Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCCC657CA8CD11EF921CE383762E951A.roa
File: BCCC657CA8CD11EF921CE383762E951A.roa (raw, json)
Hash identifier: Aqid5NuOtlMXIzxVH179qauhrmhxgoOAU+nqBtviBgw=
Subject key identifier: A9:FE:2F:2B:3B:AC:8B:7F:BF:04:FF:DC:65:6C:02:5F:D0:32:91:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011019
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCCC657CA8CD11EF921CE383762E951A.roa
Signing time: Fri 22 Nov 2024 12:31:46 +0000
ROA not before: Fri 22 Nov 2024 12:31:42 +0000
ROA not after: Sat 30 Nov 2024 12:31:42 +0000
asID: 137443
IP address blocks: 154.223.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69657 (0x11019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 12:31:42 2024 GMT
Not After : Nov 30 12:31:42 2024 GMT
Subject: CN=674079b2-ee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:7c:15:d5:cc:dd:c7:a5:6e:ba:97:44:13:
3b:a5:11:50:c2:3a:be:79:33:70:89:d8:c4:7a:fd:
48:f0:9f:a4:40:5e:d7:90:e9:97:aa:37:34:15:b2:
f1:87:f0:3d:ff:3a:8f:3d:05:06:1d:15:66:30:a3:
57:b8:13:f4:5f:04:26:30:c0:f6:93:59:9a:5d:88:
dc:ec:e7:38:99:e8:61:96:f8:f7:92:e4:48:bc:09:
3f:d2:a0:da:12:08:20:a0:00:09:0e:56:07:c0:2d:
31:da:d0:17:21:a0:29:96:e5:2c:73:e1:e6:1a:d3:
0a:79:b0:b5:dd:3b:2f:ff:28:bb:dd:2c:36:07:fc:
36:dc:d5:bb:42:25:5c:b9:6b:dd:ad:2e:1e:72:ed:
f6:e3:24:36:13:3b:72:71:28:e1:57:0e:12:12:56:
b1:6b:6b:ab:59:8f:04:fb:3e:9b:31:81:0a:9a:5d:
fc:8b:15:d2:72:39:88:3a:92:a6:89:6e:c3:75:14:
76:b5:d4:67:c8:84:ec:ef:41:78:fe:2d:68:f2:cf:
8c:6d:d8:0c:8b:c7:1f:2e:f0:fa:81:02:8b:a3:c8:
13:32:86:ff:a5:b9:5c:a4:19:95:28:52:c6:e3:f4:
32:b1:09:4d:56:ce:ec:23:a8:85:10:68:a5:ee:a3:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:2F:2B:3B:AC:8B:7F:BF:04:FF:DC:65:6C:02:5F:D0:32:91:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCCC657CA8CD11EF921CE383762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:22:24:a8:b6:ed:4a:bd:40:32:c0:03:e7:25:13:ee:7d:b9:
f3:c6:2a:de:a7:8c:63:be:93:65:87:7c:d5:7b:00:39:68:15:
eb:97:86:ae:1c:d9:f4:59:3a:71:83:26:9a:2e:a0:34:8f:9b:
76:75:9f:1a:05:cd:e7:b8:6f:c7:d6:4b:00:84:5c:25:c8:4d:
10:25:a6:56:a8:e8:77:ff:5a:1a:ee:00:32:0c:c4:aa:a8:19:
5c:92:99:16:dc:62:22:d7:25:1e:f0:f8:ec:34:b2:63:7f:75:
e1:50:d5:65:4e:de:04:e2:bb:f0:3e:03:67:d6:dd:16:e1:04:
92:79:e0:b5:48:40:f6:b0:a4:b1:d2:76:b3:e9:70:6a:5f:00:
9d:5a:9b:95:5c:6b:29:fb:62:d5:6f:7d:68:08:a2:27:7b:4d:
9d:fc:8c:d3:ab:78:37:82:aa:6a:e6:e7:6c:d9:7e:a5:31:1c:
95:bf:cc:8f:2d:65:9e:92:84:56:9b:7f:e4:ee:50:21:69:eb:
0f:8d:70:c3:89:67:ee:eb:49:88:5c:ff:44:fb:7d:5e:16:fe:
6f:45:74:a2:5a:dd:66:ab:d0:aa:56:e4:05:58:c2:a9:67:7f:
04:ee:ac:b0:80:ae:44:59:07:10:67:bd:3d:51:74:d3:eb:dd:
1a:7d:ac:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARAZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTIzMTQyWhcNMjQxMTMwMTIzMTQyWjAYMRYw
FAYDVQQDEw02NzQwNzliMi1lZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt6p8FdXM3celbrqXRBM7pRFQwjq+eTNwidjEev1I8J+kQF7XkOmXqjc0
FbLxh/A9/zqPPQUGHRVmMKNXuBP0XwQmMMD2k1maXYjc7Oc4mehhlvj3kuRIvAk/
0qDaEgggoAAJDlYHwC0x2tAXIaApluUsc+HmGtMKebC13Tsv/yi73Sw2B/w23NW7
QiVcuWvdrS4ecu324yQ2EztycSjhVw4SElaxa2urWY8E+z6bMYEKml38ixXScjmI
OpKmiW7DdRR2tdRnyITs70F4/i1o8s+MbdgMi8cfLvD6gQKLo8gTMob/pblcpBmV
KFLG4/QysQlNVs7sI6iFEGil7qOXuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKn+
Lys7rIt/vwT/3GVsAl/QMpHfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQ0NDNjU3Q0E4Q0QxMUVGOTIxQ0UzODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+3MA0GCSqGSIb3DQEB
CwUAA4IBAQC5IiSotu1KvUAywAPnJRPufbnzxirep4xjvpNlh3zVewA5aBXrl4au
HNn0WTpxgyaaLqA0j5t2dZ8aBc3nuG/H1ksAhFwlyE0QJaZWqOh3/1oa7gAyDMSq
qBlckpkW3GIi1yUe8PjsNLJjf3XhUNVlTt4E4rvwPgNn1t0W4QSSeeC1SED2sKSx
0naz6XBqXwCdWpuVXGsp+2LVb31oCKIne02d/IzTq3g3gqpq5uds2X6lMRyVv8yP
LWWekoRWm3/k7lAhaesPjXDDiWfu60mIXP9E+31eFv5vRXSiWt1mq9CqVuQFWMKp
Z38E7qywgK5EWQcQZ709UXTT690afawI
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org