Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD41A7E9D1611EF99BF2EA4762E951A.roa
File: 7FD41A7E9D1611EF99BF2EA4762E951A.roa (raw, json)
Hash identifier: QlUN+Cvm8ERN8D8g9X3POlNjyFKByN1BNO3hNY/WquA=
Subject key identifier: 52:CF:29:C4:F6:73:15:9E:E2:E5:C9:9C:E7:67:CC:06:C7:1B:4F:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01094D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD41A7E9D1611EF99BF2EA4762E951A.roa
Signing time: Thu 07 Nov 2024 14:42:23 +0000
ROA not before: Thu 07 Nov 2024 14:42:19 +0000
ROA not after: Wed 05 Nov 2025 14:42:19 +0000
asID: 133448
IP address blocks: 154.223.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67917 (0x1094d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:42:19 2024 GMT
Not After : Nov 5 14:42:19 2025 GMT
Subject: CN=672cd1cf-d746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:33:23:09:69:d8:8e:22:e5:42:1a:a9:52:
12:c4:9a:88:33:53:dd:69:6c:d7:cc:38:a4:24:8c:
31:cd:b2:71:63:6b:07:cc:08:2b:f7:0e:02:86:34:
87:c2:26:9e:eb:a1:71:68:02:e6:f1:35:be:78:f1:
98:de:17:43:0c:8c:01:bf:e2:76:58:10:9c:08:23:
90:89:c3:f9:56:b9:8c:c1:10:d8:e7:31:58:92:00:
88:e8:dd:c7:2c:a7:37:53:ba:18:47:7a:90:83:3a:
cb:ba:50:d4:2d:e3:50:bf:8e:5d:b4:b1:8c:b5:e6:
33:65:9d:cb:86:6a:63:85:1e:d3:5f:8c:3c:d1:4d:
59:58:a5:8f:1f:1a:f6:ca:fe:90:da:d9:8f:77:e5:
f1:e4:b2:43:09:e7:5e:35:1f:5d:1c:dc:ab:0a:14:
de:41:ae:b6:1e:f2:0f:87:c9:d3:51:a6:50:b2:82:
1f:ac:73:28:e8:22:4f:9d:10:a9:7d:d0:bc:bf:9d:
96:87:49:42:ae:0f:47:b6:ed:ab:af:0e:5b:d1:e3:
7a:43:d2:38:fb:40:fe:59:6d:f3:75:fa:60:19:1e:
ff:1f:9c:09:d7:8f:5f:36:79:d8:66:46:f2:10:17:
d8:39:20:88:64:d3:6e:55:bd:2e:bf:3f:b0:d0:dd:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:29:C4:F6:73:15:9E:E2:E5:C9:9C:E7:67:CC:06:C7:1B:4F:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FD41A7E9D1611EF99BF2EA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ba:bd:9b:c4:46:b1:73:b0:b5:e9:39:96:c1:24:d6:1d:60:
56:6d:99:a2:cc:e8:e7:fe:b6:a4:d4:8e:91:51:98:c2:9e:17:
d2:36:dd:a5:a3:98:fe:10:18:d6:88:d2:37:75:ba:10:81:95:
53:0a:44:e8:bd:45:5a:80:12:ec:a7:77:12:d1:20:ea:80:19:
df:8a:ac:6b:1e:10:5a:15:75:70:55:7f:a0:76:1e:fd:5e:1c:
70:e2:f4:53:f9:e4:8b:11:c2:a3:72:f2:ad:ac:9f:39:92:05:
da:85:a8:94:37:48:4b:00:a9:d7:5c:fe:60:6d:6a:2b:09:f0:
92:57:7a:0e:cd:93:6e:d4:a8:8d:57:a5:12:d4:18:0b:86:d0:
b9:83:68:0c:d5:98:ef:68:8e:78:b4:c3:36:83:75:0f:c8:3c:
6c:82:d0:e0:4f:82:7d:29:e2:9b:2d:7c:52:9e:91:7f:f7:56:
49:ca:17:8c:da:ad:0f:aa:88:7e:27:36:19:f0:d2:fb:e6:3b:
0f:a2:ca:4c:60:80:a2:e6:53:a2:17:12:81:97:a5:ae:37:b0:
66:9f:61:7b:fc:24:d1:56:57:c2:fd:53:14:a6:06:1c:df:e7:
a6:c6:29:a9:e6:96:80:20:da:a8:34:c7:81:e4:0f:e2:d5:02:
a6:f0:1b:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQlNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA3MTQ0MjE5WhcNMjUxMTA1MTQ0MjE5WjAYMRYw
FAYDVQQDEw02NzJjZDFjZi1kNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlwQzIwlp2I4i5UIaqVISxJqIM1PdaWzXzDikJIwxzbJxY2sHzAgr9w4C
hjSHwiae66FxaALm8TW+ePGY3hdDDIwBv+J2WBCcCCOQicP5VrmMwRDY5zFYkgCI
6N3HLKc3U7oYR3qQgzrLulDULeNQv45dtLGMteYzZZ3LhmpjhR7TX4w80U1ZWKWP
Hxr2yv6Q2tmPd+Xx5LJDCedeNR9dHNyrChTeQa62HvIPh8nTUaZQsoIfrHMo6CJP
nRCpfdC8v52Wh0lCrg9Htu2rrw5b0eN6Q9I4+0D+WW3zdfpgGR7/H5wJ149fNnnY
ZkbyEBfYOSCIZNNuVb0uvz+w0N1YvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFLP
KcT2cxWe4uXJnOdnzAbHG0/yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RkQ0MUE3RTlEMTYxMUVGOTlCRjJFQTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8BMA0GCSqGSIb3DQEB
CwUAA4IBAQC3ur2bxEaxc7C16TmWwSTWHWBWbZmizOjn/rak1I6RUZjCnhfSNt2l
o5j+EBjWiNI3dboQgZVTCkTovUVagBLsp3cS0SDqgBnfiqxrHhBaFXVwVX+gdh79
Xhxw4vRT+eSLEcKjcvKtrJ85kgXahaiUN0hLAKnXXP5gbWorCfCSV3oOzZNu1KiN
V6US1BgLhtC5g2gM1ZjvaI54tMM2g3UPyDxsgtDgT4J9KeKbLXxSnpF/91ZJyheM
2q0Pqoh+JzYZ8NL75jsPospMYICi5lOiFxKBl6WuN7Bmn2F7/CTRVlfC/VMUpgYc
3+emximp5paAINqoNMeB5A/i1QKm8Bvp
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:36 2024 by rpki-client on console-fra.rpki-client.org