Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C59F4144976411EFABCD03B9762E951A.roa
File: C59F4144976411EFABCD03B9762E951A.roa (raw, json)
Hash identifier: 7/ZzU2O1apac+A7tPeMs7ptBTBs3pPHVASScujsea3g=
Subject key identifier: 32:91:8C:89:35:02:AC:84:60:DA:24:73:E9:E2:54:BF:CD:FE:DD:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010472
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C59F4144976411EFABCD03B9762E951A.roa
Signing time: Thu 31 Oct 2024 08:47:34 +0000
ROA not before: Thu 31 Oct 2024 08:47:30 +0000
ROA not after: Mon 13 Jan 2025 08:47:30 +0000
asID: 135377
IP address blocks: 154.202.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66674 (0x10472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 31 08:47:30 2024 GMT
Not After : Jan 13 08:47:30 2025 GMT
Subject: CN=67234426-7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:9c:40:8f:f5:d5:15:85:5f:91:8e:0a:24:
10:cc:c4:9e:85:fd:ff:e0:82:59:01:0c:4d:0a:0a:
c3:80:21:12:64:d5:fe:58:c6:33:6a:d1:f9:23:65:
b3:f2:57:39:14:ca:d9:88:17:04:b9:7d:c3:fc:ab:
a0:e6:cd:fe:f2:c0:c3:e9:4a:c9:14:e0:17:70:f4:
33:06:b3:31:87:b8:9c:03:12:92:b7:70:41:44:e7:
11:42:f5:68:9d:8f:54:d5:9f:30:10:73:9b:f7:30:
66:4c:9d:29:cb:5d:44:a3:57:b4:ce:10:c2:1c:c4:
2f:17:b6:11:c6:30:98:a0:81:24:dc:93:02:4b:4b:
0e:a0:11:74:b5:c5:2c:dd:6e:c0:ce:a5:99:6a:31:
9a:94:84:bd:d3:9d:3b:d2:97:11:ce:f6:fb:0f:f4:
58:85:18:89:7a:28:1c:0c:ea:de:5f:72:12:65:c3:
f3:66:96:81:3f:4f:43:ce:a5:16:32:dd:d6:02:4d:
00:60:2a:0c:0a:97:cc:27:6e:9c:c2:ec:23:0d:3c:
d2:2e:c7:59:45:b6:af:14:f9:4e:44:52:3b:be:98:
33:ea:90:04:ec:ef:23:19:d9:c0:4f:e8:86:ba:c7:
02:b3:c0:56:c5:ea:f8:22:f8:79:68:f0:fb:da:45:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:91:8C:89:35:02:AC:84:60:DA:24:73:E9:E2:54:BF:CD:FE:DD:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C59F4144976411EFABCD03B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bf:82:1f:b8:97:d4:79:7c:61:25:2a:71:3a:23:82:0d:7e:
fe:be:4c:e7:ee:f9:09:a7:6b:73:5a:82:58:fb:b5:cb:16:2b:
fa:dd:a7:f0:b7:6f:f1:34:6f:e1:97:8c:32:70:58:04:57:a5:
7e:40:98:25:c2:73:a9:33:66:81:56:d8:22:41:9a:96:ee:97:
b8:2e:26:51:9c:29:67:64:ad:37:0a:3e:3d:02:76:6a:a7:31:
1f:4e:60:58:01:d5:ec:e3:49:ad:89:a6:9a:86:2c:af:2c:2f:
59:34:5a:db:f0:72:b4:8d:a5:a7:c4:14:36:11:77:3f:51:ed:
c4:48:0c:9c:5c:dd:ef:4a:3c:74:46:69:11:7f:dc:7a:7d:a4:
9b:ab:86:52:64:d7:a2:8b:ba:1b:f4:7d:7f:fe:05:fe:5f:90:
a7:ec:57:8c:d0:94:7e:34:9e:87:d9:25:92:b7:7d:ff:47:25:
03:fc:0c:cd:35:63:36:e3:6d:26:e7:d5:04:15:ae:2f:1b:8c:
56:70:8e:c6:d6:e8:5e:2b:fa:3e:8e:a8:0c:52:9a:67:e9:81:
e2:9f:c5:65:24:f4:bd:b0:a9:08:10:eb:e9:cf:de:ef:35:18:
e8:02:1f:e8:15:92:2a:6b:95:7e:85:5b:85:6c:24:21:57:e7:
01:1d:73:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQRyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDMxMDg0NzMwWhcNMjUwMTEzMDg0NzMwWjAYMRYw
FAYDVQQDEw02NzIzNDQyNi03MDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyoCcQI/11RWFX5GOCiQQzMSehf3/4IJZAQxNCgrDgCESZNX+WMYzatH5
I2Wz8lc5FMrZiBcEuX3D/Kug5s3+8sDD6UrJFOAXcPQzBrMxh7icAxKSt3BBROcR
QvVonY9U1Z8wEHOb9zBmTJ0py11Eo1e0zhDCHMQvF7YRxjCYoIEk3JMCS0sOoBF0
tcUs3W7AzqWZajGalIS905070pcRzvb7D/RYhRiJeigcDOreX3ISZcPzZpaBP09D
zqUWMt3WAk0AYCoMCpfMJ26cwuwjDTzSLsdZRbavFPlORFI7vpgz6pAE7O8jGdnA
T+iGuscCs8BWxer4Ivh5aPD72kW8fwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDKR
jIk1AqyEYNokc+niVL/N/t2yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNTlGNDE0NDk3NjQxMUVGQUJDRDAzQjk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmspBMA0GCSqGSIb3DQEB
CwUAA4IBAQAbv4IfuJfUeXxhJSpxOiOCDX7+vkzn7vkJp2tzWoJY+7XLFiv63afw
t2/xNG/hl4wycFgEV6V+QJglwnOpM2aBVtgiQZqW7pe4LiZRnClnZK03Cj49AnZq
pzEfTmBYAdXs40mtiaaahiyvLC9ZNFrb8HK0jaWnxBQ2EXc/Ue3ESAycXN3vSjx0
RmkRf9x6faSbq4ZSZNeii7ob9H1//gX+X5Cn7FeM0JR+NJ6H2SWSt33/RyUD/AzN
NWM2420m59UEFa4vG4xWcI7G1uheK/o+jqgMUppn6YHin8VlJPS9sKkIEOvpz97v
NRjoAh/oFZIqa5V+hVuFbCQhV+cBHXPu
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:24 2024 by rpki-client on console-fra.rpki-client.org