Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6FD78C32BA11EFB7ADF0AC762E951A.roa
File: CB6FD78C32BA11EFB7ADF0AC762E951A.roa (raw, json)
Hash identifier: 7Nx3xJa2zJKhKerTgQFs3UUuliEX7RdcTyKa9Jn3mXg=
Subject key identifier: 96:2B:45:24:27:2F:0F:2A:84:9A:3A:08:12:43:C8:5A:93:65:76:76
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C651
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6FD78C32BA11EFB7ADF0AC762E951A.roa
Signing time: Tue 25 Jun 2024 06:18:53 +0000
ROA not before: Tue 25 Jun 2024 06:18:50 +0000
ROA not after: Fri 03 Jan 2025 06:18:50 +0000
asID: 40065
IP address blocks: 154.212.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50769 (0xc651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 06:18:50 2024 GMT
Not After : Jan 3 06:18:50 2025 GMT
Subject: CN=667a614d-8781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:ac:eb:b8:e7:e6:4c:84:82:7a:06:d7:0f:
f4:2e:95:2d:61:dd:a6:5e:9e:47:69:4c:cc:33:84:
6a:00:cd:6c:82:64:46:58:20:8b:31:c2:67:1e:05:
fd:e0:c9:50:50:95:74:a1:01:91:9f:08:22:ee:b2:
29:f4:31:4f:33:30:38:b5:e8:38:46:63:88:dd:81:
c4:39:3c:27:c6:09:b8:a4:b3:7b:0a:c2:0d:33:a7:
74:c3:3a:28:bd:f1:a4:b1:8e:a8:fc:5c:9f:69:30:
4f:b8:7e:2f:c5:b0:5e:d0:de:8b:2a:8a:7a:22:fe:
da:2b:12:a1:29:48:80:e0:93:e9:70:7e:28:9b:b2:
f6:67:f0:c3:e4:50:e9:3c:5f:af:c0:03:6c:2f:83:
38:fc:76:55:17:79:4c:7c:1e:09:07:bc:a9:24:2f:
37:6c:aa:ee:d5:00:e7:06:20:77:24:45:43:09:ac:
53:63:19:1a:35:ab:25:92:d6:82:36:8a:b6:f1:97:
4b:3f:19:8a:d9:be:93:a0:24:ef:2a:c5:ea:13:84:
15:fc:76:8e:8f:ab:15:d4:91:51:44:6d:39:9f:e0:
6f:ae:ab:b5:8b:67:44:8f:c6:19:a1:d2:21:d2:ec:
60:34:a6:75:47:ed:03:6c:0f:58:1b:c2:e4:6c:c5:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2B:45:24:27:2F:0F:2A:84:9A:3A:08:12:43:C8:5A:93:65:76:76
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB6FD78C32BA11EFB7ADF0AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.4.0/24
Signature Algorithm: sha256WithRSAEncryption
54:70:be:20:62:5e:68:f5:aa:f1:ad:9a:af:56:ce:a9:0f:b1:
7a:d0:c9:e7:f2:77:b8:6b:c2:37:26:5b:09:43:5b:c2:ee:44:
e7:91:a3:56:69:81:1e:3b:89:30:e9:fe:3a:f6:38:f9:db:40:
7d:a7:53:be:f8:1c:53:b5:94:dc:12:18:2f:b1:9d:78:db:50:
d7:65:4a:4a:05:eb:41:6f:ff:72:29:a8:08:bc:cd:99:81:dc:
e6:ed:52:50:3e:53:24:01:22:5e:ba:a8:dd:d3:91:67:03:a8:
a6:7f:ec:9e:9c:c0:ab:9d:37:a2:4d:99:5e:d8:b1:be:f9:17:
0d:ef:5c:71:a4:5b:4c:33:57:b7:bd:af:8e:6e:85:ac:e0:64:
1a:26:c4:95:7b:f3:b4:fc:d2:5d:3f:3d:e3:1d:58:b8:12:68:
85:1a:4e:3b:04:a7:f9:91:5f:9e:f7:14:d8:64:e4:ed:e4:21:
c7:97:4c:30:a4:2f:8b:da:68:5a:0c:92:59:78:33:34:41:32:
c3:05:d3:17:a9:10:a8:f6:ca:52:13:9b:89:f9:97:98:3b:d6:
ce:7d:55:fa:32:43:00:0c:9d:c8:6b:2a:ae:01:10:c2:d3:9c:
5d:5b:a8:43:f3:37:fd:d6:de:10:ab:12:92:d1:29:6f:9f:1f:
dd:a0:66:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMZRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI1MDYxODUwWhcNMjUwMTAzMDYxODUwWjAYMRYw
FAYDVQQDEw02NjdhNjE0ZC04NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuq+s67jn5kyEgnoG1w/0LpUtYd2mXp5HaUzMM4RqAM1sgmRGWCCLMcJn
HgX94MlQUJV0oQGRnwgi7rIp9DFPMzA4teg4RmOI3YHEOTwnxgm4pLN7CsINM6d0
wzoovfGksY6o/FyfaTBPuH4vxbBe0N6LKop6Iv7aKxKhKUiA4JPpcH4om7L2Z/DD
5FDpPF+vwANsL4M4/HZVF3lMfB4JB7ypJC83bKru1QDnBiB3JEVDCaxTYxkaNasl
ktaCNoq28ZdLPxmK2b6ToCTvKsXqE4QV/HaOj6sV1JFRRG05n+Bvrqu1i2dEj8YZ
odIh0uxgNKZ1R+0DbA9YG8LkbMVKzwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJYr
RSQnLw8qhJo6CBJDyFqTZXZ2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjZGRDc4QzMyQkExMUVGQjdBREYwQUM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtQEMA0GCSqGSIb3DQEB
CwUAA4IBAQBUcL4gYl5o9arxrZqvVs6pD7F60Mnn8ne4a8I3JlsJQ1vC7kTnkaNW
aYEeO4kw6f469jj520B9p1O++BxTtZTcEhgvsZ1421DXZUpKBetBb/9yKagIvM2Z
gdzm7VJQPlMkASJeuqjd05FnA6imf+yenMCrnTeiTZle2LG++RcN71xxpFtMM1e3
va+OboWs4GQaJsSVe/O0/NJdPz3jHVi4EmiFGk47BKf5kV+e9xTYZOTt5CHHl0ww
pC+L2mhaDJJZeDM0QTLDBdMXqRCo9spSE5uJ+ZeYO9bOfVX6MkMADJ3IayquARDC
05xdW6hD8zf91t4QqxKS0Slvnx/doGZt
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:47 2024 by rpki-client on console-fra.rpki-client.org