Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B4EAE1474CC11EFA4EA83BE762E951A.roa
File: 7B4EAE1474CC11EFA4EA83BE762E951A.roa (raw, json)
Hash identifier: 5h9NJGW149EmILWsTGTOH2OjKR8SOTL9uJInoqVIXWQ=
Subject key identifier: D5:72:04:9E:80:F0:8F:7B:48:AC:CD:F5:27:6E:FD:59:40:53:EA:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B4EAE1474CC11EFA4EA83BE762E951A.roa
Signing time: Tue 17 Sep 2024 08:11:46 +0000
ROA not before: Tue 17 Sep 2024 08:11:43 +0000
ROA not after: Sat 30 Nov 2024 08:11:43 +0000
asID: 142403
IP address blocks: 154.221.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61420 (0xefec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:11:43 2024 GMT
Not After : Nov 30 08:11:43 2024 GMT
Subject: CN=66e939c2-c537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:76:07:88:22:14:d8:b2:94:06:5d:42:97:
ba:d7:a2:0f:4e:68:f5:e0:a8:65:90:41:d6:b5:9f:
05:80:62:8f:00:f9:e3:7b:49:27:a4:13:09:91:ad:
4f:2f:fd:ef:fa:ce:37:64:69:9c:c0:f9:8f:24:77:
ec:cb:81:a0:0f:5b:60:a0:ed:2a:af:71:64:f8:a4:
59:de:17:74:8d:0e:c8:9f:b9:97:7b:67:67:59:b2:
f2:cf:4b:f8:24:3f:95:08:89:5f:7d:02:be:f1:34:
9e:fa:9f:0f:c7:ca:8c:2a:58:0a:f7:11:13:2a:b4:
93:ed:c5:e0:0a:c3:81:59:6e:55:fb:94:fa:e6:9f:
18:70:a1:4a:bf:bc:6c:01:55:4b:53:7f:eb:23:15:
1a:52:c8:32:cf:cf:e6:84:db:43:1f:ba:8f:81:e6:
88:cf:cb:be:a4:2e:66:3b:6f:e7:8e:9b:6e:8f:af:
7a:1a:81:75:9e:87:f2:1c:26:aa:a6:c8:88:89:fb:
dc:0d:5a:a9:ff:c1:5b:bf:69:a5:e2:a5:a5:29:6b:
ef:55:98:5c:58:5b:e8:29:e0:2b:08:50:f7:67:48:
90:90:6f:45:a2:c5:80:74:6a:4d:03:a4:f7:5e:09:
c8:96:bc:22:35:3f:60:e2:9a:a2:01:08:12:f5:11:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:04:9E:80:F0:8F:7B:48:AC:CD:F5:27:6E:FD:59:40:53:EA:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B4EAE1474CC11EFA4EA83BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:06:c6:f1:81:a2:ac:fc:6b:b9:1a:1c:ad:9c:a6:b5:fe:
b9:f1:15:cc:84:f4:cc:a7:b3:5c:e0:0d:dc:61:4d:b5:81:80:
91:da:75:93:1a:f0:13:d3:16:fd:5b:fb:b6:be:ab:72:8d:b5:
0b:49:24:40:84:45:23:22:63:38:b9:fd:52:78:5f:72:52:9e:
e1:81:e8:ca:57:41:f2:77:8c:a0:14:69:2c:a6:46:f7:13:6d:
39:8e:b9:04:0c:99:6c:f6:2f:2d:a1:9d:ef:ea:3a:87:fe:49:
cb:11:ed:73:3a:e7:59:50:5e:12:7b:0b:6f:d9:02:88:4f:9a:
97:e3:5a:07:d0:71:dd:8b:ec:94:07:04:8b:32:87:43:f6:5e:
3d:bb:24:28:e9:19:42:a6:59:d4:be:53:13:e9:6e:3a:2e:4e:
bf:3f:38:ce:2a:1e:34:f3:ed:64:81:31:61:0e:9a:17:ab:6d:
3c:77:98:c1:dd:3d:30:dd:fd:12:bd:fa:de:08:8c:6f:97:b4:
93:e2:c0:b5:84:d9:25:ad:fd:a1:39:11:c6:78:3c:29:e4:7f:
5c:80:f0:be:85:11:12:86:b3:7e:1d:c3:74:63:4a:5e:f8:0d:
26:67:ab:12:8c:cf:cd:96:40:09:e1:3f:2c:40:a3:65:0b:8e:
2b:bf:5a:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO/sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDgxMTQzWhcNMjQxMTMwMDgxMTQzWjAYMRYw
FAYDVQQDEw02NmU5MzljMi1jNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Vt2B4giFNiylAZdQpe616IPTmj14KhlkEHWtZ8FgGKPAPnje0knpBMJ
ka1PL/3v+s43ZGmcwPmPJHfsy4GgD1tgoO0qr3Fk+KRZ3hd0jQ7In7mXe2dnWbLy
z0v4JD+VCIlffQK+8TSe+p8Px8qMKlgK9xETKrST7cXgCsOBWW5V+5T65p8YcKFK
v7xsAVVLU3/rIxUaUsgyz8/mhNtDH7qPgeaIz8u+pC5mO2/njptuj696GoF1nofy
HCaqpsiIifvcDVqp/8Fbv2ml4qWlKWvvVZhcWFvoKeArCFD3Z0iQkG9FosWAdGpN
A6T3XgnIlrwiNT9g4pqiAQgS9RGjVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNVy
BJ6A8I97SKzN9Sdu/VlAU+oGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QjRFQUUxNDc0Q0MxMUVGQTRFQTgzQkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt0TMA0GCSqGSIb3DQEB
CwUAA4IBAQB6+QbG8YGirPxruRocrZymtf658RXMhPTMp7Nc4A3cYU21gYCR2nWT
GvAT0xb9W/u2vqtyjbULSSRAhEUjImM4uf1SeF9yUp7hgejKV0Hyd4ygFGkspkb3
E205jrkEDJls9i8toZ3v6jqH/knLEe1zOudZUF4Sewtv2QKIT5qX41oH0HHdi+yU
BwSLModD9l49uyQo6RlCplnUvlMT6W46Lk6/PzjOKh408+1kgTFhDpoXq208d5jB
3T0w3f0SvfreCIxvl7ST4sC1hNklrf2hORHGeDwp5H9cgPC+hREShrN+HcN0Y0pe
+A0mZ6sSjM/NlkAJ4T8sQKNlC44rv1qu
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:10 2024 by rpki-client on console-ams.rpki-client.org