Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D4E25A911F11EF9A8B56B6762E951A.roa
File: 65D4E25A911F11EF9A8B56B6762E951A.roa (raw, json)
Hash identifier: ajTJ645pFlDE6Gn4w94c81xPxw4cTtNmqfTVlohxCCM=
Subject key identifier: E0:97:46:2B:58:28:6F:2E:5B:45:16:BC:99:17:9C:98:C6:6F:49:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0100F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D4E25A911F11EF9A8B56B6762E951A.roa
Signing time: Wed 23 Oct 2024 09:15:51 +0000
ROA not before: Wed 23 Oct 2024 09:15:47 +0000
ROA not after: Tue 26 Nov 2024 09:15:47 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65776 (0x100f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:15:47 2024 GMT
Not After : Nov 26 09:15:47 2024 GMT
Subject: CN=6718bec7-c249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:c6:2d:10:98:7e:b3:45:70:d1:1a:85:16:
a2:9c:dd:09:39:3d:27:56:41:44:09:bf:92:08:22:
0d:31:ee:b4:e8:7a:6c:52:e5:ee:30:1a:b7:1a:51:
72:af:03:57:44:cd:b2:69:3b:61:e7:29:e1:5d:e5:
00:b3:dc:08:8c:0d:97:15:1e:f8:27:18:13:e9:8f:
dd:b2:fd:15:a2:e1:85:4d:5e:70:70:f8:fe:71:c5:
9c:13:14:88:18:e0:25:c3:57:ea:4b:1c:70:6f:5d:
27:84:96:dd:79:47:99:b4:55:f4:cb:a7:57:79:99:
23:60:a2:3c:1f:b7:ec:91:b4:0c:ba:65:ee:e5:87:
f2:bd:f0:7c:da:2b:d2:dd:db:30:7b:45:68:11:ca:
e6:4d:16:f6:35:71:e0:3e:61:7c:3b:b6:4a:1d:57:
fd:0b:67:8e:30:83:f5:52:b4:fe:ab:8c:92:b4:25:
35:5a:20:38:f0:d1:42:4d:cd:38:72:b2:2f:1a:16:
bb:b7:0b:d1:70:85:d8:27:df:c6:53:15:bc:e3:1e:
a7:df:0a:af:c0:8a:e1:b9:7f:d7:d4:d8:66:45:d1:
a9:d4:a9:0d:bf:3c:59:70:64:4b:82:85:6b:9c:3e:
f7:a6:8d:08:da:ea:22:b9:be:a4:bc:87:cd:50:b2:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:46:2B:58:28:6F:2E:5B:45:16:BC:99:17:9C:98:C6:6F:49:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D4E25A911F11EF9A8B56B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:ac:d0:69:e6:47:ca:ba:52:fa:65:e9:2f:32:ea:97:d7:9a:
94:5c:23:77:da:e2:d5:8b:bc:21:05:78:c0:f5:bd:e9:39:81:
c4:1d:b9:ca:ba:ed:61:ed:d3:29:d0:d2:e5:76:ab:fb:d2:42:
6a:05:c8:22:bf:04:3d:c5:3b:45:fc:2f:84:5e:90:4c:ec:57:
b4:5f:90:6d:d7:b1:05:f4:63:28:11:4d:71:0b:9a:f5:db:76:
b9:54:b1:17:7d:d0:ea:4f:8f:ec:a4:f2:22:6b:58:f7:03:ff:
c6:8d:37:a9:b3:29:b8:75:5e:1e:62:23:46:de:c4:ce:2d:74:
c8:50:46:cf:37:d3:12:09:dc:58:ee:a5:eb:29:42:a2:bd:15:
50:ca:13:e4:9f:f8:29:9f:8c:68:c4:8d:f3:55:f0:60:92:8b:
b9:11:d0:24:54:eb:49:af:85:b3:76:94:a6:28:6f:f3:56:9e:
e6:b6:f8:a8:28:e9:42:41:b4:24:65:0f:c7:6c:9c:ec:72:a3:
44:0e:59:7c:c6:df:d9:33:c4:01:53:dd:f2:ad:0b:8b:ad:8f:
90:24:ee:65:e7:63:83:bb:df:52:0c:96:fc:93:de:a6:1f:a2:
b0:f7:eb:4d:8c:e7:8c:ab:ee:36:ac:f3:af:3a:f5:38:5d:c1:
c2:32:74:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQDwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIzMDkxNTQ3WhcNMjQxMTI2MDkxNTQ3WjAYMRYw
FAYDVQQDEw02NzE4YmVjNy1jMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoCvGLRCYfrNFcNEahRainN0JOT0nVkFECb+SCCINMe606HpsUuXuMBq3
GlFyrwNXRM2yaTth5ynhXeUAs9wIjA2XFR74JxgT6Y/dsv0VouGFTV5wcPj+ccWc
ExSIGOAlw1fqSxxwb10nhJbdeUeZtFX0y6dXeZkjYKI8H7fskbQMumXu5YfyvfB8
2ivS3dswe0VoEcrmTRb2NXHgPmF8O7ZKHVf9C2eOMIP1UrT+q4yStCU1WiA48NFC
Tc04crIvGha7twvRcIXYJ9/GUxW84x6n3wqvwIrhuX/X1NhmRdGp1KkNvzxZcGRL
goVrnD73po0I2uoiub6kvIfNULJubwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOCX
RitYKG8uW0UWvJkXnJjGb0mgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82NUQ0RTI1QTkxMUYxMUVGOUE4QjU2QjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+rNBp5kfKulL6ZekvMuqX15qUXCN32uLVi7whBXjA9b3pOYHEHbnK
uu1h7dMp0NLldqv70kJqBcgivwQ9xTtF/C+EXpBM7Fe0X5Bt17EF9GMoEU1xC5r1
23a5VLEXfdDqT4/spPIia1j3A//GjTepsym4dV4eYiNG3sTOLXTIUEbPN9MSCdxY
7qXrKUKivRVQyhPkn/gpn4xoxI3zVfBgkou5EdAkVOtJr4WzdpSmKG/zVp7mtvio
KOlCQbQkZQ/HbJzscqNEDll8xt/ZM8QBU93yrQuLrY+QJO5l52ODu99SDJb8k96m
H6Kw9+tNjOeMq+42rPOvOvU4XcHCMnTK
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:14 2024 by rpki-client on console-ams.rpki-client.org