Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C925CEB6A32E11EF9CE512B7762E951A.roa
File: C925CEB6A32E11EF9CE512B7762E951A.roa (raw, json)
Hash identifier: DubKp9iKpoHtVoez2c2Xrz52j3/jrSB5Kyo8CP/I2ms=
Subject key identifier: 44:03:EB:CE:40:5C:56:61:36:A1:4B:00:21:99:F8:41:67:B2:8A:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010D60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C925CEB6A32E11EF9CE512B7762E951A.roa
Signing time: Fri 15 Nov 2024 08:51:21 +0000
ROA not before: Fri 15 Nov 2024 08:51:17 +0000
ROA not after: Sat 21 Dec 2024 08:51:17 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68960 (0x10d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 08:51:17 2024 GMT
Not After : Dec 21 08:51:17 2024 GMT
Subject: CN=67370b89-f99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:e9:cc:94:ef:9f:bc:47:bf:bb:7f:db:6f:
09:d2:15:73:f2:34:20:29:25:49:20:92:80:5a:5d:
a6:dc:8e:be:01:d8:5c:bb:c3:0a:e6:74:ce:7b:5f:
05:9a:95:93:a3:f7:bd:64:68:3b:84:bc:fb:cb:20:
2e:96:65:dc:fe:f3:e4:1b:31:a9:a4:6d:e9:1b:52:
7a:8e:6c:0b:4c:ea:ca:b0:20:81:46:cf:df:76:62:
65:c5:34:a7:ea:a8:d2:3a:17:23:77:28:5f:8a:11:
68:2a:09:1f:cb:e9:98:26:00:29:b6:14:c4:a0:3f:
74:57:9c:10:e7:6b:40:39:b1:ab:e1:f3:62:5e:3c:
e5:91:69:a7:44:9b:29:e5:d5:eb:3e:bd:cf:0e:11:
d2:bf:c6:ea:e7:71:da:00:98:e4:ac:de:d0:51:3e:
72:23:49:7c:4f:91:8e:5c:b9:5c:e4:2c:32:65:31:
41:a8:8b:d3:57:54:c0:da:ff:b6:9e:f6:89:3f:1c:
41:10:2f:ee:7d:35:ce:2f:be:0c:37:ff:a4:1c:fb:
f3:fc:de:30:02:7c:89:1d:d0:0a:94:8a:1f:e2:63:
f6:70:4b:77:45:39:c5:7a:60:25:80:f7:ca:82:ad:
6e:74:f3:c1:2c:22:54:0c:28:7f:75:a0:8a:27:e6:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:03:EB:CE:40:5C:56:61:36:A1:4B:00:21:99:F8:41:67:B2:8A:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C925CEB6A32E11EF9CE512B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:da:1a:c6:4f:d6:ea:0c:9e:d9:ff:95:45:da:1c:32:d7:0f:
73:d1:65:c9:a8:e1:e1:53:17:68:1b:a0:e0:0c:ca:08:26:26:
51:46:7f:07:3d:59:b5:3a:d1:f1:d9:f7:34:da:49:38:29:5a:
75:0a:39:78:6d:a3:5c:1d:f1:95:0b:a4:95:cd:87:fa:e5:f0:
d4:b9:5f:3f:34:cc:11:bc:ae:39:59:9e:b9:7f:16:5c:f6:f7:
9e:ed:76:91:db:ee:19:b6:0d:a6:81:8f:06:d1:ea:0d:70:de:
8b:23:f1:b8:1e:9f:bc:a1:ce:e0:d0:cf:4a:f4:f7:57:94:96:
d5:dd:f0:c2:7f:1e:4a:ec:05:ea:2f:43:97:b2:8e:29:fb:9b:
82:16:a2:62:e5:a4:f2:59:24:ff:ab:44:da:4d:6d:89:9a:4c:
55:30:82:f8:40:85:27:79:fd:ad:7b:d4:9a:a2:c9:37:46:90:
44:99:5c:db:8a:d9:b4:a6:6a:24:ad:f4:ee:84:3e:54:34:7d:
d9:a2:f8:df:f3:3c:c5:7d:7f:4b:2b:7b:07:2a:f8:5f:15:8d:
7d:2c:c2:20:dd:e1:e1:e9:ba:ef:6c:60:52:07:e6:85:45:b9:
bd:c6:e9:2c:4e:51:62:1e:09:fd:ed:45:84:b1:a2:41:54:5a:
b5:a2:e4:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ1gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE1MDg1MTE3WhcNMjQxMjIxMDg1MTE3WjAYMRYw
FAYDVQQDEw02NzM3MGI4OS1mOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoH/pzJTvn7xHv7t/228J0hVz8jQgKSVJIJKAWl2m3I6+Adhcu8MK5nTO
e18FmpWTo/e9ZGg7hLz7yyAulmXc/vPkGzGppG3pG1J6jmwLTOrKsCCBRs/fdmJl
xTSn6qjSOhcjdyhfihFoKgkfy+mYJgApthTEoD90V5wQ52tAObGr4fNiXjzlkWmn
RJsp5dXrPr3PDhHSv8bq53HaAJjkrN7QUT5yI0l8T5GOXLlc5CwyZTFBqIvTV1TA
2v+2nvaJPxxBEC/ufTXOL74MN/+kHPvz/N4wAnyJHdAKlIof4mP2cEt3RTnFemAl
gPfKgq1udPPBLCJUDCh/daCKJ+bCzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEQD
685AXFZhNqFLACGZ+EFnsoqPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOTI1Q0VCNkEzMkUxMUVGOUNFNTEyQjc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtYAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM2hrGT9bqDJ7Z/5VF2hwy1w9z0WXJqOHhUxdoG6DgDMoIJiZRRn8H
PVm1OtHx2fc02kk4KVp1Cjl4baNcHfGVC6SVzYf65fDUuV8/NMwRvK45WZ65fxZc
9vee7XaR2+4Ztg2mgY8G0eoNcN6LI/G4Hp+8oc7g0M9K9PdXlJbV3fDCfx5K7AXq
L0OXso4p+5uCFqJi5aTyWST/q0TaTW2JmkxVMIL4QIUnef2te9Saosk3RpBEmVzb
itm0pmokrfTuhD5UNH3Zovjf8zzFfX9LK3sHKvhfFY19LMIg3eHh6brvbGBSB+aF
Rbm9xuksTlFiHgn97UWEsaJBVFq1ouTP
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:20 2024 by rpki-client on console-fra.rpki-client.org