Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C84B236C74CE11EF9B8C474F762E951A.roa
File: C84B236C74CE11EF9B8C474F762E951A.roa (raw, json)
Hash identifier: 00mfFfxcuw8468Bc7fKcEBRr2C96BkUJtYJkwkAXi4Q=
Subject key identifier: 71:E0:02:78:8B:AA:0A:59:79:4D:40:0C:B4:F2:41:C4:7E:5A:E0:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F008
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C84B236C74CE11EF9B8C474F762E951A.roa
Signing time: Tue 17 Sep 2024 08:28:15 +0000
ROA not before: Tue 17 Sep 2024 08:28:11 +0000
ROA not after: Sat 30 Nov 2024 08:28:11 +0000
asID: 136970
IP address blocks: 154.197.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61448 (0xf008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:28:11 2024 GMT
Not After : Nov 30 08:28:11 2024 GMT
Subject: CN=66e93d9e-cc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:74:6c:17:10:a2:80:03:f1:5e:17:ca:87:
af:37:12:b0:77:03:ce:46:80:fa:0c:27:af:d9:c6:
31:bc:ab:d4:af:bc:be:3d:22:f6:d4:50:c6:1e:6a:
88:d4:85:17:31:1b:ec:9a:33:9b:03:50:35:eb:c8:
bd:f3:86:88:aa:b4:c3:9d:95:5a:97:18:b0:0e:70:
ea:36:68:a7:7b:59:1e:66:1f:08:0a:7d:fb:2d:c9:
7d:8e:43:66:cc:16:1c:0f:4a:e1:56:fc:82:75:1d:
23:a9:c0:1e:87:a4:b1:df:0b:d4:dd:b6:71:f3:7e:
6f:ff:81:e7:51:b1:e8:5d:00:c3:b5:9e:69:f1:d1:
30:63:af:05:4e:e4:15:e8:47:74:55:e5:f9:d0:67:
3e:db:50:78:21:c7:87:9f:e3:b6:23:95:bc:c6:7a:
ad:fe:41:18:84:f4:06:79:92:61:ac:e2:5f:43:f2:
75:62:bc:be:30:8d:69:a7:38:74:65:ba:95:59:ab:
ee:5d:17:43:0d:70:a7:cd:43:a2:a3:ae:43:b6:82:
4f:42:78:ee:cc:b2:79:ad:f9:35:0c:ed:a6:89:62:
d3:bb:3f:6a:0b:64:cd:5e:85:58:a4:1e:e2:87:40:
61:1e:05:4a:58:5c:01:74:13:0f:5a:35:da:5e:25:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E0:02:78:8B:AA:0A:59:79:4D:40:0C:B4:F2:41:C4:7E:5A:E0:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C84B236C74CE11EF9B8C474F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.3.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cc:e3:39:5d:5e:19:4e:94:39:d6:66:64:d0:6d:83:2b:9f:
34:0a:8d:de:fa:b0:40:2d:c3:c0:6a:23:7c:29:52:23:04:c0:
5d:03:9d:5e:a3:fa:97:42:a6:a1:85:4b:8f:fc:87:bf:2c:3e:
7c:85:7a:ec:1a:69:f0:78:5d:10:a4:c2:77:3f:ff:6b:cf:67:
2e:ef:68:62:2a:ef:26:2f:65:0b:1a:9f:f0:b8:05:23:2c:15:
5d:de:3f:3c:b2:f5:11:1b:59:a2:d0:8d:23:88:81:4f:c1:87:
3b:dd:3c:f3:ae:82:00:69:39:c1:e4:3d:c6:8d:04:00:72:8a:
b3:51:a1:ef:1a:c0:46:d4:38:be:63:ef:de:ed:85:50:29:0f:
4f:2b:57:12:e9:c7:01:99:43:13:7b:fb:aa:c8:99:e8:63:62:
c4:44:79:8d:19:9a:57:e0:e6:c3:4c:ac:54:ad:39:15:9e:17:
be:ee:30:8a:a4:38:50:42:67:25:92:d6:da:da:14:47:b7:b0:
89:71:b5:c9:81:95:06:1d:ef:81:f3:74:a8:8b:77:53:65:0d:
70:60:ca:75:48:73:d3:96:c2:90:8b:6b:11:e8:b1:af:08:74:
5e:ff:18:4b:aa:69:cc:07:5e:95:e2:7f:41:29:c6:db:18:c4:
2f:ed:ed:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPAIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDgyODExWhcNMjQxMTMwMDgyODExWjAYMRYw
FAYDVQQDEw02NmU5M2Q5ZS1jYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs1V0bBcQooAD8V4XyoevNxKwdwPORoD6DCev2cYxvKvUr7y+PSL21FDG
HmqI1IUXMRvsmjObA1A168i984aIqrTDnZValxiwDnDqNmine1keZh8ICn37Lcl9
jkNmzBYcD0rhVvyCdR0jqcAeh6Sx3wvU3bZx835v/4HnUbHoXQDDtZ5p8dEwY68F
TuQV6Ed0VeX50Gc+21B4IceHn+O2I5W8xnqt/kEYhPQGeZJhrOJfQ/J1Yry+MI1p
pzh0ZbqVWavuXRdDDXCnzUOio65DtoJPQnjuzLJ5rfk1DO2miWLTuz9qC2TNXoVY
pB7ih0BhHgVKWFwBdBMPWjXaXiUu4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHHg
AniLqgpZeU1ADLTyQcR+WuCYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DODRCMjM2Qzc0Q0UxMUVGOUI4QzQ3NEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUDMA0GCSqGSIb3DQEB
CwUAA4IBAQBhzOM5XV4ZTpQ51mZk0G2DK580Co3e+rBALcPAaiN8KVIjBMBdA51e
o/qXQqahhUuP/Ie/LD58hXrsGmnweF0QpMJ3P/9rz2cu72hiKu8mL2ULGp/wuAUj
LBVd3j88svURG1mi0I0jiIFPwYc73TzzroIAaTnB5D3GjQQAcoqzUaHvGsBG1Di+
Y+/e7YVQKQ9PK1cS6ccBmUMTe/uqyJnoY2LERHmNGZpX4ObDTKxUrTkVnhe+7jCK
pDhQQmclktba2hRHt7CJcbXJgZUGHe+B83Soi3dTZQ1wYMp1SHPTlsKQi2sR6LGv
CHRe/xhLqmnMB16V4n9BKcbbGMQv7e39
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:27 2024 by rpki-client on console-ams.rpki-client.org