Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B68E5B874CD11EF954FE047762E951A.roa
File: 6B68E5B874CD11EF954FE047762E951A.roa (raw, json)
Hash identifier: Z0pTdso3Lgd88uyBCBtr7BLPKEFiVEs5S/vYSi1O+jc=
Subject key identifier: 83:AC:BE:93:A3:26:94:DF:9C:42:A8:99:79:23:DD:2D:9D:4B:DB:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B68E5B874CD11EF954FE047762E951A.roa
Signing time: Tue 17 Sep 2024 08:18:29 +0000
ROA not before: Tue 17 Sep 2024 08:18:26 +0000
ROA not after: Sat 30 Nov 2024 08:18:26 +0000
asID: 142403
IP address blocks: 154.211.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61432 (0xeff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:18:26 2024 GMT
Not After : Nov 30 08:18:26 2024 GMT
Subject: CN=66e93b55-b0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:59:d0:6f:1f:36:ca:57:00:81:79:23:1a:ca:
e0:0d:eb:24:b6:69:cc:d5:f5:78:95:79:4f:42:1d:
c8:1d:26:bd:67:50:88:a0:6d:42:82:6d:2a:ea:32:
91:e9:d4:05:4b:8c:68:13:ab:be:d9:f0:3f:1b:c4:
ea:ef:ec:d0:0b:0a:bd:1e:6c:42:39:ee:b9:0c:46:
17:97:e2:bb:50:82:7e:dc:f3:2f:8e:ab:f6:ff:d4:
2e:53:20:60:dc:99:6a:b1:38:30:c0:3b:d5:d0:1d:
3f:34:f6:eb:73:9e:1e:3f:90:7e:c6:ef:89:c4:1e:
b4:da:9c:a9:f0:b0:96:17:0e:63:25:bd:60:e6:54:
6e:c0:fa:3e:44:dc:7c:72:e1:a3:6a:1e:d2:9e:5e:
48:47:4d:eb:e2:36:09:5a:e6:37:f3:dd:77:c6:38:
96:18:a4:6c:64:d7:38:24:fe:22:fa:4a:5c:63:3f:
78:cf:ef:c5:4e:3b:73:b8:37:69:d1:9c:8c:ed:29:
95:02:09:76:37:50:11:82:2b:90:84:7c:dd:fb:b7:
32:91:43:28:c6:f3:81:49:1a:69:4f:c6:cf:f9:74:
dd:d2:d6:8b:89:60:9c:d0:72:3e:88:95:a2:f5:8e:
d6:3e:a1:92:f5:53:e9:59:1c:44:6d:1c:dc:18:7f:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:BE:93:A3:26:94:DF:9C:42:A8:99:79:23:DD:2D:9D:4B:DB:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B68E5B874CD11EF954FE047762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.13.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c8:3f:6e:b6:25:b7:b4:d5:ff:03:df:16:18:fe:ed:ca:53:
1e:1a:90:1c:8d:f5:99:81:91:91:6b:8c:5b:d0:2c:7b:c7:9d:
8c:59:0a:e7:6a:cc:44:6f:17:0e:16:e8:16:58:c0:f7:f7:f3:
85:30:02:3c:86:dc:22:ce:38:db:0d:0d:25:f2:7d:3b:3a:d4:
02:89:28:d2:41:1c:0a:04:1a:40:39:a2:22:d2:ff:36:91:13:
00:77:b3:30:28:7b:fc:1e:cd:9e:20:d2:80:31:ac:02:f8:a6:
34:9c:0d:5b:85:2c:ea:ac:9a:a9:51:5a:63:cd:13:1a:89:50:
ab:21:fa:1b:26:b6:9f:ac:c4:6f:51:72:47:0d:19:14:f9:bd:
b0:78:b3:90:14:39:bc:fb:b6:e8:72:c8:1b:da:8a:3d:88:95:
0c:e7:7f:86:14:8d:07:7f:66:eb:90:6b:e6:d9:d8:df:a3:f9:
2a:1e:7a:99:54:a0:f5:50:3e:10:3f:c6:de:55:20:5a:24:13:
28:ea:7f:a7:6c:1a:d6:86:10:14:09:aa:bf:75:90:e8:9d:8c:
e4:4f:13:0f:75:d1:5b:10:3c:1c:64:b9:cc:4e:ae:36:ab:c3:
b1:04:fc:a7:8a:5d:35:a8:32:da:86:21:b4:51:29:e3:7a:f1:
2d:cf:ad:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO/4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDgxODI2WhcNMjQxMTMwMDgxODI2WjAYMRYw
FAYDVQQDEw02NmU5M2I1NS1iMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArlnQbx82ylcAgXkjGsrgDesktmnM1fV4lXlPQh3IHSa9Z1CIoG1Cgm0q
6jKR6dQFS4xoE6u+2fA/G8Tq7+zQCwq9HmxCOe65DEYXl+K7UIJ+3PMvjqv2/9Qu
UyBg3JlqsTgwwDvV0B0/NPbrc54eP5B+xu+JxB602pyp8LCWFw5jJb1g5lRuwPo+
RNx8cuGjah7Snl5IR03r4jYJWuY38913xjiWGKRsZNc4JP4i+kpcYz94z+/FTjtz
uDdp0ZyM7SmVAgl2N1ARgiuQhHzd+7cykUMoxvOBSRppT8bP+XTd0taLiWCc0HI+
iJWi9Y7WPqGS9VPpWRxEbRzcGH/GawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIOs
vpOjJpTfnEKomXkj3S2dS9spMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjY4RTVCODc0Q0QxMUVGOTU0RkUwNDc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMNMA0GCSqGSIb3DQEB
CwUAA4IBAQAmyD9utiW3tNX/A98WGP7tylMeGpAcjfWZgZGRa4xb0Cx7x52MWQrn
asxEbxcOFugWWMD39/OFMAI8htwizjjbDQ0l8n07OtQCiSjSQRwKBBpAOaIi0v82
kRMAd7MwKHv8Hs2eINKAMawC+KY0nA1bhSzqrJqpUVpjzRMaiVCrIfobJrafrMRv
UXJHDRkU+b2weLOQFDm8+7bocsgb2oo9iJUM53+GFI0Hf2brkGvm2djfo/kqHnqZ
VKD1UD4QP8beVSBaJBMo6n+nbBrWhhAUCaq/dZDonYzkTxMPddFbEDwcZLnMTq42
q8OxBPynil01qDLahiG0USnjevEtz62N
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:10 2024 by rpki-client on console-fra.rpki-client.org