Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB6A2883F5A11EF994AC574762E951A.roa
File: CFB6A2883F5A11EF994AC574762E951A.roa (raw, json)
Hash identifier: zfVcIctAzomv7avR46ky4Yv3VgLviO7yA2dHK75gv08=
Subject key identifier: E9:C2:05:8D:44:4F:AB:10:8D:D6:86:C4:49:90:D1:EE:1B:2B:BB:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D09C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB6A2883F5A11EF994AC574762E951A.roa
Signing time: Thu 11 Jul 2024 07:54:34 +0000
ROA not before: Thu 11 Jul 2024 07:54:30 +0000
ROA not after: Sat 19 Jul 2025 07:54:30 +0000
asID: 45996
IP address blocks: 154.205.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53404 (0xd09c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 07:54:30 2024 GMT
Not After : Jul 19 07:54:30 2025 GMT
Subject: CN=668f8fba-0ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:ca:69:bd:f5:17:9b:bc:14:01:ad:d2:cd:
d6:8b:cf:01:42:87:23:19:a2:66:7f:46:14:36:14:
48:fa:ab:89:d3:56:17:63:96:02:97:7e:e1:bb:13:
c2:e6:6f:64:cc:f2:89:05:07:21:73:29:6b:f7:b9:
a7:95:d9:04:3f:01:ea:fc:7a:c0:25:e9:e5:12:fb:
cd:bb:b3:43:f7:10:ee:3d:f2:e6:35:06:15:f3:3d:
f8:94:31:52:e9:f6:c8:ac:7d:31:61:89:59:fd:3a:
1c:07:39:e1:65:04:92:9d:b2:eb:02:90:66:8f:d1:
bc:65:56:3f:5e:59:a9:79:54:66:fb:51:26:70:9f:
e7:f5:f5:1a:e6:8a:b9:43:2f:dc:3d:7b:2d:68:81:
01:c4:91:24:b2:16:9d:26:c2:23:82:ea:39:2b:77:
ad:46:e9:21:47:6d:5b:38:ad:0e:a1:7f:f7:96:6c:
fb:20:08:40:06:a6:a0:e5:f4:e7:54:7a:56:7a:9b:
77:de:f3:7f:64:8f:87:34:e5:7f:c5:0d:4c:0c:c4:
3a:99:1c:0a:50:ec:ba:62:35:68:6a:ed:66:c6:ed:
c2:9f:fa:3b:12:5c:fb:8a:20:1a:bc:b1:d3:62:5b:
67:e6:1b:fe:90:20:ce:d6:f5:b1:65:be:a4:58:25:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:05:8D:44:4F:AB:10:8D:D6:86:C4:49:90:D1:EE:1B:2B:BB:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB6A2883F5A11EF994AC574762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:09:e1:15:3f:b2:f8:41:c2:04:aa:d2:b1:24:fb:fc:0a:19:
19:92:72:24:2d:90:d2:41:15:c0:7a:4e:ac:19:a0:50:16:1a:
96:7b:9b:15:f9:87:a7:77:1a:3b:d8:4f:0d:bc:7c:1b:64:92:
06:7f:bc:79:d2:29:16:1f:0d:01:f9:cd:64:2c:f2:a3:7d:4d:
71:c0:a9:a5:5d:b3:08:3f:25:92:64:1b:56:69:76:3c:09:cd:
9a:6e:8e:33:8e:3e:32:50:40:d0:18:6f:9e:0b:78:91:ba:96:
97:37:f5:9a:72:17:86:41:d3:60:40:9e:3a:4c:2c:2c:b9:d8:
be:f6:50:da:0d:a0:af:5b:38:95:1f:36:8d:34:71:69:9e:29:
18:c7:45:32:33:de:4b:7c:35:b2:8a:b1:6e:09:8d:7f:27:4e:
22:9d:66:97:28:38:1a:93:08:a6:45:e9:82:b8:bc:a8:60:1e:
28:4e:99:0d:54:c1:68:2e:e1:3b:1e:0f:fb:16:75:47:5f:72:
52:f8:1d:28:70:7d:de:21:83:90:86:3c:50:24:f5:89:0e:5d:
ab:45:da:2c:1f:dd:98:67:35:f0:8a:d9:b0:73:e7:93:0d:ac:
12:6e:fb:3f:ae:e0:fd:d3:30:94:6f:a1:e3:19:1d:7f:19:f5:
01:ca:05:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANCcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzExMDc1NDMwWhcNMjUwNzE5MDc1NDMwWjAYMRYw
FAYDVQQDEw02NjhmOGZiYS0wZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAohvKab31F5u8FAGt0s3Wi88BQocjGaJmf0YUNhRI+quJ01YXY5YCl37h
uxPC5m9kzPKJBQchcylr97mnldkEPwHq/HrAJenlEvvNu7ND9xDuPfLmNQYV8z34
lDFS6fbIrH0xYYlZ/TocBznhZQSSnbLrApBmj9G8ZVY/XlmpeVRm+1EmcJ/n9fUa
5oq5Qy/cPXstaIEBxJEkshadJsIjguo5K3etRukhR21bOK0OoX/3lmz7IAhABqag
5fTnVHpWept33vN/ZI+HNOV/xQ1MDMQ6mRwKUOy6YjVoau1mxu3Cn/o7Elz7iiAa
vLHTYltn5hv+kCDO1vWxZb6kWCWY8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOnC
BY1ET6sQjdaGxEmQ0e4bK7uCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRkI2QTI4ODNGNUExMUVGOTk0QUM1NzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms0DMA0GCSqGSIb3DQEB
CwUAA4IBAQB6CeEVP7L4QcIEqtKxJPv8ChkZknIkLZDSQRXAek6sGaBQFhqWe5sV
+Yendxo72E8NvHwbZJIGf7x50ikWHw0B+c1kLPKjfU1xwKmlXbMIPyWSZBtWaXY8
Cc2abo4zjj4yUEDQGG+eC3iRupaXN/WacheGQdNgQJ46TCwsudi+9lDaDaCvWziV
HzaNNHFpnikYx0UyM95LfDWyirFuCY1/J04inWaXKDgakwimRemCuLyoYB4oTpkN
VMFoLuE7Hg/7FnVHX3JS+B0ocH3eIYOQhjxQJPWJDl2rRdosH92YZzXwitmwc+eT
DawSbvs/ruD90zCUb6HjGR1/GfUBygW8
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:26 2024 by rpki-client on console-fra.rpki-client.org