Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDA350892E111EF93188C43762E951A.roa
File: 7DDA350892E111EF93188C43762E951A.roa (raw, json)
Hash identifier: VE0DooB3nfM3obVHxMJJw331R3CAVUmciJcbzCpBMJY=
Subject key identifier: 03:CD:FD:60:B9:9D:B5:C5:B1:DB:98:5B:D9:F7:8A:98:6A:34:99:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010254
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDA350892E111EF93188C43762E951A.roa
Signing time: Fri 25 Oct 2024 14:57:45 +0000
ROA not before: Fri 25 Oct 2024 14:57:41 +0000
ROA not after: Sun 01 Dec 2024 14:57:41 +0000
asID: 49505
IP address blocks: 154.209.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66132 (0x10254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:57:41 2024 GMT
Not After : Dec 1 14:57:41 2024 GMT
Subject: CN=671bb1e9-e01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:f4:d3:e0:4e:15:5e:b4:7b:c7:1a:28:16:
a2:6b:17:56:b3:6e:d5:ee:fa:aa:30:65:5f:c9:eb:
bf:41:10:d7:79:93:82:65:be:33:d0:13:2e:05:87:
f7:50:4f:f0:b0:c7:9c:76:94:b8:21:70:c3:82:ba:
ea:4b:4d:aa:8d:1c:b5:d4:81:56:fb:c2:75:d0:eb:
03:26:5a:8d:54:90:f7:ea:84:4f:e1:be:4b:26:aa:
06:3b:92:f6:6a:1a:2a:bc:b5:65:e7:3a:6c:4a:0a:
c8:dc:f3:2d:99:63:ee:26:80:2d:a9:ad:1b:0a:a1:
9f:04:aa:bd:06:70:fe:78:84:6c:4e:a9:0f:59:ff:
4a:31:d3:f1:d4:79:be:34:68:1a:3d:15:d6:d4:a8:
47:78:88:62:d3:f9:01:d3:c6:8f:dd:56:4b:26:cb:
a6:fb:c3:44:6e:93:5d:56:ae:9e:98:e1:75:e3:c2:
87:e4:dc:6d:c9:a0:0e:98:55:85:43:58:9a:e5:d3:
0a:89:98:b8:f9:b7:03:dd:c6:5b:ee:52:16:70:60:
46:6e:9e:50:74:da:fe:9f:40:d4:97:7d:fe:b8:6f:
80:5e:06:8e:5f:99:a4:76:fb:d9:67:b2:79:d9:a5:
75:4d:bf:d7:8d:a3:ac:bb:d9:56:85:f2:13:06:ea:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:FD:60:B9:9D:B5:C5:B1:DB:98:5B:D9:F7:8A:98:6A:34:99:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDA350892E111EF93188C43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.214.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:97:5f:a5:b7:7c:ea:df:e6:39:b4:a7:59:69:90:0c:56:7c:
9b:5d:f1:1d:e5:08:60:ec:6b:36:71:74:1e:a1:c0:e7:1c:7d:
21:7f:4b:30:61:f8:72:82:a1:d7:4d:d0:93:04:7e:e7:e0:dd:
d3:d4:a9:9f:a4:f4:b0:b9:d1:b2:ea:44:6d:a5:06:4d:c1:1c:
38:8c:8c:92:95:a9:6c:33:55:9f:16:f6:73:79:ee:b8:16:d9:
8c:7a:6d:50:19:28:f0:2b:c8:53:26:07:fe:b5:66:57:8f:fc:
6e:35:35:a9:49:2f:7b:71:68:a9:62:c5:08:5f:da:b9:f5:cf:
98:3d:b1:c9:14:9c:e5:30:d5:ee:30:43:e3:a5:4d:2f:49:97:
b9:94:18:af:0f:9e:51:de:95:39:7f:96:07:cb:97:94:10:07:
4c:d3:83:9c:fa:67:30:c0:0c:f4:5f:70:a3:62:4d:8c:c7:87:
91:4e:12:10:b9:67:f5:44:41:40:34:43:76:1f:6f:bf:8c:e2:
72:f4:e5:46:18:a2:dd:b3:14:4f:e0:6f:88:3a:9c:b8:d6:ba:
4c:eb:88:21:32:28:51:eb:82:d5:f7:a2:20:b3:b4:0c:6a:3c:
a2:f7:c9:fb:e0:dc:2e:09:14:04:30:8a:72:32:b6:b6:64:91:
8d:53:90:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQJUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MTQ1NzQxWhcNMjQxMjAxMTQ1NzQxWjAYMRYw
FAYDVQQDEw02NzFiYjFlOS1lMDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArsv00+BOFV60e8caKBaiaxdWs27V7vqqMGVfyeu/QRDXeZOCZb4z0BMu
BYf3UE/wsMecdpS4IXDDgrrqS02qjRy11IFW+8J10OsDJlqNVJD36oRP4b5LJqoG
O5L2ahoqvLVl5zpsSgrI3PMtmWPuJoAtqa0bCqGfBKq9BnD+eIRsTqkPWf9KMdPx
1Hm+NGgaPRXW1KhHeIhi0/kB08aP3VZLJsum+8NEbpNdVq6emOF148KH5NxtyaAO
mFWFQ1ia5dMKiZi4+bcD3cZb7lIWcGBGbp5QdNr+n0DUl33+uG+AXgaOX5mkdvvZ
Z7J52aV1Tb/XjaOsu9lWhfITBuo4OwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAPN
/WC5nbXFsduYW9n3iphqNJktMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RERBMzUwODkyRTExMUVGOTMxODhDNDM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtHWMA0GCSqGSIb3DQEB
CwUAA4IBAQCcl1+lt3zq3+Y5tKdZaZAMVnybXfEd5Qhg7Gs2cXQeocDnHH0hf0sw
YfhygqHXTdCTBH7n4N3T1KmfpPSwudGy6kRtpQZNwRw4jIySlalsM1WfFvZzee64
FtmMem1QGSjwK8hTJgf+tWZXj/xuNTWpSS97cWipYsUIX9q59c+YPbHJFJzlMNXu
MEPjpU0vSZe5lBivD55R3pU5f5YHy5eUEAdM04Oc+mcwwAz0X3CjYk2Mx4eRThIQ
uWf1REFANEN2H2+/jOJy9OVGGKLdsxRP4G+IOpy41rpM64ghMihR64LV96Igs7QM
ajyi98n74NwuCRQEMIpyMra2ZJGNU5Ab
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org