:
fb:ab:4a:ba:14:72:5d:e7:39:0f:ed:53:68:3d:24:
4c:f8:4b:c0:b8:80:78:65:ff:6d:f2:e7:15:23:26:
a2:27:34:36:13:69:d6:6e:dc:ef:4c:a1:d1:03:25:
6a:d8:d2:19:69:1d:86:36:8e:f3:c5:0c:5b:95:aa:
8e:d3:24:a9:8f:c3:6f:4b:25:54:48:2f:6d:6a:53:
58:4f:a6:9c:24:c8:87:2c:ae:bf:79:72:00:3f:8e:
e9:01:19:d6:2c:3c:2d:9f:a0:b7:7c:cd:f4:46:e9:
5e:0b:a4:d4:04:ed:54:3c:6a:11:45:44:41:0b:f3:
ce:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CB:D9:60:17:E6:CE:31:47:DA:08:EB:4D:D8:6B:D8:81:0E:39:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638797F0A8E311EF9B51A28B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c9:0e:31:77:5a:a7:6e:6a:43:68:21:7d:1e:bf:d2:b1:15:
f7:f9:d8:c9:38:e7:bb:e3:f4:46:20:fe:60:18:0e:c6:b6:02:
db:8d:46:dc:90:c7:1c:df:06:b5:d8:14:1e:0e:26:7b:b8:30:
ff:39:12:96:d5:1e:f6:34:87:0b:41:8c:77:49:c4:31:39:fd:
3c:e9:9d:33:16:5e:84:ef:ec:cd:f9:cf:73:2c:7e:ad:4a:4f:
7b:5b:96:54:61:ce:ad:ef:8b:5c:71:72:92:97:80:b4:f4:40:
64:83:a2:62:15:75:d9:36:5e:09:7f:7f:7a:b4:7a:e7:c4:4b:
8b:6b:18:11:d2:15:01:59:ae:6a:77:6e:53:e7:4e:c4:65:21:
12:6c:97:c8:95:14:30:92:06:4f:28:2c:ba:45:da:64:fd:f0:
dd:ba:61:16:5e:f0:c7:5b:5d:68:0b:5e:71:22:56:90:ff:5b:
82:6d:d4:e8:d4:fb:47:69:6c:cf:68:b4:d9:4f:b0:0f:1f:e7:
11:55:04:b8:43:1c:05:9b:be:f7:9c:a8:59:98:d4:d7:9f:38:
85:f2:76:66:25:58:ae:7c:68:28:73:59:dd:18:d3:73:99:8e:
cf:48:b2:49:4e:28:bc:2a:0d:0f:ee:bd:10:cb:ee:4d:ce:af:
bf:44:cc:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARCvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTUwNjQyWhcNMjQxMjAzMTUwNjQyWjAYMRYw
FAYDVQQDEw02NzQwOWUwNS05YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwwSqY04TNRleoJ8DbMCOp1BwLkYmvxm8aIiCH9u69FBNUe2O4CJR4o6N
Nrr4Xfd/1AtTeHr+8RlT85txX0E+mfc+PexSvPqS+6UydsuQuVnr26oR+0iYvXFa
bZFnj4oCLLd9W5zEJziTcN71eiiybAzZ9apgwmSzBnUp725Y9GeJvjf49ev7q0q6
FHJd5zkP7VNoPSRM+EvAuIB4Zf9t8ucVIyaiJzQ2E2nWbtzvTKHRAyVq2NIZaR2G
No7zxQxblaqO0ySpj8NvSyVUSC9talNYT6acJMiHLK6/eXIAP47pARnWLDwtn6C3
fM30RuleC6TUBO1UPGoRRURBC/PO1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFO/L
2WAX5s4xR9oI603Ya9iBDjkGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Mzg3OTdGMEE4RTMxMUVGOUI1MUEyOEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJZMA0GCSqGSIb3DQEB
CwUAA4IBAQAeyQ4xd1qnbmpDaCF9Hr/SsRX3+djJOOe74/RGIP5gGA7GtgLbjUbc
kMcc3wa12BQeDiZ7uDD/ORKW1R72NIcLQYx3ScQxOf086Z0zFl6E7+zN+c9zLH6t
Sk97W5ZUYc6t74tccXKSl4C09EBkg6JiFXXZNl4Jf396tHrnxEuLaxgR0hUBWa5q
d25T507EZSESbJfIlRQwkgZPKCy6Rdpk/fDdumEWXvDHW11oC15xIlaQ/1uCbdTo
1PtHaWzPaLTZT7APH+cRVQS4QxwFm773nKhZmNTXnziF8nZmJViufGgoc1ndGNNz
mY7PSLJJTii8Kg0P7r0Qy+5Nzq+/RMwE
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:33 2024 by rpki-client on console-fra.rpki-client.org