Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C4D8FC2768B11EF9E355BB0762E951A.roa
File: 7C4D8FC2768B11EF9E355BB0762E951A.roa (raw, json)
Hash identifier: 9qdZ8hbh+cDejJjbo7tJxF5+1QgGq8ZPGFw9scb2Djw=
Subject key identifier: 7F:0B:E9:6D:AD:31:CB:BE:3C:6F:93:EE:E7:E4:22:16:21:6E:3D:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F0AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C4D8FC2768B11EF9E355BB0762E951A.roa
Signing time: Thu 19 Sep 2024 13:31:33 +0000
ROA not before: Thu 19 Sep 2024 13:31:29 +0000
ROA not after: Fri 08 Aug 2025 13:31:29 +0000
asID: 133199
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61613 (0xf0ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:31:29 2024 GMT
Not After : Aug 8 13:31:29 2025 GMT
Subject: CN=66ec27b5-4cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:a5:5d:84:bc:21:f5:ae:83:13:c7:b2:00:
9c:c3:7c:66:c5:47:72:b3:cd:b0:7c:fb:cf:d7:3b:
f8:e9:fa:8b:90:1e:1d:7d:a2:09:fc:b8:e7:d2:33:
8b:4c:1b:4f:6a:66:63:9d:6f:60:93:d6:ae:3d:2c:
ec:c6:b7:64:60:6d:48:d2:56:1a:1b:e9:96:53:94:
8a:a9:be:1a:72:6e:d0:d1:6e:a4:af:ca:8b:bf:d4:
df:ae:e3:6f:32:8e:27:e9:13:24:16:55:7f:3d:92:
45:c1:5d:6b:b8:e6:f9:8a:6b:13:db:5c:42:42:3f:
08:9c:f7:63:ee:a3:c9:9e:40:b2:42:0f:82:4b:40:
ea:73:b8:36:ce:3d:68:49:d4:c1:54:a4:8e:0a:62:
9f:ff:48:1f:fb:c1:3a:0c:c9:7a:1f:fe:3d:7d:d5:
83:3e:31:b3:c8:f5:7d:58:85:1c:26:89:3c:63:7d:
b8:a6:39:2c:7b:ea:9b:13:bb:2b:4f:89:17:54:a9:
cf:5d:c2:60:cf:0b:38:79:77:49:7a:22:10:97:c7:
5a:28:7e:f1:db:6a:1a:bf:a4:b7:88:5f:eb:8e:db:
fb:0d:80:44:ec:e1:a5:67:1e:08:af:7d:ec:06:0f:
2c:53:bf:66:ff:3e:74:84:5a:37:28:a3:6a:83:52:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:E9:6D:AD:31:CB:BE:3C:6F:93:EE:E7:E4:22:16:21:6E:3D:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C4D8FC2768B11EF9E355BB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
41:02:11:20:a5:94:2c:37:0e:36:ca:8e:ef:3d:b4:6c:46:75:
ce:2d:81:5a:6e:58:2a:35:91:2b:78:e1:83:90:1b:44:e4:05:
79:1b:2e:ba:d5:17:62:d8:ac:4f:18:0c:7e:92:70:38:c5:99:
b7:5f:c7:87:54:b2:f2:74:fb:97:39:f0:5e:ea:5a:47:9d:ed:
b0:24:19:aa:51:7e:6f:f2:14:1c:90:8a:6a:86:db:05:47:c6:
08:b9:65:76:34:56:2d:68:70:c3:f4:ff:05:f0:69:a9:72:d6:
2c:a9:a4:b1:db:da:81:95:4a:86:24:36:f9:d0:d3:9d:c3:4d:
9d:20:b9:98:f7:fb:30:3c:17:f4:bf:39:4b:21:90:71:2a:97:
88:cb:92:d0:96:06:f8:65:ed:86:71:cf:f6:9a:ef:5e:a4:8b:
2a:5b:1e:0b:a7:d5:b1:25:08:89:98:72:c4:06:e2:06:7e:25:
e6:29:23:79:89:8a:69:d8:6d:1a:84:d5:ca:f9:ce:ed:a8:9e:
c3:3e:e8:e7:83:8d:35:6a:67:9b:13:c6:c3:d9:b8:3c:25:4a:
eb:78:23:df:47:26:e7:71:d3:54:9b:ca:d1:93:85:2c:7e:97:
4d:1b:2f:a5:df:2c:b8:2c:7b:5a:62:eb:62:61:d6:3e:88:dc:
7e:d2:5c:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPCtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE5MTMzMTI5WhcNMjUwODA4MTMzMTI5WjAYMRYw
FAYDVQQDEw02NmVjMjdiNS00Y2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1nClXYS8IfWugxPHsgCcw3xmxUdys82wfPvP1zv46fqLkB4dfaIJ/Ljn
0jOLTBtPamZjnW9gk9auPSzsxrdkYG1I0lYaG+mWU5SKqb4acm7Q0W6kr8qLv9Tf
ruNvMo4n6RMkFlV/PZJFwV1ruOb5imsT21xCQj8InPdj7qPJnkCyQg+CS0Dqc7g2
zj1oSdTBVKSOCmKf/0gf+8E6DMl6H/49fdWDPjGzyPV9WIUcJok8Y324pjkse+qb
E7srT4kXVKnPXcJgzws4eXdJeiIQl8daKH7x22oav6S3iF/rjtv7DYBE7OGlZx4I
r33sBg8sU79m/z50hFo3KKNqg1JNcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH8L
6W2tMcu+PG+T7ufkIhYhbj1sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83QzREOEZDMjc2OEIxMUVGOUUzNTVCQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUYMA0GCSqGSIb3DQEB
CwUAA4IBAQBBAhEgpZQsNw42yo7vPbRsRnXOLYFablgqNZEreOGDkBtE5AV5Gy66
1Rdi2KxPGAx+knA4xZm3X8eHVLLydPuXOfBe6lpHne2wJBmqUX5v8hQckIpqhtsF
R8YIuWV2NFYtaHDD9P8F8GmpctYsqaSx29qBlUqGJDb50NOdw02dILmY9/swPBf0
vzlLIZBxKpeIy5LQlgb4Ze2Gcc/2mu9epIsqWx4Lp9WxJQiJmHLEBuIGfiXmKSN5
iYpp2G0ahNXK+c7tqJ7DPujng401amebE8bD2bg8JUrreCPfRybncdNUm8rRk4Us
fpdNGy+l3yy4LHtaYutiYdY+iNx+0lzb
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:12 2024 by rpki-client on console-fra.rpki-client.org