Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B8CF745F1511EF83144E8A762E951A.roa
File: 98B8CF745F1511EF83144E8A762E951A.roa (raw, json)
Hash identifier: wZAufb0A/CgXlIdC4R8ZIVkCxtIiHJEqvYm9Jdq9Kio=
Subject key identifier: 64:64:4F:AF:BC:FF:94:30:1C:BC:ED:7F:65:06:44:65:6A:73:26:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E340
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B8CF745F1511EF83144E8A762E951A.roa
Signing time: Tue 20 Aug 2024 16:59:43 +0000
ROA not before: Tue 20 Aug 2024 16:59:40 +0000
ROA not after: Sun 01 Dec 2024 16:59:40 +0000
asID: 5065
IP address blocks: 154.86.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58176 (0xe340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 20 16:59:40 2024 GMT
Not After : Dec 1 16:59:40 2024 GMT
Subject: CN=66c4cb7f-0c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:18:6c:40:34:b1:5e:35:58:34:e2:12:cd:
b6:c8:c0:01:c3:a9:de:93:e8:af:83:8e:e7:31:89:
88:7e:83:18:ea:c5:f5:66:24:ff:b3:d6:cb:45:d3:
e8:a4:16:e0:fb:76:73:80:24:d6:0b:20:fa:9e:1a:
6d:4a:c1:83:58:78:bb:0b:b1:5d:2c:74:ab:a9:cb:
17:71:85:54:38:33:d9:ed:a6:2f:c4:ef:26:de:4a:
fe:86:0e:46:1b:bf:a9:64:af:c8:26:fb:b1:c3:ac:
b9:07:dd:ef:b4:c2:97:d0:ba:d2:1c:da:35:86:e1:
63:c1:0b:08:85:d4:63:c7:ae:95:6e:90:6b:e5:26:
40:7d:42:3f:d6:d5:95:7f:98:18:c1:57:58:50:56:
4e:90:eb:b3:e7:d2:53:46:7c:f4:41:a8:a7:e2:b7:
20:67:88:57:05:ef:58:44:4f:16:7c:e8:19:dc:7d:
e1:f2:19:84:f1:62:41:da:42:2f:7c:cd:3c:01:f5:
d1:57:2a:80:0a:d0:75:4c:d4:0f:21:fd:07:55:24:
74:e8:4b:78:aa:71:43:5e:90:38:4f:54:e2:e2:03:
00:d0:83:60:2f:ce:50:5c:11:77:b3:10:ce:05:b6:
71:f5:a9:4d:f0:f8:1b:5e:6f:da:eb:0d:4a:98:b4:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:4F:AF:BC:FF:94:30:1C:BC:ED:7F:65:06:44:65:6A:73:26:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/98B8CF745F1511EF83144E8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
65:50:b1:51:97:69:fb:62:a8:6f:54:67:cb:f7:46:b7:0e:b2:
d8:cb:fb:65:b3:ef:6b:8c:a6:c7:a0:3c:ee:bc:8d:62:65:a2:
0d:d8:85:58:04:6a:49:16:c1:c3:8e:52:22:57:b0:e2:da:2a:
68:20:41:ed:b4:aa:89:67:a8:ab:ce:7b:b7:ff:5a:45:9a:08:
65:43:b9:f4:5b:ef:81:7b:19:da:41:21:0b:77:5b:9b:be:c2:
15:50:f1:9d:10:b9:6e:66:3e:9a:7c:bf:7c:67:4d:39:d5:2b:
d6:4a:45:a2:29:82:b8:49:d6:04:6e:f4:39:36:da:d9:49:73:
96:9a:5e:37:7a:e5:49:61:59:7c:76:d0:df:d4:a7:a6:24:db:
6f:ba:d8:28:6b:c4:71:4a:94:04:c4:fd:1e:a8:45:ff:3f:b5:
e0:d4:2a:63:0c:e2:68:dc:ac:59:28:ba:d9:3b:38:49:f2:c4:
2c:dd:8e:0e:47:f5:23:0f:ac:8d:a6:61:37:ac:5c:b3:18:2e:
a3:21:13:ed:af:00:ff:c9:70:1a:c0:96:04:1b:51:55:ab:e1:
1f:d2:00:a6:05:c5:f6:20:71:6d:60:38:9c:72:ca:04:a8:3c:
00:82:4b:c0:59:bb:a0:cd:60:51:99:c3:bb:f6:46:77:cc:bc:
58:15:67:51
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAONAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODIwMTY1OTQwWhcNMjQxMjAxMTY1OTQwWjAYMRYw
FAYDVQQDEw02NmM0Y2I3Zi0wYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwKYYbEA0sV41WDTiEs22yMABw6nek+ivg47nMYmIfoMY6sX1ZiT/s9bL
RdPopBbg+3ZzgCTWCyD6nhptSsGDWHi7C7FdLHSrqcsXcYVUODPZ7aYvxO8m3kr+
hg5GG7+pZK/IJvuxw6y5B93vtMKX0LrSHNo1huFjwQsIhdRjx66VbpBr5SZAfUI/
1tWVf5gYwVdYUFZOkOuz59JTRnz0Qain4rcgZ4hXBe9YRE8WfOgZ3H3h8hmE8WJB
2kIvfM08AfXRVyqACtB1TNQPIf0HVSR06Et4qnFDXpA4T1Ti4gMA0INgL85QXBF3
sxDOBbZx9alN8PgbXm/a6w1KmLTvAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGRk
T6+8/5QwHLztf2UGRGVqcybCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OEI4Q0Y3NDVGMTUxMUVGODMxNDRFOEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYIMA0GCSqGSIb3DQEB
CwUAA4IBAQBlULFRl2n7YqhvVGfL90a3DrLYy/tls+9rjKbHoDzuvI1iZaIN2IVY
BGpJFsHDjlIiV7Di2ipoIEHttKqJZ6irznu3/1pFmghlQ7n0W++BexnaQSELd1ub
vsIVUPGdELluZj6afL98Z0051SvWSkWiKYK4SdYEbvQ5NtrZSXOWml43euVJYVl8
dtDf1KemJNtvutgoa8RxSpQExP0eqEX/P7Xg1CpjDOJo3KxZKLrZOzhJ8sQs3Y4O
R/UjD6yNpmE3rFyzGC6jIRPtrwD/yXAawJYEG1FVq+Ef0gCmBcX2IHFtYDiccsoE
qDwAgkvAWbugzWBRmcO79kZ3zLxYFWdR
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:56 2024 by rpki-client on console-ams.rpki-client.org