Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C5BDE6952E11EFB6CC3645762E951A.roa
File: A4C5BDE6952E11EFB6CC3645762E951A.roa (raw, json)
Hash identifier: 7krpDh68JrzLpRpP4RX0kA5nvDn3QakhYqcY0v4TS1o=
Subject key identifier: 15:50:03:DB:10:1C:B7:84:03:5A:F0:EB:E8:B8:8D:33:29:88:3C:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C5BDE6952E11EFB6CC3645762E951A.roa
Signing time: Mon 28 Oct 2024 13:15:04 +0000
ROA not before: Mon 28 Oct 2024 13:15:00 +0000
ROA not after: Sat 30 Nov 2024 13:15:00 +0000
asID: 203020
IP address blocks: 154.200.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66259 (0x102d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 13:15:00 2024 GMT
Not After : Nov 30 13:15:00 2024 GMT
Subject: CN=671f8e58-ee9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:ba:85:58:e6:6a:fb:00:4f:df:59:a7:f6:
9b:67:92:2e:f7:19:23:51:b4:f7:11:fa:e5:e2:12:
08:71:98:6e:34:f9:3b:7f:96:a8:73:45:a5:b4:f8:
00:9d:d7:44:75:ad:bb:e7:d1:ed:a4:bb:ef:18:72:
8c:08:50:63:05:6a:19:54:7a:26:9d:f0:5c:11:ba:
90:f4:b9:c1:1d:cc:7c:ee:4e:70:ca:b2:07:f0:19:
cf:08:02:93:87:e9:12:1a:ab:22:9b:8b:ea:99:dd:
db:2d:90:3b:10:f7:e8:6d:35:6a:50:18:35:f2:09:
ba:c7:e6:42:20:49:be:75:d9:4c:b0:77:e6:66:dc:
51:e5:62:21:ea:be:a2:9a:61:74:e8:18:e7:07:94:
65:5c:8d:21:00:77:cb:f5:82:a5:55:ed:9c:a0:34:
c7:9c:4f:0a:25:e0:7b:e6:b1:39:d3:c7:e7:56:b5:
41:ec:dc:a1:5f:e1:1a:b5:79:cd:60:1e:8b:18:83:
a3:7b:72:4b:6f:54:dd:85:9e:7c:3e:4d:ae:7e:25:
e2:11:28:68:8b:50:79:1a:91:9b:39:3a:5d:08:85:
41:0c:6f:0b:5d:ff:69:e9:64:95:fb:24:fe:4c:22:
9c:7f:af:19:f6:e0:05:35:5e:4c:a6:f8:a3:80:4a:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:03:DB:10:1C:B7:84:03:5A:F0:EB:E8:B8:8D:33:29:88:3C:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4C5BDE6952E11EFB6CC3645762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:7e:4c:c4:e7:cb:f4:39:ac:d6:08:01:1e:c9:84:f9:10:c6:
f0:82:c8:a3:13:fe:c6:78:25:30:89:85:ce:8d:e5:30:dc:97:
7b:c4:81:a1:8c:3d:a5:75:93:6f:7d:f0:b7:f5:7b:c3:5d:b5:
bd:0b:cd:15:08:49:bb:33:c3:be:cc:cf:d4:91:7d:2a:c7:bc:
fe:3e:43:c0:9d:fd:e7:0a:3c:51:c6:fa:d1:8c:42:d1:74:26:
d7:46:5a:6f:18:2d:9a:64:e7:8e:6e:c5:5e:b8:27:0d:77:f5:
c6:53:51:23:70:fb:fb:04:c5:f9:7b:4d:e0:41:8a:33:66:16:
87:52:88:f9:7e:9c:38:f0:bc:33:98:d3:60:1a:7a:74:78:2d:
19:cf:4f:da:c4:16:95:c5:1f:b8:4a:6c:b8:26:3d:1b:78:e7:
ea:21:d5:16:56:8e:ee:80:55:9f:3b:1b:1e:cc:96:b4:a9:a4:
ee:e8:01:4e:cf:a6:11:76:20:cf:7b:9d:ff:9d:cd:d0:f1:46:
45:b0:de:d8:a8:6b:81:8e:d2:28:2b:6c:ff:20:9d:6d:61:f3:
10:8c:3c:62:2c:ae:1b:70:14:c8:52:ee:76:ea:6b:07:d0:a5:
e9:91:6b:9b:bf:10:76:a6:03:d9:c2:21:8c:e3:93:14:ed:2d:
c2:47:ff:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQLTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MTMxNTAwWhcNMjQxMTMwMTMxNTAwWjAYMRYw
FAYDVQQDEw02NzFmOGU1OC1lZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyOm6hVjmavsAT99Zp/abZ5Iu9xkjUbT3Efrl4hIIcZhuNPk7f5aoc0Wl
tPgAnddEda2759HtpLvvGHKMCFBjBWoZVHomnfBcEbqQ9LnBHcx87k5wyrIH8BnP
CAKTh+kSGqsim4vqmd3bLZA7EPfobTVqUBg18gm6x+ZCIEm+ddlMsHfmZtxR5WIh
6r6immF06BjnB5RlXI0hAHfL9YKlVe2coDTHnE8KJeB75rE508fnVrVB7NyhX+Ea
tXnNYB6LGIOje3JLb1TdhZ58Pk2ufiXiEShoi1B5GpGbOTpdCIVBDG8LXf9p6WSV
+yT+TCKcf68Z9uAFNV5MpvijgEqS1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBVQ
A9sQHLeEA1rw6+i4jTMpiDxxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNEM1QkRFNjk1MkUxMUVGQjZDQzM2NDU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsjVMA0GCSqGSIb3DQEB
CwUAA4IBAQDEfkzE58v0OazWCAEeyYT5EMbwgsijE/7GeCUwiYXOjeUw3Jd7xIGh
jD2ldZNvffC39XvDXbW9C80VCEm7M8O+zM/UkX0qx7z+PkPAnf3nCjxRxvrRjELR
dCbXRlpvGC2aZOeObsVeuCcNd/XGU1EjcPv7BMX5e03gQYozZhaHUoj5fpw48Lwz
mNNgGnp0eC0Zz0/axBaVxR+4Smy4Jj0beOfqIdUWVo7ugFWfOxsezJa0qaTu6AFO
z6YRdiDPe53/nc3Q8UZFsN7YqGuBjtIoK2z/IJ1tYfMQjDxiLK4bcBTIUu526msH
0KXpkWubvxB2pgPZwiGM45MU7S3CR/+R
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:21 2024 by rpki-client on console-ams.rpki-client.org