Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DEE6BA986311EF92DFDC7F762E951A.roa
File: C9DEE6BA986311EF92DFDC7F762E951A.roa (raw, json)
Hash identifier: lgVHsnr6oWKeOFVI41b03x54Us4hpmFA0cBltgI5IoM=
Subject key identifier: 71:46:F0:F4:92:29:77:36:AE:6B:8B:E4:7D:70:8F:0D:05:C2:F5:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010513
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DEE6BA986311EF92DFDC7F762E951A.roa
Signing time: Fri 01 Nov 2024 15:13:03 +0000
ROA not before: Fri 01 Nov 2024 15:12:59 +0000
ROA not after: Tue 11 Feb 2025 15:12:59 +0000
asID: 132839
IP address blocks: 154.195.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66835 (0x10513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 15:12:59 2024 GMT
Not After : Feb 11 15:12:59 2025 GMT
Subject: CN=6724efff-cf09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:9e:dd:1f:ad:f6:69:1c:41:9a:0d:f0:7e:
f0:16:a2:c8:58:cc:4b:ab:65:a1:8c:98:8a:8f:6b:
9c:37:1f:fc:55:4a:62:f5:ac:c7:1d:83:13:6d:9c:
9a:0d:74:e0:36:03:80:74:e5:37:86:03:19:1e:a6:
31:2e:05:f2:2d:fa:88:73:0b:44:65:db:89:06:97:
be:9d:7a:a5:62:43:3b:1d:45:cc:56:4b:49:57:78:
5f:42:54:a5:76:35:47:d9:a8:50:cd:5c:4d:22:c8:
94:a6:32:69:2f:0c:39:d1:2c:8a:d9:00:b2:98:9e:
11:53:1e:72:95:54:0b:98:87:dd:f3:29:32:8d:d8:
62:f1:60:4b:ab:c0:76:c3:d3:62:7b:f1:d3:a9:cd:
34:c5:88:f0:49:93:07:58:5a:bb:a3:55:30:bb:ab:
ea:48:43:27:c4:b7:51:52:f7:03:c7:76:6b:e0:77:
2e:e6:93:2a:da:00:63:3c:56:6e:17:41:95:cd:cb:
e3:6b:fd:3b:5f:75:70:70:ac:27:06:22:0e:a8:27:
ce:0d:35:fc:74:06:b4:ef:d2:99:5e:88:7e:64:e7:
de:62:f7:fa:f5:73:52:be:00:06:06:13:02:07:66:
40:7d:da:76:03:fe:33:c1:08:75:19:f0:de:25:63:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:F0:F4:92:29:77:36:AE:6B:8B:E4:7D:70:8F:0D:05:C2:F5:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9DEE6BA986311EF92DFDC7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.224.0/19
Signature Algorithm: sha256WithRSAEncryption
74:d0:3f:ac:d4:20:10:35:ab:ea:95:8d:63:7f:bb:8f:50:85:
83:4e:50:09:40:22:7a:6a:4b:db:88:f0:73:31:ec:ac:f8:ae:
f8:a7:fb:b8:ff:e9:13:d5:4e:f6:84:05:45:90:a8:51:61:ad:
78:94:71:b5:9e:1c:15:21:64:e9:be:c9:66:db:1d:eb:38:2f:
41:d2:b2:76:d4:da:c1:d2:e1:38:06:87:52:52:84:c7:07:02:
d5:e8:cc:5d:f6:01:9d:4f:07:d5:e7:26:fe:be:60:63:77:d3:
67:60:07:bc:f2:20:32:a7:90:61:fb:19:d2:ee:32:42:a9:00:
3f:fc:7c:4f:07:23:97:6f:02:14:8c:dd:c1:a6:68:a7:74:1b:
08:5f:ec:66:d2:10:7c:f1:21:c6:89:e6:71:9f:d8:c1:17:6b:
1a:3f:cb:86:33:e1:69:a0:ed:d2:08:39:60:18:6b:90:31:f7:
68:b2:85:95:f6:e8:93:d7:3f:29:b4:9e:1c:1d:1b:81:13:1d:
42:7e:d5:56:d1:6c:2e:b8:52:f2:4d:32:86:ae:48:65:ce:4b:
46:3f:84:cc:57:e4:ec:af:54:2d:95:7b:3b:7a:c5:bc:75:3a:
f6:99:ad:ee:de:87:a5:1c:9a:d4:bd:79:ae:2f:28:8b:a3:66:
d4:31:33:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQUTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTAxMTUxMjU5WhcNMjUwMjExMTUxMjU5WjAYMRYw
FAYDVQQDEw02NzI0ZWZmZi1jZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzF2e3R+t9mkcQZoN8H7wFqLIWMxLq2WhjJiKj2ucNx/8VUpi9azHHYMT
bZyaDXTgNgOAdOU3hgMZHqYxLgXyLfqIcwtEZduJBpe+nXqlYkM7HUXMVktJV3hf
QlSldjVH2ahQzVxNIsiUpjJpLww50SyK2QCymJ4RUx5ylVQLmIfd8ykyjdhi8WBL
q8B2w9Nie/HTqc00xYjwSZMHWFq7o1Uwu6vqSEMnxLdRUvcDx3Zr4Hcu5pMq2gBj
PFZuF0GVzcvja/07X3VwcKwnBiIOqCfODTX8dAa079KZXoh+ZOfeYvf69XNSvgAG
BhMCB2ZAfdp2A/4zwQh1GfDeJWOF8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHFG
8PSSKXc2rmuL5H1wjw0FwvWZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DOURFRTZCQTk4NjMxMUVGOTJERkRDN0Y3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsPgMA0GCSqGSIb3DQEB
CwUAA4IBAQB00D+s1CAQNavqlY1jf7uPUIWDTlAJQCJ6akvbiPBzMeys+K74p/u4
/+kT1U72hAVFkKhRYa14lHG1nhwVIWTpvslm2x3rOC9B0rJ21NrB0uE4BodSUoTH
BwLV6Mxd9gGdTwfV5yb+vmBjd9NnYAe88iAyp5Bh+xnS7jJCqQA//HxPByOXbwIU
jN3BpmindBsIX+xm0hB88SHGieZxn9jBF2saP8uGM+FpoO3SCDlgGGuQMfdosoWV
9uiT1z8ptJ4cHRuBEx1CftVW0WwuuFLyTTKGrkhlzktGP4TMV+Tsr1QtlXs7esW8
dTr2ma3u3oelHJrUvXmuLyiLo2bUMTOg
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:25 2024 by rpki-client on console-fra.rpki-client.org