Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FDDB352183911EFAD00C950017001B1.roa
File: 7FDDB352183911EFAD00C950017001B1.roa (raw, json)
Hash identifier: Y6RgDM1pn+2qOZbIvIY3BOTB7CoAxQqcQgPAroIzLJc=
Subject key identifier: C0:8F:AB:62:60:E6:9B:78:52:91:FB:EE:D7:EB:99:EA:E7:30:D8:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B9A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FDDB352183911EFAD00C950017001B1.roa
Signing time: Wed 22 May 2024 12:47:51 +0000
ROA not before: Wed 22 May 2024 12:47:47 +0000
ROA not after: Sat 03 May 2025 12:47:47 +0000
asID: 63199
IP address blocks: 154.204.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47526 (0xb9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 12:47:47 2024 GMT
Not After : May 3 12:47:47 2025 GMT
Subject: CN=664de977-36c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:69:86:13:ea:09:dd:41:50:be:84:93:f6:
df:32:00:1a:89:a6:a8:3f:14:da:53:bc:16:39:5d:
d4:62:bd:0a:5f:4c:e3:a2:5e:06:e0:71:2e:86:a5:
c0:fa:ad:df:a5:13:19:ba:6b:8f:de:29:d4:61:55:
ab:5b:58:31:5f:6d:44:57:6b:51:8d:38:9b:77:a2:
34:24:25:e2:c4:31:29:e8:da:39:46:bd:79:d8:ec:
2f:5b:78:14:19:74:ed:9e:b2:6e:d1:2d:da:05:3b:
9b:04:45:2f:b0:23:0c:66:70:ed:3f:56:98:a0:c0:
5c:4b:66:56:fe:10:e7:44:22:9a:d4:0f:64:f5:db:
0e:ff:65:ef:c0:7c:e3:a9:69:0b:c5:03:80:c6:39:
b4:24:46:42:68:88:ef:28:5c:a3:77:22:b3:f9:1c:
84:de:74:42:d3:f1:fc:b5:d9:9a:b5:85:74:a3:9b:
29:8a:f4:27:ba:ec:17:6c:34:64:2a:2d:09:b5:3c:
bc:f4:c2:61:50:b2:c8:87:45:c6:63:8f:3f:d7:e3:
64:3e:e7:88:df:2b:5b:90:c5:c4:d6:4c:02:71:90:
c6:13:13:a3:89:47:0f:f4:6b:2c:c2:c4:3f:c2:9a:
a8:d2:f5:60:0a:99:85:93:4e:4c:ca:d4:c2:b7:58:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:AB:62:60:E6:9B:78:52:91:FB:EE:D7:EB:99:EA:E7:30:D8:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FDDB352183911EFAD00C950017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.2.0/23
Signature Algorithm: sha256WithRSAEncryption
41:69:db:23:1c:c1:b7:3c:94:9b:a1:2c:ec:0e:6c:0b:d4:fd:
b0:1f:ee:05:07:bc:a3:aa:f6:61:40:bb:b4:d1:57:3d:fb:54:
f6:b6:52:5b:57:27:6c:03:e8:dd:84:f4:b6:b2:9d:8c:a2:e9:
9d:29:de:fc:69:a6:32:d2:eb:27:e6:dd:61:0f:4a:55:af:39:
24:37:25:bd:91:b2:c5:1f:73:14:b6:31:8f:0f:15:43:6d:b7:
28:24:8a:17:4e:1f:d8:40:dd:57:41:e9:36:99:ff:46:16:2e:
dd:aa:5b:10:77:a1:01:f1:8e:d5:04:ae:55:f7:28:7e:74:1a:
f4:48:8b:16:d8:3c:33:95:ed:78:94:b7:b3:61:9b:cb:2e:c4:
33:94:76:f5:25:de:f2:a2:2c:8e:91:3c:f7:d4:a6:46:5c:71:
75:1d:cc:7f:56:f2:07:1b:da:68:bc:3e:90:05:ba:9f:bf:72:
21:ec:2c:6c:df:6c:17:5c:3f:f8:8b:37:df:eb:2f:63:99:d4:
ca:8f:56:99:0b:77:44:d3:c9:b5:ba:56:5d:6a:6c:4c:d9:ed:
0f:09:37:d8:1b:b0:19:92:ca:9b:0d:87:08:e1:92:21:a5:48:
b2:3b:ec:90:2c:1e:d6:ab:ef:37:0a:39:d4:6b:79:44:b9:b6:
84:35:d8:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALmmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTIyMTI0NzQ3WhcNMjUwNTAzMTI0NzQ3WjAYMRYw
FAYDVQQDEw02NjRkZTk3Ny0zNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwQ1phhPqCd1BUL6Ek/bfMgAaiaaoPxTaU7wWOV3UYr0KX0zjol4G4HEu
hqXA+q3fpRMZumuP3inUYVWrW1gxX21EV2tRjTibd6I0JCXixDEp6No5Rr152Owv
W3gUGXTtnrJu0S3aBTubBEUvsCMMZnDtP1aYoMBcS2ZW/hDnRCKa1A9k9dsO/2Xv
wHzjqWkLxQOAxjm0JEZCaIjvKFyjdyKz+RyE3nRC0/H8tdmatYV0o5spivQnuuwX
bDRkKi0JtTy89MJhULLIh0XGY48/1+NkPueI3ytbkMXE1kwCcZDGExOjiUcP9Gss
wsQ/wpqo0vVgCpmFk05MytTCt1hgvwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMCP
q2Jg5pt4UpH77tfrmernMNhaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RkREQjM1MjE4MzkxMUVGQUQwMEM5NTAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmswCMA0GCSqGSIb3DQEB
CwUAA4IBAQBBadsjHMG3PJSboSzsDmwL1P2wH+4FB7yjqvZhQLu00Vc9+1T2tlJb
VydsA+jdhPS2sp2MoumdKd78aaYy0usn5t1hD0pVrzkkNyW9kbLFH3MUtjGPDxVD
bbcoJIoXTh/YQN1XQek2mf9GFi7dqlsQd6EB8Y7VBK5V9yh+dBr0SIsW2Dwzle14
lLezYZvLLsQzlHb1Jd7yoiyOkTz31KZGXHF1Hcx/VvIHG9povD6QBbqfv3Ih7Cxs
32wXXD/4izff6y9jmdTKj1aZC3dE08m1ulZdamxM2e0PCTfYG7AZksqbDYcI4ZIh
pUiyO+yQLB7Wq+83CjnUa3lEubaENdiK
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:13 2024 by rpki-client on console-fra.rpki-client.org