Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E1647C950F11EFAA919284762E951A.roa
File: B6E1647C950F11EFAA919284762E951A.roa (raw, json)
Hash identifier: 4NIV7f+z4go2vu50Qlgwf6Ewr3Whco2h9NcGVF/vJPY=
Subject key identifier: 33:49:F8:FB:C4:F4:76:90:CE:C0:C6:A8:9E:29:6A:6A:AF:1E:2F:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0102BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E1647C950F11EFAA919284762E951A.roa
Signing time: Mon 28 Oct 2024 09:33:40 +0000
ROA not before: Mon 28 Oct 2024 09:33:36 +0000
ROA not after: Wed 27 Nov 2024 09:33:36 +0000
asID: 44559
IP address blocks: 154.81.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66239 (0x102bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 28 09:33:36 2024 GMT
Not After : Nov 27 09:33:36 2024 GMT
Subject: CN=671f5a74-870d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:fd:18:ac:9d:10:86:08:f0:ae:f1:08:3f:
00:86:a9:c9:cd:ac:9e:8d:c0:fb:51:ff:10:71:9e:
5c:dc:97:34:aa:d1:66:91:01:21:0d:ee:56:33:fb:
6d:c6:42:b1:4b:e1:c3:30:f0:42:8d:b9:33:25:b8:
79:f2:c5:d4:cb:5a:81:d7:96:69:9a:35:e4:41:83:
cc:94:b9:a1:0a:02:5e:61:15:2b:b7:ee:51:b2:63:
44:5e:bc:58:2e:1b:88:fd:35:d9:27:70:5b:42:7b:
c2:19:8d:0e:db:7d:df:64:7d:b4:d9:01:aa:0d:b5:
50:d8:8e:89:e7:40:83:a2:15:c6:1a:a7:48:97:7f:
e5:6b:22:de:9f:ca:43:3d:67:34:b0:f0:6a:d1:9d:
c9:b1:c1:bc:94:cf:7d:f4:f8:6a:24:18:fd:ee:26:
cf:b9:79:41:d7:42:5b:1d:d4:3b:d2:02:72:56:4a:
c9:78:3f:7f:6a:96:b9:b9:7d:e7:c3:3a:1f:33:a3:
e6:cf:67:5c:b6:01:8d:3e:56:a6:02:2d:08:3b:82:
ba:e5:ac:39:b6:8e:e9:00:e2:57:8c:8c:b3:3c:0c:
8f:57:ba:f1:56:4f:7a:eb:e8:c4:44:68:61:9f:3d:
5d:4a:9f:13:61:a6:0c:07:d2:1a:99:3d:1d:41:49:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:F8:FB:C4:F4:76:90:CE:C0:C6:A8:9E:29:6A:6A:AF:1E:2F:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6E1647C950F11EFAA919284762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
26:90:5c:57:9c:88:07:7c:30:14:bc:1c:79:e4:af:7e:2e:16:
30:74:56:c9:97:21:93:d2:89:c2:59:c4:82:83:9a:24:0e:63:
dc:f7:a1:1f:02:2e:96:a6:fa:e5:c6:97:92:9c:e7:ae:1f:bf:
c1:8e:97:83:f9:a0:a3:e3:27:40:67:a5:b9:d3:d3:d0:94:fb:
bf:a5:76:a2:eb:bc:31:bc:d3:ec:84:20:d5:3b:ec:6c:5a:5e:
0b:ce:af:e7:1a:f6:a8:30:02:54:14:57:e9:8d:15:c8:39:d9:
48:95:67:f5:b5:44:2f:c9:2a:81:cb:27:6a:4e:ef:93:05:d4:
cf:d6:9a:ce:78:a4:53:6c:36:ce:17:db:d9:c4:0a:18:81:08:
e3:05:ca:de:b1:84:bc:ff:45:29:19:8b:8d:31:11:7f:f0:20:
f5:19:af:d6:92:5e:fc:b5:53:db:6e:94:0e:eb:b9:13:62:07:
12:18:0e:85:7d:1b:21:38:fd:4f:01:93:78:7a:1f:e9:30:5d:
0b:13:28:fe:00:65:c1:6b:60:f2:3c:c4:b9:dd:fe:11:fa:0e:
af:ab:7c:61:c6:fd:53:7c:89:f9:dc:ea:3a:08:62:4f:e8:52:
e5:6f:91:09:da:56:2e:5f:9e:84:8a:c1:2b:7d:94:f7:8f:81:
d5:45:a6:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQK/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI4MDkzMzM2WhcNMjQxMTI3MDkzMzM2WjAYMRYw
FAYDVQQDEw02NzFmNWE3NC04NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxmj9GKydEIYI8K7xCD8AhqnJzayejcD7Uf8QcZ5c3Jc0qtFmkQEhDe5W
M/ttxkKxS+HDMPBCjbkzJbh58sXUy1qB15ZpmjXkQYPMlLmhCgJeYRUrt+5RsmNE
XrxYLhuI/TXZJ3BbQnvCGY0O233fZH202QGqDbVQ2I6J50CDohXGGqdIl3/layLe
n8pDPWc0sPBq0Z3JscG8lM999PhqJBj97ibPuXlB10JbHdQ70gJyVkrJeD9/apa5
uX3nwzofM6Pmz2dctgGNPlamAi0IO4K65aw5to7pAOJXjIyzPAyPV7rxVk966+jE
RGhhnz1dSp8TYaYMB9IamT0dQUk9IwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDNJ
+PvE9HaQzsDGqJ4pamqvHi8bMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNkUxNjQ3Qzk1MEYxMUVGQUE5MTkyODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlE0MA0GCSqGSIb3DQEB
CwUAA4IBAQAmkFxXnIgHfDAUvBx55K9+LhYwdFbJlyGT0onCWcSCg5okDmPc96Ef
Ai6WpvrlxpeSnOeuH7/BjpeD+aCj4ydAZ6W509PQlPu/pXai67wxvNPshCDVO+xs
Wl4Lzq/nGvaoMAJUFFfpjRXIOdlIlWf1tUQvySqByydqTu+TBdTP1prOeKRTbDbO
F9vZxAoYgQjjBcresYS8/0UpGYuNMRF/8CD1Ga/Wkl78tVPbbpQO67kTYgcSGA6F
fRshOP1PAZN4eh/pMF0LEyj+AGXBa2DyPMS53f4R+g6vq3xhxv1TfIn53Oo6CGJP
6FLlb5EJ2lYuX56EisErfZT3j4HVRaaf
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:52 2024 by rpki-client on console-fra.rpki-client.org