Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B7867D4A8DC11EF85CEA65F762E951A.roa
File: 6B7867D4A8DC11EF85CEA65F762E951A.roa (raw, json)
Hash identifier: VKpXHATaXmA0twXh62+KIwWnDRj9Md9NdTxZxSvM8s8=
Subject key identifier: 83:63:43:B8:17:B8:10:63:E6:B5:EF:E7:B2:F3:C7:6F:2F:DA:E4:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01105B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B7867D4A8DC11EF85CEA65F762E951A.roa
Signing time: Fri 22 Nov 2024 14:16:52 +0000
ROA not before: Fri 22 Nov 2024 14:16:48 +0000
ROA not after: Mon 09 Dec 2024 14:16:48 +0000
asID: 5065
IP address blocks: 154.206.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69723 (0x1105b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:16:48 2024 GMT
Not After : Dec 9 14:16:48 2024 GMT
Subject: CN=67409254-43b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b1:ca:69:35:0b:05:5b:17:7d:24:f5:c3:0a:
8d:f9:0b:c1:18:77:b8:2e:49:e7:f1:fd:da:a8:1d:
e1:15:bc:7f:26:7c:03:00:12:48:47:98:18:e6:8b:
72:6f:1e:84:b7:04:b0:51:85:6e:c4:77:54:e2:47:
af:0b:08:72:39:ca:c5:f6:7a:8a:6a:af:a2:5e:c1:
3e:da:91:97:d4:78:d5:a9:95:48:75:42:48:0f:bd:
53:f4:93:ce:e0:b6:7b:d6:99:9b:d7:df:5f:b4:69:
2a:f3:92:b7:e0:66:c4:f7:91:94:4b:d0:ef:de:27:
b2:1f:fe:c0:60:82:41:10:8b:72:10:eb:35:9d:1f:
31:96:be:53:5e:e0:35:98:6b:e2:04:55:ed:33:a5:
92:24:55:5b:50:db:a5:f3:e6:9b:9e:c7:d7:35:65:
af:b8:06:f7:99:d4:54:cb:77:4b:e5:9a:82:91:fd:
43:7d:ab:cf:ca:c7:c4:c9:53:7c:eb:22:0f:81:fb:
55:e8:1b:dd:21:9f:ea:1b:8e:e7:89:1a:97:5c:ab:
62:db:a5:17:0f:8e:36:81:86:02:03:58:5c:70:5f:
64:d0:bd:42:39:6e:a6:dd:14:32:b5:3c:6a:0f:4f:
98:3c:93:1b:c8:26:ad:92:14:c9:c0:8f:dc:67:05:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:43:B8:17:B8:10:63:E6:B5:EF:E7:B2:F3:C7:6F:2F:DA:E4:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B7867D4A8DC11EF85CEA65F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.37.0/24
Signature Algorithm: sha256WithRSAEncryption
32:72:70:7f:be:75:e3:1c:39:7c:91:8d:f4:c5:05:06:aa:c2:
a1:bc:5d:18:31:d8:0e:aa:d0:81:ae:56:f2:27:45:6a:e7:c7:
23:c1:7f:4a:c1:56:d2:3a:2e:4c:48:ba:d1:8e:51:bd:b1:70:
4d:fd:15:10:ba:a8:d4:fa:0b:5c:e5:0c:d3:bd:b3:b0:50:45:
66:28:ff:5a:24:3a:bb:80:2a:24:b1:c6:26:59:fb:98:1f:c0:
1e:c2:9a:00:57:b9:8a:63:7c:00:12:83:52:50:a2:e5:09:df:
55:08:70:a1:4b:e8:d7:0d:84:6b:2b:ef:e9:78:40:15:17:bf:
de:0b:8b:08:95:46:61:09:77:30:9c:81:40:2c:e6:6a:15:a3:
e2:85:c6:29:a6:07:37:40:25:cb:14:c3:90:2c:42:11:c5:9a:
ec:71:b8:f7:bd:09:92:4c:af:91:95:69:4b:4a:ba:7b:69:9b:
56:29:ab:4b:45:7e:d2:f1:a5:74:16:b7:c6:6a:d4:d6:21:7c:
6e:9c:e8:bb:d8:bd:33:24:4f:9b:a2:54:38:d4:50:66:a7:dd:
26:cb:00:64:0c:5a:7c:09:8a:17:58:8c:df:7f:1b:bb:f2:33:
b4:73:82:91:4b:e2:b1:da:79:79:33:2c:e9:fa:70:a2:2e:f0:
8e:0a:b4:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARBbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTQxNjQ4WhcNMjQxMjA5MTQxNjQ4WjAYMRYw
FAYDVQQDEw02NzQwOTI1NC00M2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA67HKaTULBVsXfST1wwqN+QvBGHe4Lknn8f3aqB3hFbx/JnwDABJIR5gY
5otybx6EtwSwUYVuxHdU4kevCwhyOcrF9nqKaq+iXsE+2pGX1HjVqZVIdUJID71T
9JPO4LZ71pmb199ftGkq85K34GbE95GUS9Dv3ieyH/7AYIJBEItyEOs1nR8xlr5T
XuA1mGviBFXtM6WSJFVbUNul8+abnsfXNWWvuAb3mdRUy3dL5ZqCkf1DfavPysfE
yVN86yIPgftV6BvdIZ/qG47niRqXXKti26UXD442gYYCA1hccF9k0L1COW6m3RQy
tTxqD0+YPJMbyCatkhTJwI/cZwUzDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFINj
Q7gXuBBj5rXv57Lzx28v2uQEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82Qjc4NjdENEE4REMxMUVGODVDRUE2NUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4lMA0GCSqGSIb3DQEB
CwUAA4IBAQAycnB/vnXjHDl8kY30xQUGqsKhvF0YMdgOqtCBrlbyJ0Vq58cjwX9K
wVbSOi5MSLrRjlG9sXBN/RUQuqjU+gtc5QzTvbOwUEVmKP9aJDq7gCokscYmWfuY
H8AewpoAV7mKY3wAEoNSUKLlCd9VCHChS+jXDYRrK+/peEAVF7/eC4sIlUZhCXcw
nIFALOZqFaPihcYppgc3QCXLFMOQLEIRxZrscbj3vQmSTK+RlWlLSrp7aZtWKatL
RX7S8aV0FrfGatTWIXxunOi72L0zJE+bolQ41FBmp90mywBkDFp8CYoXWIzffxu7
8jO0c4KRS+Kx2nl5Myzp+nCiLvCOCrQy
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:29 2024 by rpki-client on console-fra.rpki-client.org