Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6035FD4A8DB11EF8B145D5B762E951A.roa
File: C6035FD4A8DB11EF8B145D5B762E951A.roa (raw, json)
Hash identifier: c2WzYSgJ2nzQWWqXwJ7W+3JP+wBhc/3CvoSOCzAlCqc=
Subject key identifier: E3:E3:00:CC:5C:12:C4:8A:DA:02:21:D7:84:10:5F:93:BE:0D:99:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011053
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6035FD4A8DB11EF8B145D5B762E951A.roa
Signing time: Fri 22 Nov 2024 14:12:15 +0000
ROA not before: Fri 22 Nov 2024 14:12:11 +0000
ROA not after: Mon 09 Dec 2024 14:12:11 +0000
asID: 5065
IP address blocks: 154.206.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69715 (0x11053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 22 14:12:11 2024 GMT
Not After : Dec 9 14:12:11 2024 GMT
Subject: CN=6740913e-da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:39:db:e0:b6:82:ff:8f:bc:68:2f:a7:5b:
c4:c1:f2:d0:ab:f0:ca:cb:4c:29:ee:78:28:92:be:
39:96:84:95:62:6a:79:3b:01:4b:41:a0:a8:6d:a9:
1f:e0:b1:f4:ca:f3:80:d0:3f:fd:58:6d:95:44:0b:
dc:7f:ec:ca:b8:64:d0:89:9a:10:4f:84:75:94:e3:
86:87:f6:9b:dc:ba:76:27:4c:ca:41:ef:8b:37:fe:
df:ee:8b:13:68:43:cd:08:07:42:af:40:d5:b3:aa:
cd:e7:3a:1a:2b:f2:c6:ff:99:ef:70:ee:e7:2f:fd:
f0:ee:78:09:f3:40:2e:6f:f4:12:33:29:4b:4c:74:
92:61:b1:14:51:9c:43:83:64:57:b2:bf:9f:da:70:
78:19:f3:c2:cd:a5:da:8d:e6:de:cd:47:7b:60:ad:
9a:88:28:a4:47:51:d5:9e:79:f5:5a:8b:ed:d6:e3:
51:6a:70:ad:1d:54:00:65:82:70:fc:84:a3:f6:f2:
7d:e8:18:fe:75:ab:59:5a:35:a3:d6:a1:32:84:bc:
bb:98:91:54:64:07:3b:50:7a:b2:fa:1c:f7:1e:4f:
4d:69:c4:44:d2:e6:11:57:e0:16:e9:53:77:3e:32:
a9:fe:6d:5f:58:01:5f:30:6b:b8:a5:9b:2d:a0:0c:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:00:CC:5C:12:C4:8A:DA:02:21:D7:84:10:5F:93:BE:0D:99:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6035FD4A8DB11EF8B145D5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:73:15:0a:14:c0:bd:4a:85:d3:94:c4:6d:97:ce:ba:e8:16:
73:70:1a:da:85:57:19:c9:f5:a1:b9:27:20:27:f1:54:32:de:
22:29:1a:2f:30:a6:10:0c:89:36:57:34:1f:f8:8b:6d:26:b7:
5e:dc:f6:a8:5e:7a:a0:b7:28:cb:90:b0:21:30:95:84:2d:18:
e3:48:34:e4:1b:e6:84:f9:be:9f:e0:0e:da:ae:53:a1:fb:75:
c5:10:62:00:66:e3:f7:46:0e:64:77:18:15:bd:1f:aa:a0:8a:
fa:4a:79:3d:8a:cc:fb:ca:0e:6d:7c:88:3c:1f:01:3c:d1:a0:
00:03:9f:52:7b:12:14:26:b8:8b:73:60:ef:b4:0f:19:d3:ac:
af:50:47:d9:ae:57:ce:19:1b:ad:13:34:43:24:df:ab:1b:ce:
6d:68:29:58:6b:cd:05:74:cf:f0:6b:f2:4b:0e:e1:56:fb:e4:
73:bf:bf:e6:47:3a:06:ae:cf:f3:d4:67:0b:7c:dd:c7:f9:a6:
21:73:bc:29:ad:f6:3f:a8:a9:a4:2d:ac:db:c0:c0:35:49:aa:
36:08:dc:57:97:89:42:b6:41:d1:39:92:9e:55:df:16:d3:08:
3e:95:4e:00:e7:48:ec:09:34:f9:34:a1:45:6d:30:f2:b1:5e:
39:c3:26:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARBTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIyMTQxMjExWhcNMjQxMjA5MTQxMjExWjAYMRYw
FAYDVQQDEw02NzQwOTEzZS1kYTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzqY52+C2gv+PvGgvp1vEwfLQq/DKy0wp7ngokr45loSVYmp5OwFLQaCo
bakf4LH0yvOA0D/9WG2VRAvcf+zKuGTQiZoQT4R1lOOGh/ab3Lp2J0zKQe+LN/7f
7osTaEPNCAdCr0DVs6rN5zoaK/LG/5nvcO7nL/3w7ngJ80Aub/QSMylLTHSSYbEU
UZxDg2RXsr+f2nB4GfPCzaXajebezUd7YK2aiCikR1HVnnn1Wovt1uNRanCtHVQA
ZYJw/ISj9vJ96Bj+datZWjWj1qEyhLy7mJFUZAc7UHqy+hz3Hk9NacRE0uYRV+AW
6VN3PjKp/m1fWAFfMGu4pZstoAwOcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOPj
AMxcEsSK2gIh14QQX5O+DZmdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNjAzNUZENEE4REIxMUVGOEIxNDVENUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4jMA0GCSqGSIb3DQEB
CwUAA4IBAQANcxUKFMC9SoXTlMRtl8666BZzcBrahVcZyfWhuScgJ/FUMt4iKRov
MKYQDIk2VzQf+IttJrde3PaoXnqgtyjLkLAhMJWELRjjSDTkG+aE+b6f4A7arlOh
+3XFEGIAZuP3Rg5kdxgVvR+qoIr6Snk9isz7yg5tfIg8HwE80aAAA59SexIUJriL
c2DvtA8Z06yvUEfZrlfOGRutEzRDJN+rG85taClYa80FdM/wa/JLDuFW++Rzv7/m
RzoGrs/z1GcLfN3H+aYhc7wprfY/qKmkLazbwMA1Sao2CNxXl4lCtkHROZKeVd8W
0wg+lU4A50jsCTT5NKFFbTDysV45wyaz
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:35 2024 by rpki-client on console-ams.rpki-client.org