Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BA7A98768811EFA8E3F89E762E951A.roa
File: 79BA7A98768811EFA8E3F89E762E951A.roa (raw, json)
Hash identifier: Hv0TGHrX/FX9bm+MqHlFLalYJV/ctzdTGeG7isLwUSQ=
Subject key identifier: 90:76:E0:0D:49:7B:60:F2:70:54:8A:C3:37:50:27:D5:6C:02:E3:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F08F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BA7A98768811EFA8E3F89E762E951A.roa
Signing time: Thu 19 Sep 2024 13:10:00 +0000
ROA not before: Thu 19 Sep 2024 13:09:56 +0000
ROA not after: Fri 08 Aug 2025 13:09:56 +0000
asID: 133199
IP address blocks: 154.204.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61583 (0xf08f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:09:56 2024 GMT
Not After : Aug 8 13:09:56 2025 GMT
Subject: CN=66ec22a8-3b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:48:25:14:9b:58:e1:63:02:ec:fe:6a:48:
b4:01:a7:18:c8:05:b7:75:b8:85:fc:66:69:69:3a:
f1:ff:63:84:ab:36:1e:06:96:61:e8:31:0e:26:cb:
db:bd:a3:3c:42:1c:c8:0d:04:98:fb:3a:85:91:7a:
49:d4:42:68:9b:12:53:32:38:b1:c2:97:d6:b4:d3:
bb:1b:c3:84:e7:be:11:05:d5:b4:f6:2b:14:b9:d2:
25:cb:79:f9:38:42:6d:a3:95:df:fe:07:c8:07:f7:
b2:08:0e:f3:6d:65:9a:6a:38:6c:b7:a5:a1:33:b6:
83:d8:00:d8:1a:11:3b:7d:eb:c4:3b:9a:cd:eb:cd:
28:9a:4a:85:89:4b:23:c3:e9:6e:19:5c:93:9d:9b:
c5:f9:2d:5e:c0:7f:e0:18:06:0c:be:96:fc:64:a3:
2f:4e:33:81:a5:8e:1e:9a:8f:0f:16:a4:8d:eb:69:
b1:90:0b:cb:ae:5c:79:d3:00:54:90:3e:0e:7f:1d:
23:fb:08:ba:39:c5:7a:9d:cd:64:e0:45:34:2a:78:
2f:23:df:a1:f5:9b:a4:14:72:3f:41:de:3b:b1:43:
0b:1e:58:93:48:fd:44:9a:ef:34:b5:d2:cf:58:d8:
c7:89:3d:17:30:73:5a:cb:c2:fc:53:08:ff:7c:d8:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:E0:0D:49:7B:60:F2:70:54:8A:C3:37:50:27:D5:6C:02:E3:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79BA7A98768811EFA8E3F89E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:b7:1a:a1:26:22:a0:b0:f8:1d:46:be:ef:2f:88:c2:6d:99:
e8:04:26:68:99:b5:33:65:70:ee:49:73:a0:41:54:a9:9a:84:
8a:ec:1d:00:9f:0e:e9:cb:69:b9:9d:36:95:6b:d9:ef:f6:98:
a3:50:24:03:35:04:f9:15:83:ec:45:ec:54:a4:b8:c3:10:7d:
8d:a1:37:75:91:97:9c:5f:19:2c:fb:d2:88:7b:cf:f9:f5:b7:
4c:c6:ae:b2:09:40:0b:02:8a:2a:f9:e1:b2:8c:59:ec:d8:f0:
30:b7:71:ad:c0:2b:7f:54:cf:09:df:a1:7e:7b:b6:69:8e:13:
34:86:4a:36:f2:3d:79:32:e0:fc:8d:65:f6:43:f8:25:8c:d2:
e5:3a:cc:67:31:87:15:0c:96:94:f2:c5:37:cb:22:3a:0e:3a:
2d:92:83:73:df:ea:b2:ef:e6:b0:a7:68:6c:ee:22:96:e8:15:
2f:c3:ba:56:5a:74:2e:21:84:3d:42:57:e7:50:aa:b9:61:0a:
ef:32:b4:e4:a0:19:cf:24:b8:ae:b2:e3:2c:56:f7:98:73:df:
07:7a:2d:aa:8e:e7:a2:c7:83:22:1f:57:e3:e4:6f:05:49:0f:
28:b5:f0:0f:6c:43:4b:ee:a1:da:5b:e4:c5:23:37:f0:ab:30:
89:51:30:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPCPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE5MTMwOTU2WhcNMjUwODA4MTMwOTU2WjAYMRYw
FAYDVQQDEw02NmVjMjJhOC0zYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqINIJRSbWOFjAuz+aki0AacYyAW3dbiF/GZpaTrx/2OEqzYeBpZh6DEO
JsvbvaM8QhzIDQSY+zqFkXpJ1EJomxJTMjixwpfWtNO7G8OE574RBdW09isUudIl
y3n5OEJto5Xf/gfIB/eyCA7zbWWaajhst6WhM7aD2ADYGhE7fevEO5rN680omkqF
iUsjw+luGVyTnZvF+S1ewH/gGAYMvpb8ZKMvTjOBpY4emo8PFqSN62mxkAvLrlx5
0wBUkD4Ofx0j+wi6OcV6nc1k4EU0KngvI9+h9ZukFHI/Qd47sUMLHliTSP1Emu80
tdLPWNjHiT0XMHNay8L8Uwj/fNh+7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJB2
4A1Je2DycFSKwzdQJ9VsAuM6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OUJBN0E5ODc2ODgxMUVGQThFM0Y4OUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmswsMA0GCSqGSIb3DQEB
CwUAA4IBAQCxtxqhJiKgsPgdRr7vL4jCbZnoBCZombUzZXDuSXOgQVSpmoSK7B0A
nw7py2m5nTaVa9nv9pijUCQDNQT5FYPsRexUpLjDEH2NoTd1kZecXxks+9KIe8/5
9bdMxq6yCUALAooq+eGyjFns2PAwt3GtwCt/VM8J36F+e7ZpjhM0hko28j15MuD8
jWX2Q/gljNLlOsxnMYcVDJaU8sU3yyI6DjotkoNz3+qy7+awp2hs7iKW6BUvw7pW
WnQuIYQ9QlfnUKq5YQrvMrTkoBnPJLiusuMsVveYc98Hei2qjueix4MiH1fj5G8F
SQ8otfAPbENL7qHaW+TFIzfwqzCJUTAE
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:43 2024 by rpki-client on console-fra.rpki-client.org