Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A2C2ECA9BD11EF94B8C465762E951A.roa
File: 69A2C2ECA9BD11EF94B8C465762E951A.roa (raw, json)
Hash identifier: YwvmuGHj0nNTDym+6hW4Q+awrlUYppwVU7YxqtfZYKk=
Subject key identifier: CA:DC:30:78:3E:67:4D:AC:62:DC:EB:09:E9:85:F8:51:9A:60:FA:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A2C2ECA9BD11EF94B8C465762E951A.roa
Signing time: Sat 23 Nov 2024 17:07:26 +0000
ROA not before: Sat 23 Nov 2024 17:07:22 +0000
ROA not after: Mon 02 Dec 2024 17:07:22 +0000
asID: 44559
IP address blocks: 154.211.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70062 (0x111ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:07:22 2024 GMT
Not After : Dec 2 17:07:22 2024 GMT
Subject: CN=67420bce-fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:ba:ab:27:4e:fa:e2:55:40:21:d3:2e:65:
59:e4:c1:25:0a:55:f1:79:e0:15:f8:7a:8a:ef:d7:
05:a8:1e:71:57:6d:94:b7:f0:25:93:65:5b:65:ee:
8f:1a:2d:c0:71:6b:c0:91:58:84:c0:99:d2:a7:e5:
d6:55:b7:b0:77:2b:3f:d7:41:37:bf:40:84:cd:bf:
02:bf:81:84:cc:37:b8:5e:ee:41:6b:99:4d:b6:40:
6c:5f:18:38:9c:a5:47:42:db:26:19:fa:0f:be:e2:
87:6f:b6:c8:8d:5a:14:3e:46:3a:b5:f5:b2:6c:99:
80:05:0c:95:e6:ee:2c:b0:3f:25:01:de:03:12:3e:
08:09:51:88:3b:7f:cf:b1:75:07:23:08:80:2e:ea:
ee:af:01:bf:93:ea:0a:b0:61:b4:22:29:ed:4f:be:
19:0e:aa:5b:47:24:0d:0d:95:45:3a:e8:7e:d7:2e:
55:bc:5b:96:6b:cd:d6:80:89:94:ce:dc:21:93:fd:
56:5e:ec:1d:b2:1a:d5:fd:6a:44:db:18:22:b3:e6:
95:ea:4c:3b:1f:2a:6a:0c:7c:41:83:6d:13:eb:8a:
7b:88:f7:47:6b:35:fe:c2:7e:a7:e8:7b:32:b4:03:
a1:5e:1a:ed:80:f6:37:49:f1:c8:86:ca:69:13:c3:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DC:30:78:3E:67:4D:AC:62:DC:EB:09:E9:85:F8:51:9A:60:FA:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69A2C2ECA9BD11EF94B8C465762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.47.0/24
Signature Algorithm: sha256WithRSAEncryption
27:05:c8:22:c1:67:8c:ff:9e:20:e1:ed:1e:e7:c9:c8:c6:bb:
5e:f4:20:3b:29:6d:83:20:33:9a:ee:a5:ec:dc:0c:20:47:db:
e8:ef:5a:54:b8:9c:32:c9:b0:18:5e:ff:d2:8b:82:4e:90:9d:
21:3a:75:9a:0e:42:1a:e1:9d:8d:ff:1b:f1:41:ee:af:44:1f:
4b:64:75:fa:94:0e:d5:cc:f4:fc:62:44:9e:ca:e8:1e:3e:a8:
43:cb:ac:23:5e:20:f8:eb:3a:4e:61:98:5e:ae:e7:5b:94:f1:
0d:14:dd:ee:4d:4a:86:5c:ec:db:7f:41:e8:83:91:e7:9f:c5:
9d:d7:db:5e:51:83:59:df:37:98:2a:d0:97:f0:94:2e:11:72:
04:56:ec:43:43:dc:39:16:e4:25:17:27:97:ed:57:d9:b9:7a:
89:42:c5:55:b3:0b:e1:ea:6c:bc:45:80:bd:2b:71:28:cf:93:
e2:72:bf:47:b2:66:7c:f1:3e:74:25:f3:31:67:a5:33:ca:2a:
56:82:69:3e:b1:07:de:24:c5:93:27:63:15:2e:99:7b:fa:1a:
bf:65:45:ff:0c:46:9a:33:76:19:c6:e9:99:e7:29:3e:7f:aa:
e4:5d:12:5a:93:8a:1b:79:35:eb:d1:40:cc:bf:dc:8c:d0:ee:
91:bb:e8:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARGuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTcwNzIyWhcNMjQxMjAyMTcwNzIyWjAYMRYw
FAYDVQQDEw02NzQyMGJjZS1mZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuFa6qydO+uJVQCHTLmVZ5MElClXxeeAV+HqK79cFqB5xV22Ut/Alk2Vb
Ze6PGi3AcWvAkViEwJnSp+XWVbewdys/10E3v0CEzb8Cv4GEzDe4Xu5Ba5lNtkBs
Xxg4nKVHQtsmGfoPvuKHb7bIjVoUPkY6tfWybJmABQyV5u4ssD8lAd4DEj4ICVGI
O3/PsXUHIwiALururwG/k+oKsGG0IintT74ZDqpbRyQNDZVFOuh+1y5VvFuWa83W
gImUztwhk/1WXuwdshrV/WpE2xgis+aV6kw7HypqDHxBg20T64p7iPdHazX+wn6n
6HsytAOhXhrtgPY3SfHIhsppE8N1UQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMrc
MHg+Z02sYtzrCemF+FGaYPoFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUEyQzJFQ0E5QkQxMUVGOTRCOEM0NjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMvMA0GCSqGSIb3DQEB
CwUAA4IBAQAnBcgiwWeM/54g4e0e58nIxrte9CA7KW2DIDOa7qXs3AwgR9vo71pU
uJwyybAYXv/Si4JOkJ0hOnWaDkIa4Z2N/xvxQe6vRB9LZHX6lA7VzPT8YkSeyuge
PqhDy6wjXiD46zpOYZherudblPENFN3uTUqGXOzbf0Hog5Hnn8Wd19teUYNZ3zeY
KtCX8JQuEXIEVuxDQ9w5FuQlFyeX7VfZuXqJQsVVswvh6my8RYC9K3Eoz5Picr9H
smZ88T50JfMxZ6UzyipWgmk+sQfeJMWTJ2MVLpl7+hq/ZUX/DEaaM3YZxumZ5yk+
f6rkXRJak4obeTXr0UDMv9yM0O6Ru+gt
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:33 2024 by rpki-client on console-fra.rpki-client.org