Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BED7555AA19511EF89BE899B762E951A.roa
File: BED7555AA19511EF89BE899B762E951A.roa (raw, json)
Hash identifier: DsLcv0hzVP7xp+7/RVc79vM+cCNsZG+/IAOhj5Y/kOY=
Subject key identifier: 96:77:24:70:8C:1D:FF:B4:77:55:84:71:7C:87:D8:D5:7E:5B:B8:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010CA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BED7555AA19511EF89BE899B762E951A.roa
Signing time: Wed 13 Nov 2024 08:03:20 +0000
ROA not before: Wed 13 Nov 2024 08:03:16 +0000
ROA not after: Sat 07 Dec 2024 08:03:16 +0000
asID: 138915
IP address blocks: 154.223.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68777 (0x10ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 08:03:16 2024 GMT
Not After : Dec 7 08:03:16 2024 GMT
Subject: CN=67345d47-8555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:6d:9f:ec:7f:57:d4:2e:6e:b6:3b:68:d2:
80:78:5d:de:89:1b:84:b0:69:86:35:5b:2f:53:65:
78:97:83:47:6d:93:22:44:04:76:aa:f1:06:52:2b:
7e:5a:87:2d:dd:a4:ca:04:de:00:24:55:92:f7:89:
b4:2e:7d:0d:3a:63:d6:a2:cf:f9:e5:b9:13:40:45:
95:08:66:32:77:11:1d:e7:03:63:ee:69:31:9a:bb:
75:21:70:27:7f:17:87:91:03:58:16:64:0b:86:c7:
92:4e:c2:c0:8e:2d:39:27:3f:fb:b0:d9:49:ec:c5:
58:7b:2d:d7:ef:9c:19:43:af:1b:ba:ca:58:43:0a:
cf:e9:7d:3b:fa:e5:48:1a:05:ff:06:d9:5b:c9:59:
3d:65:ec:52:eb:bd:c3:3e:46:d7:a2:f5:7f:53:40:
63:21:7b:b0:2d:32:14:95:be:fc:85:30:5b:cc:8c:
cc:56:5a:36:ee:57:6a:b5:c7:c8:b5:f0:6f:0e:14:
2b:c3:87:01:91:cb:aa:5d:17:d5:60:aa:7e:35:fe:
7e:aa:7d:5c:53:b7:77:cc:b3:06:b3:93:c7:58:2c:
40:52:19:07:52:cb:78:df:e9:c2:80:40:95:42:76:
79:e6:e9:e3:39:20:cc:ca:e6:c7:68:55:2a:d8:42:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:77:24:70:8C:1D:FF:B4:77:55:84:71:7C:87:D8:D5:7E:5B:B8:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BED7555AA19511EF89BE899B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.66.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e2:a9:23:23:e4:7f:e3:3b:0b:9b:33:f5:dd:b8:3b:ba:72:
6c:66:e6:dc:69:32:7b:d6:62:34:69:c8:4d:f9:f6:49:d6:0e:
f9:d0:57:87:3c:de:e7:e9:ef:c9:c0:0f:56:a3:2a:39:7c:ba:
f7:5b:ad:71:91:dc:c0:a2:8f:56:13:92:06:54:64:9d:45:db:
26:40:d6:37:f2:3b:6d:59:ce:f9:13:15:da:73:da:06:7c:9f:
52:0f:7c:50:19:40:4b:76:75:96:8f:02:b9:6e:d8:e4:77:de:
9c:db:2d:00:c3:40:14:b5:24:35:01:78:e2:80:fd:78:0d:e2:
6b:d0:78:52:0e:34:28:61:e0:14:a0:f3:f3:ed:11:0c:97:93:
67:ee:05:10:07:b6:eb:40:46:57:51:c6:4e:67:93:6e:e7:9c:
9b:ae:41:bc:52:1e:0b:c7:77:cf:7d:3a:f2:45:94:4e:91:7d:
9c:8b:22:78:35:4d:79:f9:21:d7:72:5f:20:c4:b1:6f:d1:fc:
2d:7d:d3:c4:d7:3a:75:e9:6b:90:a7:bd:70:be:d5:78:ca:4a:
4a:ff:af:6d:30:d4:93:3e:9d:9a:76:e1:7e:71:50:eb:81:78:
7e:c8:65:d1:7c:5d:f0:9f:6a:9a:c7:50:b6:e8:be:4a:da:8d:
f1:b7:7a:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQypMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEzMDgwMzE2WhcNMjQxMjA3MDgwMzE2WjAYMRYw
FAYDVQQDEw02NzM0NWQ0Ny04NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzyFtn+x/V9QubrY7aNKAeF3eiRuEsGmGNVsvU2V4l4NHbZMiRAR2qvEG
Uit+Woct3aTKBN4AJFWS94m0Ln0NOmPWos/55bkTQEWVCGYydxEd5wNj7mkxmrt1
IXAnfxeHkQNYFmQLhseSTsLAji05Jz/7sNlJ7MVYey3X75wZQ68buspYQwrP6X07
+uVIGgX/BtlbyVk9ZexS673DPkbXovV/U0BjIXuwLTIUlb78hTBbzIzMVlo27ldq
tcfItfBvDhQrw4cBkcuqXRfVYKp+Nf5+qn1cU7d3zLMGs5PHWCxAUhkHUst43+nC
gECVQnZ55unjOSDMyubHaFUq2EKH1wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJZ3
JHCMHf+0d1WEcXyH2NV+W7jiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRUQ3NTU1QUExOTUxMUVGODlCRTg5OUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt9CMA0GCSqGSIb3DQEB
CwUAA4IBAQAG4qkjI+R/4zsLmzP13bg7unJsZubcaTJ71mI0achN+fZJ1g750FeH
PN7n6e/JwA9Woyo5fLr3W61xkdzAoo9WE5IGVGSdRdsmQNY38jttWc75ExXac9oG
fJ9SD3xQGUBLdnWWjwK5btjkd96c2y0Aw0AUtSQ1AXjigP14DeJr0HhSDjQoYeAU
oPPz7REMl5Nn7gUQB7brQEZXUcZOZ5Nu55ybrkG8Uh4Lx3fPfTryRZROkX2ciyJ4
NU15+SHXcl8gxLFv0fwtfdPE1zp16WuQp71wvtV4ykpK/69tMNSTPp2aduF+cVDr
gXh+yGXRfF3wn2qax1C26L5K2o3xt3ri
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org