Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAFE1F8A45E11EFB19C7B9D762E951A.roa
File: 8BAFE1F8A45E11EFB19C7B9D762E951A.roa (raw, json)
Hash identifier: 7Znye7taUQ9PqmorcFZCNaUJfG1oYml3O92dkxDl2Yk=
Subject key identifier: 53:3E:65:C7:4E:8F:75:60:34:8E:A8:FA:C4:35:5A:F0:F2:50:BE:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAFE1F8A45E11EFB19C7B9D762E951A.roa
Signing time: Sat 16 Nov 2024 21:05:45 +0000
ROA not before: Sat 16 Nov 2024 21:05:41 +0000
ROA not after: Sat 30 Nov 2024 21:05:41 +0000
asID: 39600
IP address blocks: 154.95.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69199 (0x10e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 21:05:41 2024 GMT
Not After : Nov 30 21:05:41 2024 GMT
Subject: CN=67390929-2d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:6f:32:f5:a4:af:8c:71:7e:73:f0:a5:b9:
fb:7b:66:0a:06:8a:a2:79:b9:cc:dc:db:2e:93:87:
8f:d7:50:33:e2:83:bd:07:2f:67:b8:ce:24:12:b6:
75:c0:7e:70:d5:a5:b8:9b:dc:35:8c:38:b2:e6:9a:
34:ed:95:b7:82:42:80:0a:4b:71:ff:c5:6c:f8:eb:
4d:3c:f0:ce:74:ec:92:92:f9:95:00:b0:89:70:93:
4f:ee:b6:63:44:44:9a:fd:18:c1:1b:ab:89:76:cd:
ff:c7:a8:db:0d:e0:e9:65:c8:46:0a:cc:ee:38:67:
66:ed:f2:84:4c:49:77:cc:04:c9:cc:ab:ba:23:66:
81:ff:00:cc:07:a5:86:81:2c:a9:44:ea:aa:45:1d:
f4:20:9c:c2:c8:ac:30:8b:0d:47:53:88:ed:71:97:
da:7c:c3:4b:5e:fd:ed:f1:20:31:14:90:92:94:55:
06:b6:5a:f8:69:83:cf:1b:75:d8:ee:8d:8a:1d:9c:
94:80:14:fc:94:f3:47:2e:93:37:70:1c:e6:c9:ed:
57:6f:95:f6:6c:7b:b6:44:63:b5:9a:16:e5:db:c4:
97:5c:39:b1:e5:71:a3:97:af:7a:16:2f:5f:01:28:
3d:dc:0b:26:52:35:e8:4b:70:9f:14:28:a6:0a:b9:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3E:65:C7:4E:8F:75:60:34:8E:A8:FA:C4:35:5A:F0:F2:50:BE:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAFE1F8A45E11EFB19C7B9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.40.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:43:3a:ba:1c:ac:86:31:45:8c:0f:8e:63:3b:da:be:ef:72:
06:f7:cf:5e:ed:5c:0d:82:b1:05:e3:6f:3c:7d:52:1d:69:9f:
ae:0b:63:8f:bb:63:63:7e:c0:56:b7:12:f2:66:98:d7:91:89:
24:fb:6e:ec:a2:08:11:8b:03:43:dd:c4:cc:cb:c5:0e:f6:aa:
dc:91:6d:97:17:d4:80:a5:ee:d5:46:ac:17:db:5f:19:63:f7:
cf:65:62:6f:10:18:9b:69:1d:9e:01:60:ef:70:dc:3b:0c:58:
fd:d7:5e:90:93:48:08:e0:61:4a:48:ec:62:fe:8d:c7:8f:4e:
d3:9b:ea:20:5f:af:80:9b:4a:24:3b:d3:f3:b9:ff:cd:6f:79:
69:ab:fb:a3:ff:15:e9:d4:cd:76:d4:7a:b9:eb:37:6e:23:1e:
63:9a:47:95:b8:15:2a:71:c8:2c:59:50:ed:35:05:ee:15:4c:
be:d6:a1:de:e3:18:7a:34:d3:49:7d:ed:f6:bf:47:97:2f:c9:
58:fb:20:00:cc:76:41:5a:97:56:eb:a2:7d:80:7d:59:c3:67:
f0:28:c5:d4:7b:83:5a:ae:07:e4:c9:6c:02:ba:e4:15:0d:7b:
f0:f5:c7:ca:a3:3d:51:0b:38:33:83:72:e3:ea:91:d1:be:ca:
89:99:5e:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ5PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MjEwNTQxWhcNMjQxMTMwMjEwNTQxWjAYMRYw
FAYDVQQDEw02NzM5MDkyOS0yZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx9NvMvWkr4xxfnPwpbn7e2YKBoqiebnM3Nsuk4eP11Az4oO9By9nuM4k
ErZ1wH5w1aW4m9w1jDiy5po07ZW3gkKACktx/8Vs+OtNPPDOdOySkvmVALCJcJNP
7rZjRESa/RjBG6uJds3/x6jbDeDpZchGCszuOGdm7fKETEl3zATJzKu6I2aB/wDM
B6WGgSypROqqRR30IJzCyKwwiw1HU4jtcZfafMNLXv3t8SAxFJCSlFUGtlr4aYPP
G3XY7o2KHZyUgBT8lPNHLpM3cBzmye1Xb5X2bHu2RGO1mhbl28SXXDmx5XGjl696
Fi9fASg93AsmUjXoS3CfFCimCrnNQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFM+
ZcdOj3VgNI6o+sQ1WvDyUL7PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QkFGRTFGOEE0NUUxMUVGQjE5QzdCOUQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDml8oMA0GCSqGSIb3DQEB
CwUAA4IBAQDDQzq6HKyGMUWMD45jO9q+73IG989e7VwNgrEF4288fVIdaZ+uC2OP
u2NjfsBWtxLyZpjXkYkk+27soggRiwND3cTMy8UO9qrckW2XF9SApe7VRqwX218Z
Y/fPZWJvEBibaR2eAWDvcNw7DFj9116Qk0gI4GFKSOxi/o3Hj07Tm+ogX6+Am0ok
O9Pzuf/Nb3lpq/uj/xXp1M121Hq56zduIx5jmkeVuBUqccgsWVDtNQXuFUy+1qHe
4xh6NNNJfe32v0eXL8lY+yAAzHZBWpdW66J9gH1Zw2fwKMXUe4NargfkyWwCuuQV
DXvw9cfKoz1RCzgzg3Lj6pHRvsqJmV58
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:15 2024 by rpki-client on console-fra.rpki-client.org