Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B0826309F7B11EF8520BCB2762E951A.roa
File: 8B0826309F7B11EF8520BCB2762E951A.roa (raw, json)
Hash identifier: Ll51JftNdhTyA5WKg0R2kNgQ4fnamJqVSKWnbIDszHw=
Subject key identifier: 4C:A3:26:08:D0:B4:F4:D2:59:CC:89:7F:78:D1:CF:79:F7:6F:A6:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010B08
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B0826309F7B11EF8520BCB2762E951A.roa
Signing time: Sun 10 Nov 2024 15:50:43 +0000
ROA not before: Sun 10 Nov 2024 15:50:40 +0000
ROA not after: Thu 12 Dec 2024 15:50:40 +0000
asID: 398823
IP address blocks: 154.212.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68360 (0x10b08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 10 15:50:40 2024 GMT
Not After : Dec 12 15:50:40 2024 GMT
Subject: CN=6730d653-0c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:0e:94:40:f0:51:84:79:59:3a:e9:05:59:
80:6b:3e:e4:70:66:28:84:2d:52:aa:8c:2d:a4:58:
bc:e1:87:ac:83:4b:7e:b4:88:88:91:82:2d:b1:81:
60:bc:ce:2f:a9:70:d7:ae:ea:78:f6:45:b9:b4:d9:
9d:21:e1:56:74:f5:b6:8d:72:cd:3a:af:d1:e3:d9:
4c:23:87:1d:3d:2c:9c:3f:9f:0f:22:61:b7:bf:6f:
4f:f2:ab:77:3f:08:66:42:79:f7:ff:b6:31:b1:92:
b5:de:fb:42:05:c3:be:37:00:26:b6:43:e1:39:32:
41:6b:62:b9:7c:64:e0:ce:f8:cc:e7:1a:9f:db:71:
e9:5e:6b:65:37:56:4d:82:fe:19:c4:8b:af:ae:e4:
1c:4f:d2:2c:b5:f4:84:2e:0d:64:4a:6e:62:ba:a6:
4c:c1:63:3b:f2:e8:c4:6b:24:27:46:24:66:df:44:
cb:86:13:f1:1f:ef:18:92:71:cb:9b:64:2b:61:fa:
99:39:ae:53:23:7d:b2:4b:7e:d1:c3:ea:5b:a6:2b:
b3:67:aa:cb:36:6a:01:a8:f4:04:95:de:37:cd:75:
67:6c:52:7b:8b:0d:7d:e0:1a:ca:d5:5f:fb:3f:84:
3f:01:09:1b:37:03:24:f7:93:27:39:14:28:ed:8d:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A3:26:08:D0:B4:F4:D2:59:CC:89:7F:78:D1:CF:79:F7:6F:A6:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B0826309F7B11EF8520BCB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.32.0/19
Signature Algorithm: sha256WithRSAEncryption
24:b0:eb:e3:e7:dc:c0:9a:0f:f6:bb:a4:36:d4:3b:f7:f3:f2:
0a:0f:51:e4:66:86:3a:e0:a8:9b:f3:4a:41:23:74:15:69:eb:
0e:82:46:ce:d4:e7:c8:4d:11:4e:86:0b:09:1a:a8:cf:79:fd:
6c:85:30:07:f6:ed:dc:1a:7b:e1:8f:94:0d:fa:5c:6e:20:6a:
fb:97:5e:6f:47:63:f0:28:14:92:ca:e0:d9:f8:94:60:ce:40:
d6:0e:d5:3a:49:33:2f:5d:14:67:be:a4:35:bf:08:9a:e3:3c:
20:fd:07:07:2e:e0:b6:95:bf:47:c9:05:08:62:9c:8a:2e:f2:
f3:cc:c1:83:91:aa:49:9e:44:c0:a4:f8:4e:ec:b5:35:61:d9:
65:73:eb:b5:e4:43:8e:48:85:8c:f9:b1:63:69:ed:b9:94:0c:
41:76:0e:1a:e4:4e:af:8a:28:ca:05:7e:f1:cd:45:63:06:29:
0a:68:0d:5a:17:be:7a:43:ba:a6:c3:61:6e:84:41:ca:60:cf:
4b:50:dd:ed:be:0e:1c:00:f9:25:21:5f:1f:45:68:76:84:1d:
9b:26:35:4e:c1:e1:f2:b4:55:6f:11:b6:b7:f6:e1:d6:8a:e7:
96:65:00:47:0c:21:d4:ab:46:fe:41:78:00:2e:77:dc:a8:f9:
95:b0:2d:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQsIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEwMTU1MDQwWhcNMjQxMjEyMTU1MDQwWjAYMRYw
FAYDVQQDEw02NzMwZDY1My0wYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA24sOlEDwUYR5WTrpBVmAaz7kcGYohC1SqowtpFi84Yesg0t+tIiIkYIt
sYFgvM4vqXDXrup49kW5tNmdIeFWdPW2jXLNOq/R49lMI4cdPSycP58PImG3v29P
8qt3PwhmQnn3/7YxsZK13vtCBcO+NwAmtkPhOTJBa2K5fGTgzvjM5xqf23HpXmtl
N1ZNgv4ZxIuvruQcT9IstfSELg1kSm5iuqZMwWM78ujEayQnRiRm30TLhhPxH+8Y
knHLm2QrYfqZOa5TI32yS37Rw+pbpiuzZ6rLNmoBqPQEld43zXVnbFJ7iw194BrK
1V/7P4Q/AQkbNwMk95MnORQo7Y0cWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEyj
JgjQtPTSWcyJf3jRz3n3b6YBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QjA4MjYzMDlGN0IxMUVGODUyMEJDQjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmtQgMA0GCSqGSIb3DQEB
CwUAA4IBAQAksOvj59zAmg/2u6Q21Dv38/IKD1HkZoY64Kib80pBI3QVaesOgkbO
1OfITRFOhgsJGqjPef1shTAH9u3cGnvhj5QN+lxuIGr7l15vR2PwKBSSyuDZ+JRg
zkDWDtU6STMvXRRnvqQ1vwia4zwg/QcHLuC2lb9HyQUIYpyKLvLzzMGDkapJnkTA
pPhO7LU1Ydllc+u15EOOSIWM+bFjae25lAxBdg4a5E6viijKBX7xzUVjBikKaA1a
F756Q7qmw2FuhEHKYM9LUN3tvg4cAPklIV8fRWh2hB2bJjVOweHytFVvEba39uHW
iueWZQBHDCHUq0b+QXgALnfcqPmVsC2T
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-fra.rpki-client.org