Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB6DC3CA9C411EFB01BB293762E951A.roa
File: BCB6DC3CA9C411EFB01BB293762E951A.roa (raw, json)
Hash identifier: 1FNu/Pv7+/6mX4ybbsi0AZ48wutViux2BZ2RfdVGuGo=
Subject key identifier: 77:51:B8:80:51:60:12:12:1D:88:54:83:EC:03:1E:A7:12:58:0E:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB6DC3CA9C411EFB01BB293762E951A.roa
Signing time: Sat 23 Nov 2024 17:59:52 +0000
ROA not before: Sat 23 Nov 2024 17:59:48 +0000
ROA not after: Mon 09 Dec 2024 17:59:48 +0000
asID: 5065
IP address blocks: 154.206.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70108 (0x111dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:59:48 2024 GMT
Not After : Dec 9 17:59:48 2024 GMT
Subject: CN=67421818-1f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:a9:b1:6d:46:26:1e:e7:40:7a:8a:4e:13:
cb:45:c0:52:32:ee:68:3a:46:37:2a:59:ca:b4:3a:
6e:fb:24:41:5b:b4:fb:cf:e7:51:52:4d:2e:7e:8b:
be:17:fa:45:e7:d9:54:7c:a0:d9:04:31:1c:b3:b6:
fb:bc:dd:9a:03:6f:00:ae:3b:e4:36:63:e1:3e:3b:
e5:eb:86:40:74:9f:e5:92:83:ef:fe:61:61:c9:7a:
74:09:69:e3:43:04:e0:04:52:e7:46:d1:63:a9:ce:
21:71:a8:3c:be:0d:77:83:15:90:2b:b7:fe:2b:f7:
a0:8d:0f:33:fd:f8:99:04:39:80:3a:69:24:1a:4b:
6d:eb:16:d7:a0:b5:1b:4d:be:d8:a6:e1:27:40:b8:
1f:14:7d:db:29:2d:ca:13:4b:1f:73:9a:53:35:c3:
8b:40:30:7c:ea:65:f9:22:ee:86:70:bf:18:f4:90:
89:8c:d1:f3:88:3d:fb:2a:78:48:3a:62:fc:f8:87:
d8:f9:cc:bc:11:d2:c2:cb:fc:4b:a1:fb:40:6e:f4:
82:e1:a2:75:b5:77:6f:93:80:06:55:49:d3:cb:3b:
b6:d3:f4:b4:da:b8:9b:7f:ab:c7:9b:d2:a1:bf:96:
1e:62:24:c1:cf:a0:5e:81:78:60:5e:7f:3a:d6:74:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:B8:80:51:60:12:12:1D:88:54:83:EC:03:1E:A7:12:58:0E:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCB6DC3CA9C411EFB01BB293762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ae:67:a0:22:48:f9:9d:5c:81:58:1f:2f:6f:f0:d1:18:4b:
77:fe:fd:db:b8:97:21:ea:67:77:50:56:64:26:ff:3d:ba:53:
b9:18:e0:49:24:be:53:12:97:a4:d8:56:09:52:91:d1:d0:15:
d4:8f:51:c3:af:d9:d0:93:ee:44:fc:9d:f4:d0:11:7f:2f:ac:
9d:62:7e:0d:73:c9:d1:9f:fa:6c:f8:28:10:fa:6f:8e:4f:f3:
57:65:05:9b:51:a3:84:78:45:e7:eb:9c:4c:ee:29:95:0a:fa:
df:a4:83:22:47:03:d3:7d:8a:4d:85:34:01:8a:f0:5e:9d:4d:
b3:d9:06:4c:7d:87:34:64:02:7e:ec:c6:6d:e0:d5:1c:88:32:
da:37:e5:89:53:3d:b0:0d:c2:82:be:9d:d6:b2:bf:19:76:6c:
ec:16:f4:de:49:bb:5e:f0:89:93:cb:0c:34:61:73:ed:e8:89:
b9:9a:02:e4:12:af:3b:47:fd:93:98:49:b2:64:d0:89:52:7d:
18:96:40:50:1a:cc:8f:dc:ab:3f:cb:85:34:4f:5b:00:2d:fd:
22:a3:b6:fb:af:bc:b2:41:68:e8:fa:5a:e4:89:78:d8:9d:59:
99:8f:a8:0f:96:5e:2c:20:9f:b2:03:c6:06:0a:66:7f:3e:52:
e4:34:0e:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARHcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTc1OTQ4WhcNMjQxMjA5MTc1OTQ4WjAYMRYw
FAYDVQQDEw02NzQyMTgxOC0xZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAptKpsW1GJh7nQHqKThPLRcBSMu5oOkY3KlnKtDpu+yRBW7T7z+dRUk0u
fou+F/pF59lUfKDZBDEcs7b7vN2aA28ArjvkNmPhPjvl64ZAdJ/lkoPv/mFhyXp0
CWnjQwTgBFLnRtFjqc4hcag8vg13gxWQK7f+K/egjQ8z/fiZBDmAOmkkGktt6xbX
oLUbTb7YpuEnQLgfFH3bKS3KE0sfc5pTNcOLQDB86mX5Iu6GcL8Y9JCJjNHziD37
KnhIOmL8+IfY+cy8EdLCy/xLoftAbvSC4aJ1tXdvk4AGVUnTyzu20/S02ribf6vH
m9Khv5YeYiTBz6BegXhgXn861nRCcwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHdR
uIBRYBISHYhUg+wDHqcSWA4AMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0I2REMzQ0E5QzQxMUVGQjAxQkIyOTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4sMA0GCSqGSIb3DQEB
CwUAA4IBAQCOrmegIkj5nVyBWB8vb/DRGEt3/v3buJch6md3UFZkJv89ulO5GOBJ
JL5TEpek2FYJUpHR0BXUj1HDr9nQk+5E/J300BF/L6ydYn4Nc8nRn/ps+CgQ+m+O
T/NXZQWbUaOEeEXn65xM7imVCvrfpIMiRwPTfYpNhTQBivBenU2z2QZMfYc0ZAJ+
7MZt4NUciDLaN+WJUz2wDcKCvp3Wsr8ZdmzsFvTeSbte8ImTyww0YXPt6Im5mgLk
Eq87R/2TmEmyZNCJUn0YlkBQGsyP3Ks/y4U0T1sALf0io7b7r7yyQWjo+lrkiXjY
nVmZj6gPll4sIJ+yA8YGCmZ/PlLkNA5C
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:33 2024 by rpki-client on console-ams.rpki-client.org