Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B450D4269D1711EFA86CAAAC762E951A.roa
File: B450D4269D1711EFA86CAAAC762E951A.roa (raw, json)
Hash identifier: 3cHsf+d/O4s6KDjGALdlwLjUm0MEviccs7BxhHBXE1c=
Subject key identifier: 70:9B:03:EA:44:67:3F:D9:92:F7:0A:41:1F:47:7A:4E:05:8F:60:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01095B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B450D4269D1711EFA86CAAAC762E951A.roa
Signing time: Thu 07 Nov 2024 14:51:01 +0000
ROA not before: Thu 07 Nov 2024 14:50:57 +0000
ROA not after: Tue 10 Dec 2024 14:50:57 +0000
asID: 137552
IP address blocks: 154.194.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67931 (0x1095b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 7 14:50:57 2024 GMT
Not After : Dec 10 14:50:57 2024 GMT
Subject: CN=672cd3d5-eb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:32:7f:8a:e5:43:5d:9c:36:82:60:a4:19:
8c:e4:a6:7f:7d:4e:34:86:fd:ce:54:db:f0:07:aa:
ea:d5:c1:11:2a:4b:0a:94:4b:71:d3:68:70:45:f3:
6c:40:49:2e:96:f4:11:89:e9:bd:49:1b:3f:df:b3:
fd:0d:3a:db:69:30:82:15:73:83:8f:9d:e3:fa:fb:
6a:02:d8:e0:20:2d:7e:b9:03:2a:cb:20:19:df:c0:
68:66:a2:98:ed:37:a7:3c:e9:b4:92:3e:ec:6f:90:
31:cb:68:00:cb:0e:83:4a:96:94:2e:46:9a:1f:d3:
89:4b:37:ed:80:ec:f2:ff:3d:46:46:5a:5e:00:e7:
95:64:68:e7:44:56:bd:b0:54:16:bc:8c:23:10:8b:
7a:6a:8d:ce:59:cf:c3:28:21:9a:af:87:d0:8a:02:
26:c3:70:f7:04:de:8a:20:76:af:65:12:ab:bb:18:
fa:44:e9:9f:04:99:05:71:6e:7b:e2:1c:62:52:d2:
8c:22:b3:d1:be:ce:a2:53:d2:d6:0f:22:b5:ae:70:
d8:df:cb:f1:c4:2f:cf:0f:42:1f:58:a5:1d:b5:10:
90:8c:07:d9:d1:d7:50:b4:4a:b2:12:c3:ee:f0:3d:
d9:5c:cc:03:eb:84:f4:69:76:99:08:5d:7a:c1:8d:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:03:EA:44:67:3F:D9:92:F7:0A:41:1F:47:7A:4E:05:8F:60:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B450D4269D1711EFA86CAAAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bf:a6:19:5d:36:b5:ae:d8:54:ea:1b:2d:8a:59:80:0f:44:
8b:c9:a0:b3:f1:ba:e9:ef:d3:e8:f8:04:58:8f:7d:11:6b:ab:
68:6a:5b:5f:af:7e:5e:2b:e3:f0:fc:1c:4f:26:87:4f:98:c2:
f4:ad:d3:53:9f:b6:d3:13:e7:df:f1:68:11:3f:39:8b:5b:4b:
94:3d:42:b3:74:8b:ce:55:a1:94:55:d0:49:c3:2d:5d:18:62:
48:5f:d2:59:cf:b0:30:70:1a:b2:9e:8c:bd:6b:2c:1c:f2:7a:
9d:83:46:fa:8c:9e:0c:de:25:23:71:ac:94:e1:c5:00:ca:e6:
2d:3c:5d:a6:3c:bb:b0:bf:bc:f9:82:bb:0e:3d:e3:ec:cd:bf:
57:80:8c:11:be:83:88:32:35:eb:15:40:16:b6:76:01:93:4a:
72:24:fd:56:74:ab:51:06:3c:29:60:1b:f8:bd:73:24:87:3c:
1f:b2:0a:c0:6b:c9:3b:d9:8b:6a:4b:4a:e3:b2:61:5f:fc:28:
2e:98:47:9c:1f:95:4a:94:6d:ce:c5:66:23:35:2b:8b:c0:32:
4a:ee:15:1d:8b:fa:2f:f6:47:6b:2a:0a:1b:78:df:a9:9b:72:
1a:2e:48:e2:64:39:81:12:29:6f:8d:51:8c:11:23:de:d3:90:
a8:77:80:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQlbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA3MTQ1MDU3WhcNMjQxMjEwMTQ1MDU3WjAYMRYw
FAYDVQQDEw02NzJjZDNkNS1lYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAreEyf4rlQ12cNoJgpBmM5KZ/fU40hv3OVNvwB6rq1cERKksKlEtx02hw
RfNsQEkulvQRiem9SRs/37P9DTrbaTCCFXODj53j+vtqAtjgIC1+uQMqyyAZ38Bo
ZqKY7TenPOm0kj7sb5Axy2gAyw6DSpaULkaaH9OJSzftgOzy/z1GRlpeAOeVZGjn
RFa9sFQWvIwjEIt6ao3OWc/DKCGar4fQigImw3D3BN6KIHavZRKruxj6ROmfBJkF
cW574hxiUtKMIrPRvs6iU9LWDyK1rnDY38vxxC/PD0IfWKUdtRCQjAfZ0ddQtEqy
EsPu8D3ZXMwD64T0aXaZCF16wY1ypwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHCb
A+pEZz/ZkvcKQR9Hek4Fj2BMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDUwRDQyNjlEMTcxMUVGQTg2Q0FBQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsLPMA0GCSqGSIb3DQEB
CwUAA4IBAQChv6YZXTa1rthU6hstilmAD0SLyaCz8brp79Po+ARYj30Ra6toaltf
r35eK+Pw/BxPJodPmML0rdNTn7bTE+ff8WgRPzmLW0uUPUKzdIvOVaGUVdBJwy1d
GGJIX9JZz7AwcBqynoy9aywc8nqdg0b6jJ4M3iUjcayU4cUAyuYtPF2mPLuwv7z5
grsOPePszb9XgIwRvoOIMjXrFUAWtnYBk0pyJP1WdKtRBjwpYBv4vXMkhzwfsgrA
a8k72YtqS0rjsmFf/CgumEecH5VKlG3OxWYjNSuLwDJK7hUdi/ov9kdrKgobeN+p
m3IaLkjiZDmBEilvjVGMESPe05Cod4C8
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:30 2024 by rpki-client on console-ams.rpki-client.org