Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64ADBC34480A11EF84219FAB762E951A.roa
File: 64ADBC34480A11EF84219FAB762E951A.roa (raw, json)
Hash identifier: 862Y0tEfGCuWrKySqSAyCqN1TkuIDZqKE/PKsOF/Tpc=
Subject key identifier: AB:72:7D:82:1F:61:EC:78:71:F6:4C:BB:6F:CE:55:42:1B:A1:D1:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D4BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64ADBC34480A11EF84219FAB762E951A.roa
Signing time: Mon 22 Jul 2024 09:11:35 +0000
ROA not before: Mon 22 Jul 2024 09:11:31 +0000
ROA not after: Sat 03 May 2025 09:11:31 +0000
asID: 63199
IP address blocks: 154.204.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54462 (0xd4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 09:11:31 2024 GMT
Not After : May 3 09:11:31 2025 GMT
Subject: CN=669e2247-4fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:dd:b3:a8:33:53:02:a9:40:ac:8e:13:5b:
75:2f:07:9c:ec:56:8e:cd:b7:e3:90:19:12:7e:c9:
44:84:84:4b:5d:cb:cc:cc:94:bc:30:6b:ec:03:dc:
d0:91:3e:c2:f7:1b:9e:2a:78:aa:9f:7a:5d:0d:2e:
fd:7f:e4:ae:00:3b:c7:1f:d8:8e:4f:d1:2f:69:65:
3c:6e:c7:a9:8d:5f:e4:20:d0:36:d9:28:dd:b2:d4:
92:91:4a:b4:fb:7f:ca:8f:2c:46:1c:7e:0b:6d:04:
64:ba:9b:3b:e5:47:99:a5:8b:8d:36:b5:d2:db:68:
00:bf:3a:dd:1f:19:3c:ce:c5:97:a4:78:02:bd:62:
eb:53:aa:eb:12:a0:39:14:0c:74:75:3c:51:1b:47:
e3:c9:f1:45:b2:e8:28:a0:03:41:0e:97:3d:eb:22:
8d:4c:48:f2:f5:37:37:ea:60:f3:d0:cd:37:5c:a4:
03:33:35:35:10:a2:96:93:7b:53:67:b8:0d:ac:60:
c5:66:39:4f:40:88:a2:7d:23:0d:ed:07:04:8a:00:
0c:cd:2b:39:5d:c1:ed:d8:81:b5:dc:0e:52:57:d8:
96:03:87:9d:8b:7a:f7:e4:91:07:ed:aa:72:de:c0:
78:72:9f:a6:ca:d4:bf:ad:e6:f9:fd:36:d9:8c:59:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:72:7D:82:1F:61:EC:78:71:F6:4C:BB:6F:CE:55:42:1B:A1:D1:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64ADBC34480A11EF84219FAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4d:27:37:69:05:b7:be:5c:23:90:24:46:7d:75:da:f5:9d:
f4:c4:54:99:b7:db:b2:66:6c:8a:d4:37:cf:91:bd:30:ef:d8:
8f:3a:0e:cb:59:03:c6:14:47:fe:a9:36:53:c2:ef:23:99:c6:
15:94:81:79:eb:35:aa:cd:d7:f5:f3:bb:86:62:92:43:8e:7d:
4f:5e:38:03:67:b3:1a:a9:d5:cf:b5:cc:d2:88:d8:1d:33:52:
ca:1d:18:24:e0:98:d1:38:52:4c:5f:bb:8c:ba:66:f7:8d:c8:
6b:e2:3e:07:ae:9c:0b:87:09:79:3a:a0:b1:90:c7:b2:83:02:
2e:30:b4:3b:44:14:f8:8c:b9:5e:e8:56:57:17:c3:f3:4b:a7:
6c:3c:ef:fe:89:fc:cf:96:b8:b0:c2:dd:44:95:3b:70:c7:bf:
04:60:ef:85:91:41:21:99:c1:e8:1a:fc:1b:7a:df:9d:25:60:
ca:a8:4b:12:55:fd:bb:18:36:4f:dc:83:ba:35:ad:7f:de:d4:
ad:5d:e0:79:2d:c9:76:f0:2e:86:da:e9:cd:3d:c4:97:86:3d:
82:83:36:e9:6b:94:bd:ca:92:bf:5e:49:fb:43:71:83:b3:f5:
6a:43:4b:82:1d:35:0a:f1:a6:d3:f3:7c:6a:cd:f9:84:61:79:
50:34:43:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANS+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzIyMDkxMTMxWhcNMjUwNTAzMDkxMTMxWjAYMRYw
FAYDVQQDEw02NjllMjI0Ny00ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp9nds6gzUwKpQKyOE1t1Lwec7FaOzbfjkBkSfslEhIRLXcvMzJS8MGvs
A9zQkT7C9xueKniqn3pdDS79f+SuADvHH9iOT9EvaWU8bsepjV/kINA22SjdstSS
kUq0+3/KjyxGHH4LbQRkups75UeZpYuNNrXS22gAvzrdHxk8zsWXpHgCvWLrU6rr
EqA5FAx0dTxRG0fjyfFFsugooANBDpc96yKNTEjy9Tc36mDz0M03XKQDMzU1EKKW
k3tTZ7gNrGDFZjlPQIiifSMN7QcEigAMzSs5XcHt2IG13A5SV9iWA4edi3r35JEH
7apy3sB4cp+mytS/reb5/TbZjFl8iwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKty
fYIfYex4cfZMu2/OVUIbodGJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NEFEQkMzNDQ4MEExMUVGODQyMTlGQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmswHMA0GCSqGSIb3DQEB
CwUAA4IBAQBjTSc3aQW3vlwjkCRGfXXa9Z30xFSZt9uyZmyK1DfPkb0w79iPOg7L
WQPGFEf+qTZTwu8jmcYVlIF56zWqzdf187uGYpJDjn1PXjgDZ7MaqdXPtczSiNgd
M1LKHRgk4JjROFJMX7uMumb3jchr4j4HrpwLhwl5OqCxkMeygwIuMLQ7RBT4jLle
6FZXF8PzS6dsPO/+ifzPlriwwt1ElTtwx78EYO+FkUEhmcHoGvwbet+dJWDKqEsS
Vf27GDZP3IO6Na1/3tStXeB5Lcl28C6G2unNPcSXhj2Cgzbpa5S9ypK/Xkn7Q3GD
s/VqQ0uCHTUK8abT83xqzfmEYXlQNEPK
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org