Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABA8189CA8E911EF92C74CB2762E951A.roa
File: ABA8189CA8E911EF92C74CB2762E951A.roa (raw, json)
Hash identifier: MBbso70XxZ6DW3Krj26S9mm80rDaj2GjW8cm0hfSLdk=
Subject key identifier: 29:A6:24:7F:0B:94:43:96:C2:A5:79:ED:CD:11:73:D5:C5:98:FC:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0110FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABA8189CA8E911EF92C74CB2762E951A.roa
Signing time: Fri 22 Nov 2024 15:51:43 +0000
ROA not before: Fri 22 Nov 2024 15:51:40 +0000
ROA not after: Tue 03 Dec 2024 15:51:40 +0000
asID: 62240
IP address blocks: 154.194.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69883 (0x110fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 15:51:40 2024 GMT
Not After : Dec 3 15:51:40 2024 GMT
Subject: CN=6740a88f-7047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:b0:1d:78:67:eb:29:02:aa:79:e7:74:9e:
e1:30:f9:97:e0:6a:bc:1d:fb:0b:26:22:3a:0d:5d:
f2:aa:39:63:a4:11:7f:b5:be:56:05:e5:01:43:7f:
db:bf:a7:52:43:cd:32:e9:d0:89:17:a1:11:4c:f8:
0a:b2:62:ff:ba:8d:95:2e:f3:c6:0f:b6:ea:87:25:
d6:5e:52:91:41:95:ce:ad:dc:09:e1:e5:1e:48:de:
ba:91:12:32:86:12:37:12:73:1e:3e:5a:75:71:6c:
25:8e:24:29:b7:4a:27:c4:31:84:75:8a:83:7f:da:
69:ee:ec:36:ff:40:5b:79:f4:d8:ab:7d:39:a6:7c:
a5:4a:bf:3d:6b:de:fe:30:d7:c2:b6:10:21:91:f6:
65:bc:d2:b9:56:1c:c0:1b:7d:fe:3d:9f:84:78:f6:
7e:8a:f6:1a:49:c5:96:c9:74:49:df:79:74:34:0c:
3b:6e:55:14:89:9f:0a:70:1e:2a:a6:f3:e1:bc:17:
12:82:9b:4f:c6:21:67:25:a8:90:d6:3f:ec:2b:f3:
43:e9:de:2d:d8:0e:df:2f:65:e2:70:63:4d:ba:c8:
92:3c:b7:ca:35:db:9e:91:e4:d3:bd:b8:88:ee:a5:
40:1d:58:db:d0:23:10:94:05:20:73:b5:88:d8:f1:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:24:7F:0B:94:43:96:C2:A5:79:ED:CD:11:73:D5:C5:98:FC:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ABA8189CA8E911EF92C74CB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.126.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9a:84:73:3a:5b:66:49:eb:7e:31:ed:86:70:6b:53:0a:f6:
69:47:10:94:94:67:ac:af:c3:c3:3d:9b:c7:22:db:0f:01:0a:
72:37:4d:6f:c3:11:92:1e:3f:63:ce:ea:71:49:75:17:e8:71:
88:c2:63:86:af:1f:29:e2:07:57:b9:67:3d:73:15:5c:49:be:
64:4e:dd:e7:69:3f:41:79:bd:67:23:0e:18:53:b2:2a:ee:40:
66:b0:08:02:5a:7c:27:cf:45:21:3f:f4:cc:90:49:c2:0a:a9:
2d:e1:b8:25:43:48:2c:03:60:68:87:49:b7:df:e8:2f:34:4e:
19:c7:d1:f5:73:65:b6:c1:fe:ce:df:8e:09:54:9f:f8:1a:ea:
7c:46:53:af:b6:1d:4f:5e:38:77:ab:e5:db:e6:c0:66:cc:74:
c2:19:80:a0:73:fe:c9:06:45:d8:b6:54:47:4a:e0:e6:a5:6a:
b4:57:d0:f2:5c:58:fe:98:41:98:ea:d3:1f:a9:1f:29:84:e3:
b4:94:13:ef:00:2c:9a:f8:3c:d2:51:18:76:5a:b3:d7:07:96:
63:4a:79:75:88:4d:7d:9c:2c:bd:d4:0e:cd:95:18:50:10:97:
8d:21:51:70:7c:10:0a:b1:a7:2a:d9:0a:60:75:4d:75:ed:3c:
49:15:fd:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARD7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTU1MTQwWhcNMjQxMjAzMTU1MTQwWjAYMRYw
FAYDVQQDEw02NzQwYTg4Zi03MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAosywHXhn6ykCqnnndJ7hMPmX4Gq8HfsLJiI6DV3yqjljpBF/tb5WBeUB
Q3/bv6dSQ80y6dCJF6ERTPgKsmL/uo2VLvPGD7bqhyXWXlKRQZXOrdwJ4eUeSN66
kRIyhhI3EnMePlp1cWwljiQpt0onxDGEdYqDf9pp7uw2/0BbefTYq305pnylSr89
a97+MNfCthAhkfZlvNK5VhzAG33+PZ+EePZ+ivYaScWWyXRJ33l0NAw7blUUiZ8K
cB4qpvPhvBcSgptPxiFnJaiQ1j/sK/ND6d4t2A7fL2XicGNNusiSPLfKNduekeTT
vbiI7qVAHVjb0CMQlAUgc7WI2PHq5wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCmm
JH8LlEOWwqV57c0Rc9XFmPzIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQkE4MTg5Q0E4RTkxMUVGOTJDNzRDQjI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsJ+MA0GCSqGSIb3DQEB
CwUAA4IBAQAlmoRzOltmSet+Me2GcGtTCvZpRxCUlGesr8PDPZvHItsPAQpyN01v
wxGSHj9jzupxSXUX6HGIwmOGrx8p4gdXuWc9cxVcSb5kTt3naT9Beb1nIw4YU7Iq
7kBmsAgCWnwnz0UhP/TMkEnCCqkt4bglQ0gsA2Boh0m33+gvNE4Zx9H1c2W2wf7O
344JVJ/4Gup8RlOvth1PXjh3q+Xb5sBmzHTCGYCgc/7JBkXYtlRHSuDmpWq0V9Dy
XFj+mEGY6tMfqR8phOO0lBPvACya+DzSURh2WrPXB5ZjSnl1iE19nCy91A7NlRhQ
EJeNIVFwfBAKsacq2QpgdU117TxJFf1q
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:42 2024 by rpki-client on console-fra.rpki-client.org