Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D1A8CCA8D3711EFB339CC96762E951A.roa
File: 8D1A8CCA8D3711EFB339CC96762E951A.roa (raw, json)
Hash identifier: x7QnJRBtwok6AjOdM3iHEGLtQ1PY5eybZF+MlNBOhMY=
Subject key identifier: AD:87:6B:EE:60:F5:C5:90:BF:AE:E8:4C:59:60:34:87:72:E1:F6:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FFD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D1A8CCA8D3711EFB339CC96762E951A.roa
Signing time: Fri 18 Oct 2024 09:58:40 +0000
ROA not before: Fri 18 Oct 2024 09:58:36 +0000
ROA not after: Sat 04 Jan 2025 09:58:36 +0000
asID: 136950
IP address blocks: 154.213.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65491 (0xffd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 18 09:58:36 2024 GMT
Not After : Jan 4 09:58:36 2025 GMT
Subject: CN=67123150-9021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:03:b3:e5:ad:4d:f5:0c:ff:3c:8f:b4:d8:
1f:0a:3a:3b:d8:d2:9d:ed:3f:e8:7e:61:55:8c:fb:
57:c0:ad:89:72:e5:d1:63:e8:3f:eb:d2:83:db:90:
84:24:ea:9f:04:d2:63:22:24:67:5b:f3:38:8f:9d:
26:f1:56:8e:da:1e:1e:3b:4d:75:ff:d3:5c:18:08:
6c:8a:37:6e:21:df:b4:60:e1:d0:99:8f:97:b0:a8:
fe:3e:8a:07:33:1e:f1:6c:31:d5:8b:60:87:27:bd:
f5:33:83:d2:1b:16:2e:ed:2c:d7:2d:19:a4:54:9e:
a5:97:1d:7e:14:d4:5e:10:ad:e3:6e:77:c1:c7:54:
a4:f5:a3:8c:da:d1:3b:14:82:e2:52:88:1b:24:a7:
4f:08:a2:b2:21:ab:29:4c:ea:b5:b1:56:06:3c:9b:
35:f6:0a:7d:12:9c:1e:37:04:dc:85:99:a9:d7:de:
a7:0c:2a:38:6d:17:5a:6f:d9:47:ca:8e:ac:86:d8:
75:1f:9b:39:e0:a0:fd:da:d9:bf:7d:31:dc:8e:ac:
01:12:44:cd:9d:6c:24:5f:c5:f4:3a:63:db:31:d7:
70:6d:4d:f9:26:c4:43:f9:f7:5e:c6:33:ac:87:27:
fb:1b:d0:32:00:88:be:2a:ee:19:0f:36:a0:9e:a9:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:6B:EE:60:F5:C5:90:BF:AE:E8:4C:59:60:34:87:72:E1:F6:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D1A8CCA8D3711EFB339CC96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.26.0/23
Signature Algorithm: sha256WithRSAEncryption
37:53:01:67:43:06:6e:86:a5:c8:c2:e5:8d:37:1b:32:65:5f:
1e:29:12:d5:24:b1:58:6f:f8:60:e8:46:ab:d1:42:a6:49:48:
fa:df:06:d7:a4:da:09:12:fe:d2:4b:2a:03:22:69:7d:45:d8:
9b:e9:bc:cc:da:fe:79:24:25:fb:ff:ed:2e:c5:14:d6:90:8b:
84:3b:ab:c4:df:aa:03:25:a5:02:8d:a7:75:0d:43:47:a4:7e:
71:93:12:5b:68:75:ea:06:92:e8:07:e1:f9:b2:fc:83:56:7e:
40:36:ec:4b:d8:54:59:75:36:b9:0b:5f:3f:86:9f:43:5a:a2:
52:7b:4c:f0:09:bf:6c:ad:dd:10:dc:2b:d0:9d:79:97:7d:94:
1a:af:bd:ef:fa:13:1f:cb:84:bf:65:d8:fb:c0:17:95:20:9d:
b6:2e:27:6b:58:fc:ff:2a:27:d3:90:e1:a8:c9:c7:1e:d2:0d:
11:80:ab:40:37:5d:df:8c:0a:13:04:1f:f9:21:ae:54:9b:11:
69:30:c4:bc:d5:4b:39:7c:3f:42:8e:7a:3d:69:af:fc:44:87:
ce:b4:1a:15:f5:67:ae:f1:35:c1:ff:4a:57:26:ea:b3:55:6f:
f1:db:88:38:95:2f:8b:1c:6e:3a:54:11:f5:04:18:85:bf:b0:
06:67:5a:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAP/TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDE4MDk1ODM2WhcNMjUwMTA0MDk1ODM2WjAYMRYw
FAYDVQQDEw02NzEyMzE1MC05MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0SIDs+WtTfUM/zyPtNgfCjo72NKd7T/ofmFVjPtXwK2JcuXRY+g/69KD
25CEJOqfBNJjIiRnW/M4j50m8VaO2h4eO011/9NcGAhsijduId+0YOHQmY+XsKj+
PooHMx7xbDHVi2CHJ731M4PSGxYu7SzXLRmkVJ6llx1+FNReEK3jbnfBx1Sk9aOM
2tE7FILiUogbJKdPCKKyIaspTOq1sVYGPJs19gp9EpweNwTchZmp196nDCo4bRda
b9lHyo6shth1H5s54KD92tm/fTHcjqwBEkTNnWwkX8X0OmPbMddwbU35JsRD+fde
xjOshyf7G9AyAIi+Ku4ZDzagnqmNkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK2H
a+5g9cWQv67oTFlgNIdy4fb1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDFBOENDQThEMzcxMUVGQjMzOUNDOTY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtUaMA0GCSqGSIb3DQEB
CwUAA4IBAQA3UwFnQwZuhqXIwuWNNxsyZV8eKRLVJLFYb/hg6Ear0UKmSUj63wbX
pNoJEv7SSyoDIml9Rdib6bzM2v55JCX7/+0uxRTWkIuEO6vE36oDJaUCjad1DUNH
pH5xkxJbaHXqBpLoB+H5svyDVn5ANuxL2FRZdTa5C18/hp9DWqJSe0zwCb9srd0Q
3CvQnXmXfZQar73v+hMfy4S/Zdj7wBeVIJ22LidrWPz/KifTkOGoycce0g0RgKtA
N13fjAoTBB/5Ia5UmxFpMMS81Us5fD9Cjno9aa/8RIfOtBoV9Weu8TXB/0pXJuqz
VW/x24g4lS+LHG46VBH1BBiFv7AGZ1o9
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:15 2024 by rpki-client on console-fra.rpki-client.org