Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7119B39EA8D911EFB8D76C4E762E951A.roa
File: 7119B39EA8D911EFB8D76C4E762E951A.roa (raw, json)
Hash identifier: poAWbrymkx/6cZDECi0UUWWf3ZCrQ20uQwx/liKzp7Q=
Subject key identifier: A6:9C:8F:DC:C5:E0:51:5F:A8:D5:BE:48:15:20:D3:D8:0E:09:4F:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011043
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7119B39EA8D911EFB8D76C4E762E951A.roa
Signing time: Fri 22 Nov 2024 13:55:33 +0000
ROA not before: Fri 22 Nov 2024 13:55:29 +0000
ROA not after: Mon 02 Dec 2024 13:55:29 +0000
asID: 44559
IP address blocks: 154.94.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69699 (0x11043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 13:55:29 2024 GMT
Not After : Dec 2 13:55:29 2024 GMT
Subject: CN=67408d55-87a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:ae:3d:ce:a3:f2:15:65:4e:ca:e9:ed:22:
2d:7e:18:5e:fe:c7:66:1c:4a:8e:87:fc:75:c5:36:
56:a7:5f:0d:a8:8a:18:c7:36:11:d7:18:60:85:6d:
fc:a4:e4:98:67:e8:3b:ab:be:4e:ea:ca:35:52:9a:
67:86:cd:75:a0:f8:96:4b:8c:29:2f:38:f0:86:78:
45:f9:09:6c:d8:75:06:8c:82:88:cf:34:3c:0e:c0:
de:22:1b:ee:1d:67:58:48:15:cd:f8:1e:10:5d:43:
59:dc:94:2c:0e:f1:2f:6c:a0:88:92:1e:c9:fa:bc:
1b:f5:11:73:fe:5f:9c:c8:34:a4:27:05:f6:51:82:
01:ed:30:70:df:89:0a:ec:1f:98:1b:18:80:fe:b3:
8b:b9:4a:83:7d:d5:54:c4:be:9a:b7:1f:7e:c8:a6:
b6:66:81:08:04:5c:f1:3c:f4:21:30:cb:61:c6:56:
4e:96:66:dc:b2:ac:93:a2:af:4c:67:a9:8c:fc:07:
ea:96:47:0c:08:be:cc:65:7d:85:be:f7:1e:68:6c:
9d:97:84:56:b4:95:31:f7:38:33:ee:1b:5d:2f:69:
5c:98:c4:63:0f:fa:3d:a9:0f:aa:2f:53:5d:77:9e:
be:78:cd:e1:1e:8b:11:b6:bb:9c:d9:32:c2:40:5c:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:8F:DC:C5:E0:51:5F:A8:D5:BE:48:15:20:D3:D8:0E:09:4F:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7119B39EA8D911EFB8D76C4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.243.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a7:44:e0:fb:eb:94:ae:42:ca:48:bf:32:ee:da:1a:6c:32:
bc:5c:45:8b:68:7d:b1:7d:d5:da:ca:44:2c:a3:51:2d:fc:5f:
5e:52:23:a7:30:84:cc:9d:11:b4:f7:1e:2e:22:69:85:81:18:
2c:da:d9:21:42:29:06:4b:29:4a:27:ad:d8:33:07:07:0c:92:
87:63:01:b2:f1:91:10:f0:23:d7:a0:bc:64:26:99:71:14:a5:
d7:b8:47:e4:95:78:5d:8a:f8:24:f8:b7:ca:6d:99:c6:5b:ff:
33:44:cb:c4:34:31:eb:f8:52:d5:a4:ca:65:6d:dc:22:6f:f5:
02:84:61:d7:c1:6c:e1:b5:4b:e6:20:58:29:79:30:1e:ba:14:
5a:48:5f:75:3f:1f:1e:41:fc:33:a7:3b:b5:3e:2f:ee:b9:6d:
37:86:18:12:b0:1f:9e:52:7d:93:63:84:88:31:79:1a:72:18:
b3:6a:11:16:cd:f4:62:0d:21:78:a6:0f:74:43:a6:86:93:7e:
e4:13:a0:de:6e:f3:15:cb:0a:c3:ab:b1:4b:b9:41:e8:3e:e9:
6c:c2:f1:76:83:f5:92:df:ac:be:47:c4:23:e3:86:32:4a:3c:
20:64:fd:f8:40:44:cc:23:e9:32:81:0b:39:d8:22:1a:ee:6e:
5f:13:53:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARBDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTM1NTI5WhcNMjQxMjAyMTM1NTI5WjAYMRYw
FAYDVQQDEw02NzQwOGQ1NS04N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuxauPc6j8hVlTsrp7SItfhhe/sdmHEqOh/x1xTZWp18NqIoYxzYR1xhg
hW38pOSYZ+g7q75O6so1Uppnhs11oPiWS4wpLzjwhnhF+Qls2HUGjIKIzzQ8DsDe
IhvuHWdYSBXN+B4QXUNZ3JQsDvEvbKCIkh7J+rwb9RFz/l+cyDSkJwX2UYIB7TBw
34kK7B+YGxiA/rOLuUqDfdVUxL6atx9+yKa2ZoEIBFzxPPQhMMthxlZOlmbcsqyT
oq9MZ6mM/AfqlkcMCL7MZX2FvvceaGydl4RWtJUx9zgz7htdL2lcmMRjD/o9qQ+q
L1Ndd56+eM3hHosRtruc2TLCQFx2zwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKac
j9zF4FFfqNW+SBUg09gOCU88MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MTE5QjM5RUE4RDkxMUVGQjhENzZDNEU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7zMA0GCSqGSIb3DQEB
CwUAA4IBAQA4p0Tg++uUrkLKSL8y7toabDK8XEWLaH2xfdXaykQso1Et/F9eUiOn
MITMnRG09x4uImmFgRgs2tkhQikGSylKJ63YMwcHDJKHYwGy8ZEQ8CPXoLxkJplx
FKXXuEfklXhdivgk+LfKbZnGW/8zRMvENDHr+FLVpMplbdwib/UChGHXwWzhtUvm
IFgpeTAeuhRaSF91Px8eQfwzpzu1Pi/uuW03hhgSsB+eUn2TY4SIMXkachizahEW
zfRiDSF4pg90Q6aGk37kE6DebvMVywrDq7FLuUHoPulswvF2g/WS36y+R8Qj44Yy
SjwgZP34QETMI+kygQs52CIa7m5fE1MF
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:30 2024 by rpki-client on console-fra.rpki-client.org