Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81308DA2A8ED11EFB35A934B762E951A.roa
File: 81308DA2A8ED11EFB35A934B762E951A.roa (raw, json)
Hash identifier: i12vJO+wwkwlicizjbeMj0cQF1FUe/5VrWxpAgfFZFo=
Subject key identifier: D0:B8:64:22:63:AF:C7:82:10:2D:C6:1C:E8:AE:A9:CB:CE:72:56:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011129
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81308DA2A8ED11EFB35A934B762E951A.roa
Signing time: Fri 22 Nov 2024 16:19:10 +0000
ROA not before: Fri 22 Nov 2024 16:19:06 +0000
ROA not after: Tue 03 Dec 2024 16:19:06 +0000
asID: 62240
IP address blocks: 154.195.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69929 (0x11129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 16:19:06 2024 GMT
Not After : Dec 3 16:19:06 2024 GMT
Subject: CN=6740aefe-13df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:b0:9c:62:cc:0e:df:5a:63:8d:55:fd:73:
89:dc:4a:f8:27:e4:5a:45:e0:42:72:a7:fe:28:b0:
7f:ab:b3:88:93:79:b7:04:d5:0b:01:54:aa:09:d5:
e1:e4:f2:97:26:b2:43:1e:0c:df:4d:4e:21:73:42:
dd:24:91:86:24:ae:1b:6a:6a:b5:d7:e9:5f:df:cc:
54:f4:4f:5b:2a:17:72:0c:db:04:34:41:27:12:6e:
7a:1b:17:d2:f8:2c:0b:fb:fb:da:a6:03:48:1c:92:
5a:df:14:c7:da:94:cc:38:79:36:cd:33:7e:3a:e4:
90:b5:bf:b0:9c:8d:b0:73:ba:5c:5d:b0:be:ed:eb:
64:57:66:f3:2e:2c:7b:a7:f3:b3:1c:13:a2:3e:34:
14:ed:8d:5a:51:35:08:9e:07:34:a0:20:c9:b4:b5:
78:0f:e4:12:fa:0c:dd:4f:c8:c7:19:53:da:fc:30:
ef:c5:ef:52:11:75:a8:c9:ad:bd:03:c6:74:2c:bc:
18:50:84:f4:22:72:b0:dd:8e:ca:68:ef:f2:c0:f6:
80:d7:10:93:89:aa:48:25:4b:ac:3d:fe:76:10:71:
7e:69:23:4a:a9:10:e7:96:cc:4f:d0:59:78:b2:75:
f2:f6:31:99:7d:27:92:f5:5b:f9:cc:01:27:59:3b:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B8:64:22:63:AF:C7:82:10:2D:C6:1C:E8:AE:A9:CB:CE:72:56:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/81308DA2A8ED11EFB35A934B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.144.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a5:e5:1e:f1:48:99:ab:72:0d:98:53:6f:9c:a0:b9:d6:2d:
a6:19:66:d4:1a:2b:61:26:77:80:63:dd:bb:a1:50:bd:a2:4f:
d1:75:9b:c9:f5:a2:48:a0:cb:11:50:a2:b6:b4:e2:73:be:7e:
45:be:03:bb:b7:30:2c:d5:77:96:52:52:de:85:88:c3:7e:f5:
38:0a:11:2c:4e:b5:b8:77:61:12:b1:b4:4f:b2:8e:c6:67:68:
0f:d4:9e:27:c4:07:33:5a:98:0e:2a:b7:05:0b:d1:99:e9:54:
42:aa:ec:d5:10:8d:a8:6e:11:4f:e8:f1:04:2c:2d:fb:f7:9c:
91:44:11:51:68:5c:4e:1f:3d:8c:8d:2e:4a:d7:7d:9c:bf:1e:
a4:3c:b6:50:3e:cd:b9:1b:7c:c6:aa:0e:12:38:6d:7e:bd:66:
eb:b5:26:ba:eb:7d:70:23:3c:f7:97:e3:6e:d9:4f:7a:9a:53:
88:64:04:41:09:03:75:58:96:8b:70:24:60:8d:fb:bb:f9:3f:
b8:ca:fe:a7:a4:8e:20:ab:01:a6:ee:6d:c8:0d:b8:a0:ad:b2:
22:82:d5:34:d3:e4:45:b0:80:10:ef:8d:31:31:39:47:62:3c:
a6:d6:95:f0:a8:73:86:27:c2:94:97:b8:95:21:60:86:6a:93:
1d:4d:52:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAREpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTYxOTA2WhcNMjQxMjAzMTYxOTA2WjAYMRYw
FAYDVQQDEw02NzQwYWVmZS0xM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsl2wnGLMDt9aY41V/XOJ3Er4J+RaReBCcqf+KLB/q7OIk3m3BNULAVSq
CdXh5PKXJrJDHgzfTU4hc0LdJJGGJK4bamq11+lf38xU9E9bKhdyDNsENEEnEm56
GxfS+CwL+/vapgNIHJJa3xTH2pTMOHk2zTN+OuSQtb+wnI2wc7pcXbC+7etkV2bz
Lix7p/OzHBOiPjQU7Y1aUTUIngc0oCDJtLV4D+QS+gzdT8jHGVPa/DDvxe9SEXWo
ya29A8Z0LLwYUIT0InKw3Y7KaO/ywPaA1xCTiapIJUusPf52EHF+aSNKqRDnlsxP
0Fl4snXy9jGZfSeS9Vv5zAEnWTu9lwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNC4
ZCJjr8eCEC3GHOiuqcvOclaHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTMwOERBMkE4RUQxMUVGQjM1QTkzNEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOQMA0GCSqGSIb3DQEB
CwUAA4IBAQAkpeUe8UiZq3INmFNvnKC51i2mGWbUGithJneAY927oVC9ok/RdZvJ
9aJIoMsRUKK2tOJzvn5FvgO7tzAs1XeWUlLehYjDfvU4ChEsTrW4d2ESsbRPso7G
Z2gP1J4nxAczWpgOKrcFC9GZ6VRCquzVEI2obhFP6PEELC3795yRRBFRaFxOHz2M
jS5K132cvx6kPLZQPs25G3zGqg4SOG1+vWbrtSa6631wIzz3l+Nu2U96mlOIZARB
CQN1WJaLcCRgjfu7+T+4yv6npI4gqwGm7m3IDbigrbIigtU00+RFsIAQ740xMTlH
Yjym1pXwqHOGJ8KUl7iVIWCGapMdTVIT
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:37 2024 by rpki-client on console-fra.rpki-client.org