Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5FAA83AA4D711EF99E228A0762E951A.roa
File: A5FAA83AA4D711EF99E228A0762E951A.roa (raw, json)
Hash identifier: Gp2wRnnVV43kiL/EmhqoNJoVwo3DvYS7xeq7to56mBU=
Subject key identifier: B3:EE:E6:DE:C2:43:D8:F0:62:DE:52:EB:2E:71:A2:8E:1B:3F:A9:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010ED8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5FAA83AA4D711EF99E228A0762E951A.roa
Signing time: Sun 17 Nov 2024 11:32:38 +0000
ROA not before: Sun 17 Nov 2024 11:32:35 +0000
ROA not after: Thu 28 Nov 2024 11:32:35 +0000
asID: 133180
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69336 (0x10ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 11:32:35 2024 GMT
Not After : Nov 28 11:32:35 2024 GMT
Subject: CN=6739d456-6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:fb:b5:f5:ba:77:67:f6:f9:fc:92:07:12:
9d:13:96:d3:2e:f1:33:e9:9d:87:4d:23:ca:a5:9c:
f0:54:24:7f:17:a1:87:e5:08:58:b5:99:e7:c6:5d:
d3:91:4b:00:62:6c:00:fd:59:a3:a8:dd:23:4a:33:
ae:2b:af:3e:29:1c:aa:fc:e0:5d:59:90:c1:07:d5:
27:b3:9f:fb:3f:9c:15:e8:1f:9a:8c:a5:de:eb:3e:
fe:5f:bf:98:de:d9:75:29:1a:aa:b4:2f:f8:5a:0a:
ff:af:cd:c0:19:6e:d7:bb:9d:ad:19:c6:f4:b1:1b:
ca:ae:9b:06:1c:f4:37:23:65:65:60:40:91:4f:1d:
19:b0:f6:96:0e:22:8e:50:fe:77:7b:69:dc:30:97:
8f:f1:d7:7e:5b:4a:c0:9e:28:ba:a0:fa:14:6f:00:
ec:55:1c:fe:12:80:4f:c1:06:35:46:27:1b:81:6c:
b0:a4:23:3c:28:65:af:65:52:21:bf:55:68:9c:be:
48:5b:d0:1d:03:ef:42:72:f8:95:a3:c8:d5:77:7c:
5d:86:2d:ce:c6:fe:6f:74:2c:b0:cc:85:0b:f4:87:
7e:64:42:3e:02:80:b4:b8:42:1c:6d:e3:9f:8a:81:
f0:01:11:55:bf:00:b4:b3:93:9a:2a:2e:49:4b:8e:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EE:E6:DE:C2:43:D8:F0:62:DE:52:EB:2E:71:A2:8E:1B:3F:A9:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5FAA83AA4D711EF99E228A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
bb:74:b9:d6:58:12:e9:8e:be:48:d9:41:15:ae:23:64:0d:5a:
20:09:30:86:4b:b0:14:e0:bf:ee:c7:36:21:f4:cb:68:cf:a6:
d4:aa:7c:ce:06:53:fe:fc:9a:57:23:a9:92:8e:b1:2f:27:e5:
72:4d:dc:0a:17:f7:e2:84:37:f1:db:64:6a:7f:ad:ee:cb:13:
b0:23:80:d0:ab:40:ba:b9:bc:f3:90:a9:66:82:df:28:9e:68:
8e:47:66:ed:ed:9e:e7:67:98:f0:78:44:26:49:9f:e1:44:2b:
06:1d:40:b5:9c:c7:ef:85:01:fd:3b:0e:cb:13:88:e5:96:26:
16:88:f5:1a:d0:64:37:50:04:21:29:e6:67:32:ba:19:ab:6e:
e5:7e:4c:99:9a:6a:ff:69:a2:09:8d:d2:e6:18:88:bb:77:6a:
39:70:95:e1:fe:9e:d8:09:e8:f5:d1:06:71:14:75:6a:bc:8c:
b3:05:eb:59:cd:41:f4:1b:ec:94:49:d2:77:28:12:eb:85:3f:
1b:93:c7:9e:0b:e2:96:85:1b:a0:b8:07:30:92:3f:eb:52:c9:
11:37:53:3e:fe:56:cf:66:d3:11:bb:24:dd:bb:e0:70:9e:c1:
da:22:6f:5f:4f:5b:05:fc:3a:cb:5e:ed:1a:0f:a1:b0:df:d3:
3c:eb:de:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ7YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MTEzMjM1WhcNMjQxMTI4MTEzMjM1WjAYMRYw
FAYDVQQDEw02NzM5ZDQ1Ni02OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Df7tfW6d2f2+fySBxKdE5bTLvEz6Z2HTSPKpZzwVCR/F6GH5QhYtZnn
xl3TkUsAYmwA/VmjqN0jSjOuK68+KRyq/OBdWZDBB9Uns5/7P5wV6B+ajKXe6z7+
X7+Y3tl1KRqqtC/4Wgr/r83AGW7Xu52tGcb0sRvKrpsGHPQ3I2VlYECRTx0ZsPaW
DiKOUP53e2ncMJeP8dd+W0rAnii6oPoUbwDsVRz+EoBPwQY1RicbgWywpCM8KGWv
ZVIhv1VonL5IW9AdA+9CcviVo8jVd3xdhi3Oxv5vdCywzIUL9Id+ZEI+AoC0uEIc
beOfioHwARFVvwC0s5OaKi5JS45P3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLPu
5t7CQ9jwYt5S6y5xoo4bP6n3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNUZBQTgzQUE0RDcxMUVGOTlFMjI4QTA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsKAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7dLnWWBLpjr5I2UEVriNkDVogCTCGS7AU4L/uxzYh9Mtoz6bUqnzO
BlP+/JpXI6mSjrEvJ+VyTdwKF/fihDfx22Rqf63uyxOwI4DQq0C6ubzzkKlmgt8o
nmiOR2bt7Z7nZ5jweEQmSZ/hRCsGHUC1nMfvhQH9Ow7LE4jlliYWiPUa0GQ3UAQh
KeZnMroZq27lfkyZmmr/aaIJjdLmGIi7d2o5cJXh/p7YCej10QZxFHVqvIyzBetZ
zUH0G+yUSdJ3KBLrhT8bk8eeC+KWhRuguAcwkj/rUskRN1M+/lbPZtMRuyTdu+Bw
nsHaIm9fT1sF/DrLXu0aD6Gw39M8696g
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:27 2024 by rpki-client on console-ams.rpki-client.org