Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF16E1E4A9BE11EF881E566E762E951A.roa
File: BF16E1E4A9BE11EF881E566E762E951A.roa (raw, json)
Hash identifier: dCdTeRs8uqSh9EG4F1CBIa4XhjQJhvrbD5Gir7fJadU=
Subject key identifier: 99:8E:CC:35:F9:28:EF:84:35:0B:8A:89:5E:24:D4:EE:AB:0B:37:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF16E1E4A9BE11EF881E566E762E951A.roa
Signing time: Sat 23 Nov 2024 17:16:59 +0000
ROA not before: Sat 23 Nov 2024 17:16:55 +0000
ROA not after: Mon 02 Dec 2024 17:16:55 +0000
asID: 44559
IP address blocks: 154.94.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70070 (0x111b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:16:55 2024 GMT
Not After : Dec 2 17:16:55 2024 GMT
Subject: CN=67420e0b-c008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:f6:c3:b2:25:8e:80:c4:2e:97:6d:9f:3c:
7c:06:7b:ed:46:3d:1a:ba:81:95:8a:04:36:41:65:
bc:37:38:b4:c8:92:64:96:aa:6d:fa:14:21:c7:db:
3a:e1:5d:6d:06:1d:86:0e:3d:82:8d:f7:78:87:62:
14:8c:76:07:60:5a:ba:f2:1c:1b:a7:c8:51:a2:81:
1b:e4:42:26:53:62:21:89:5c:46:db:1c:63:ed:e8:
bb:85:a3:25:b4:17:b1:ce:cd:b4:e4:79:27:95:5a:
00:87:6e:c3:f9:7e:b8:4e:57:1f:6e:2d:2f:04:bb:
39:19:fb:11:cd:77:c6:7b:d2:be:21:82:ab:bc:fc:
b7:af:01:02:7f:ec:04:f3:14:78:41:71:cb:eb:d6:
1b:ad:87:f2:0e:7c:44:d6:6d:06:29:56:d0:f7:c1:
29:e2:eb:af:f9:6e:87:ff:ba:9f:80:21:38:0f:37:
48:7d:93:35:10:62:51:c6:c0:9b:7e:3a:b4:f5:44:
3c:8b:8c:4f:9b:71:bf:56:e9:ca:78:1d:cd:36:8d:
4b:c9:ab:d7:d3:0a:49:5b:01:40:2e:bd:97:15:bb:
1d:85:14:fc:ba:1b:2e:a0:1b:1b:5d:08:da:3f:2d:
53:d4:29:39:5f:41:64:fc:08:ea:ec:8d:23:81:5f:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8E:CC:35:F9:28:EF:84:35:0B:8A:89:5E:24:D4:EE:AB:0B:37:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF16E1E4A9BE11EF881E566E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3f:88:e4:e2:cf:fb:bc:c9:d3:dc:c8:fa:ee:d6:50:d9:f6:
8d:8f:14:39:f1:d1:83:a2:cb:69:7f:fa:28:58:27:5c:d2:e6:
03:42:d2:59:0c:0e:28:0d:44:80:c0:fc:4f:dd:75:91:c5:c2:
4c:7c:e1:f5:78:75:01:83:b5:38:63:21:91:b6:6c:52:de:7c:
4c:fd:c6:b5:32:7e:c0:72:82:54:47:af:02:38:09:03:27:68:
a2:57:b9:52:6a:b8:84:22:3e:a6:d6:e8:b4:0a:49:b3:c5:cb:
a6:87:b0:6e:af:2e:4f:3a:d9:36:e8:a0:e9:a7:a6:1f:f8:db:
0f:7e:95:40:ca:bc:53:0a:47:d4:b2:f4:3c:5b:4b:22:fe:ad:
78:37:29:84:6e:60:f9:fc:05:b6:a9:ba:28:49:f4:1b:f6:8d:
01:5b:df:4a:e6:2a:96:af:d2:87:94:72:e5:c0:79:d8:70:3b:
b5:c7:0f:59:20:da:c0:c1:21:51:cc:f5:39:a2:0f:1b:6e:cf:
f4:5e:54:a4:74:3b:56:22:67:dc:74:fc:36:13:b5:c5:9a:cd:
d9:be:0c:3a:8b:6c:e5:ee:80:d7:cb:ac:f2:72:40:82:76:c3:
30:b6:34:bf:d2:78:aa:76:a4:cc:be:64:36:d4:4a:86:35:18:
a4:51:09:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARG2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTcxNjU1WhcNMjQxMjAyMTcxNjU1WjAYMRYw
FAYDVQQDEw02NzQyMGUwYi1jMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyqb2w7IljoDELpdtnzx8BnvtRj0auoGVigQ2QWW8Nzi0yJJklqpt+hQh
x9s64V1tBh2GDj2Cjfd4h2IUjHYHYFq68hwbp8hRooEb5EImU2IhiVxG2xxj7ei7
haMltBexzs205HknlVoAh27D+X64Tlcfbi0vBLs5GfsRzXfGe9K+IYKrvPy3rwEC
f+wE8xR4QXHL69YbrYfyDnxE1m0GKVbQ98Ep4uuv+W6H/7qfgCE4DzdIfZM1EGJR
xsCbfjq09UQ8i4xPm3G/VunKeB3NNo1LyavX0wpJWwFALr2XFbsdhRT8uhsuoBsb
XQjaPy1T1Ck5X0Fk/Ajq7I0jgV+WwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJmO
zDX5KO+ENQuKiV4k1O6rCzdlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRjE2RTFFNEE5QkUxMUVGODgxRTU2NkU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml7zMA0GCSqGSIb3DQEB
CwUAA4IBAQCjP4jk4s/7vMnT3Mj67tZQ2faNjxQ58dGDostpf/ooWCdc0uYDQtJZ
DA4oDUSAwPxP3XWRxcJMfOH1eHUBg7U4YyGRtmxS3nxM/ca1Mn7AcoJUR68COAkD
J2iiV7lSariEIj6m1ui0Ckmzxcumh7Bury5POtk26KDpp6Yf+NsPfpVAyrxTCkfU
svQ8W0si/q14NymEbmD5/AW2qbooSfQb9o0BW99K5iqWr9KHlHLlwHnYcDu1xw9Z
INrAwSFRzPU5og8bbs/0XlSkdDtWImfcdPw2E7XFms3Zvgw6i2zl7oDXy6zyckCC
dsMwtjS/0niqdqTMvmQ21EqGNRikUQm/
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:45 2024 by rpki-client on console-fra.rpki-client.org