Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853BA07EA4CB11EFA3AF3156762E951A.roa
File: 853BA07EA4CB11EFA3AF3156762E951A.roa (raw, json)
Hash identifier: lqdTJKNOE17eOapOzdhLjPL7RMr9PiamzfSCzZSuEXs=
Subject key identifier: 64:9A:80:A5:94:4D:F8:08:43:2D:F3:7F:9C:CA:56:72:B5:18:79:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853BA07EA4CB11EFA3AF3156762E951A.roa
Signing time: Sun 17 Nov 2024 10:05:49 +0000
ROA not before: Sun 17 Nov 2024 10:05:46 +0000
ROA not after: Mon 25 Nov 2024 10:05:46 +0000
asID: 5650
IP address blocks: 154.205.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69258 (0x10e8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:05:46 2024 GMT
Not After : Nov 25 10:05:46 2024 GMT
Subject: CN=6739bffd-1aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:fd:24:b9:31:71:5a:54:51:29:a9:4b:b9:
71:b8:6c:91:4c:0d:9e:04:91:d5:18:d4:27:6a:b3:
97:fc:d8:80:d6:08:e0:83:a4:1c:76:ce:55:aa:b3:
63:66:be:3d:00:32:f2:a0:1a:5a:db:09:53:87:68:
e4:99:e9:8e:45:87:6b:b8:2f:3b:22:69:ef:94:f6:
c8:40:b9:d5:83:eb:e0:72:fe:30:cf:57:7e:0d:5a:
fd:da:ad:bb:bf:1a:d6:7f:e3:b8:78:f8:14:ff:02:
af:29:be:4b:00:9b:0c:06:da:0c:99:d3:bc:5d:22:
12:bb:e2:85:ce:b7:2e:59:b6:48:fd:b3:36:62:37:
e9:d2:64:76:ae:31:2a:24:ea:85:e8:b8:ff:29:c0:
db:1f:7f:98:86:ed:86:d6:a7:8a:38:14:e8:21:ba:
21:a4:ee:23:fc:dd:d0:7d:b4:b4:0f:8d:d9:df:dd:
63:17:b6:2f:fc:fa:0f:26:a6:ca:e6:87:9e:6f:63:
8b:f2:c8:e9:25:25:15:74:29:d5:48:7a:a1:b5:6c:
88:bb:0f:a5:6c:3f:59:da:ec:25:f5:8a:5d:28:92:
f9:93:64:c9:aa:c0:4e:21:61:ba:2b:20:c5:e2:9b:
27:3d:a2:9d:80:2f:ac:df:80:72:90:df:e4:6a:a2:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:80:A5:94:4D:F8:08:43:2D:F3:7F:9C:CA:56:72:B5:18:79:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/853BA07EA4CB11EFA3AF3156762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1a:a2:5b:b4:46:f0:f0:bc:f6:89:14:81:f2:42:03:b8:49:
a0:65:72:9a:f2:9d:d9:a0:2b:0b:5e:5f:1f:92:c8:39:8e:ad:
f7:9e:44:9c:7d:b1:ae:3b:08:12:f6:9a:10:4c:c4:ec:4b:f0:
cd:c2:f1:4c:d2:b1:38:75:66:76:10:d8:da:76:b2:b5:ed:ae:
a8:44:e5:07:ae:85:e0:e0:f6:02:0f:70:a7:18:95:b7:eb:52:
2a:4b:fc:ff:48:89:20:76:a8:47:e3:2a:00:b2:ba:cb:58:bc:
6e:f7:05:9f:cb:73:ad:15:97:38:35:dc:a0:39:32:c3:1d:aa:
4f:a2:f3:50:16:67:26:9e:90:db:2f:da:dc:c4:fb:3b:75:ca:
31:d3:1c:e2:be:75:db:f4:d5:53:43:56:94:53:13:87:68:f5:
82:c2:a8:7b:62:c4:cf:71:1a:64:37:59:3a:82:38:20:17:9a:
51:00:40:6a:36:f4:c3:70:8e:a7:89:32:2a:64:96:36:f6:b5:
c8:ff:3c:f3:37:02:ea:71:4d:ac:8e:ce:a8:b1:d2:ac:a5:95:
cc:55:e0:9c:5c:23:bf:c8:aa:f6:8a:df:7e:56:95:ed:15:ad:
92:b4:c5:dd:10:13:7e:bf:2c:fc:c2:59:d8:52:b8:df:ad:ba:
14:50:f7:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ6KMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MTAwNTQ2WhcNMjQxMTI1MTAwNTQ2WjAYMRYw
FAYDVQQDEw02NzM5YmZmZC0xYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy6P9JLkxcVpUUSmpS7lxuGyRTA2eBJHVGNQnarOX/NiA1gjgg6Qcds5V
qrNjZr49ADLyoBpa2wlTh2jkmemORYdruC87ImnvlPbIQLnVg+vgcv4wz1d+DVr9
2q27vxrWf+O4ePgU/wKvKb5LAJsMBtoMmdO8XSISu+KFzrcuWbZI/bM2Yjfp0mR2
rjEqJOqF6Lj/KcDbH3+Yhu2G1qeKOBToIbohpO4j/N3QfbS0D43Z391jF7Yv/PoP
JqbK5oeeb2OL8sjpJSUVdCnVSHqhtWyIuw+lbD9Z2uwl9YpdKJL5k2TJqsBOIWG6
KyDF4psnPaKdgC+s34BykN/kaqJFbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGSa
gKWUTfgIQy3zf5zKVnK1GHmAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NTNCQTA3RUE0Q0IxMUVGQTNBRjMxNTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCms20MA0GCSqGSIb3DQEB
CwUAA4IBAQAtGqJbtEbw8Lz2iRSB8kIDuEmgZXKa8p3ZoCsLXl8fksg5jq33nkSc
fbGuOwgS9poQTMTsS/DNwvFM0rE4dWZ2ENjadrK17a6oROUHroXg4PYCD3CnGJW3
61IqS/z/SIkgdqhH4yoAsrrLWLxu9wWfy3OtFZc4NdygOTLDHapPovNQFmcmnpDb
L9rcxPs7dcox0xzivnXb9NVTQ1aUUxOHaPWCwqh7YsTPcRpkN1k6gjggF5pRAEBq
NvTDcI6niTIqZJY29rXI/zzzNwLqcU2sjs6osdKspZXMVeCcXCO/yKr2it9+VpXt
Fa2StMXdEBN+vyz8wlnYUrjfrboUUPdw
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:11 2024 by rpki-client on console-ams.rpki-client.org