Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22446AC9B7011EFA76C9A41762E951A.roa
File: D22446AC9B7011EFA76C9A41762E951A.roa (raw, json)
Hash identifier: 8kpxiaVnfLhuQ1EevV6GXLf/HiVD9ErrG5vC4SNuGwA=
Subject key identifier: C6:0A:79:46:54:7E:F7:7C:B7:F5:6F:1C:A2:49:43:BA:74:4D:DA:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22446AC9B7011EFA76C9A41762E951A.roa
Signing time: Tue 05 Nov 2024 12:23:54 +0000
ROA not before: Tue 05 Nov 2024 12:23:50 +0000
ROA not after: Mon 13 Jan 2025 12:23:50 +0000
asID: 7018
IP address blocks: 154.195.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67509 (0x107b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 12:23:50 2024 GMT
Not After : Jan 13 12:23:50 2025 GMT
Subject: CN=672a0e59-3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:39:46:98:40:9f:80:67:f9:16:b2:04:72:
72:98:83:19:7c:c4:d7:af:1c:c1:75:21:46:ab:df:
a5:d4:0e:1c:cf:e1:5a:cb:d5:62:48:ee:4c:71:b2:
d1:ec:c7:77:f0:c6:5c:41:c5:b9:3b:32:02:c2:c0:
ea:4e:78:11:c1:de:76:c3:63:64:03:6a:24:bb:38:
aa:e1:92:fd:e1:cc:36:3d:67:79:27:bc:9b:52:bf:
f1:d6:44:f8:86:f1:fd:9b:37:2b:3b:5e:d2:1d:b7:
11:63:57:dc:df:dd:2f:2d:8b:f9:05:b0:7f:75:36:
ae:47:c3:c3:e0:c2:11:d4:42:d2:0b:14:8b:a8:8a:
a8:dc:82:3f:6c:a0:00:c6:de:17:f2:69:a5:fa:69:
1b:56:4d:39:e7:05:38:19:05:a6:63:54:03:5d:fa:
3e:11:a8:e3:bd:02:6d:c9:e2:b2:7b:46:98:5c:ab:
18:ef:2b:45:22:6c:b8:21:88:b7:55:98:84:4d:85:
31:4d:5e:5b:a6:83:6c:a2:bf:a2:75:62:02:8d:b0:
66:22:f1:ab:6c:0e:d3:a1:38:03:6b:84:4b:86:b6:
50:2e:36:01:6d:12:73:70:67:bf:d8:8b:25:51:af:
7a:1d:48:2e:90:f4:32:9b:e0:92:23:8e:a2:6a:f6:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:79:46:54:7E:F7:7C:B7:F5:6F:1C:A2:49:43:BA:74:4D:DA:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D22446AC9B7011EFA76C9A41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c8:66:e8:c5:ed:12:9a:2a:11:69:cd:63:3b:86:5a:68:f1:
0f:b6:08:88:72:68:df:a8:b7:77:d0:65:d7:0b:6c:d6:4c:9f:
1c:82:06:c8:7a:1f:d3:42:e9:36:bb:a1:4e:83:b3:09:73:f8:
95:4f:71:fb:69:19:83:6b:74:8e:e5:8e:c6:fd:2f:b1:c9:a4:
9c:78:96:8e:db:83:7a:fd:32:51:a8:bd:66:4b:73:2d:2d:8c:
b4:d5:05:5b:1c:ef:1f:3e:94:9d:dc:99:fb:0c:6c:54:8e:eb:
18:76:9a:5e:79:0b:8d:b1:5f:ab:d4:db:17:9b:c1:c9:4c:e2:
fd:c9:89:1f:f5:0b:c6:98:6d:ed:00:7c:26:38:c0:4c:95:94:
fe:f1:60:7f:00:74:c3:f4:e0:41:24:58:57:7f:a9:8a:ed:53:
6b:00:72:1b:72:f1:fe:f8:e0:d1:47:9c:fe:be:02:19:eb:76:
12:a3:1f:1f:de:d5:d6:82:2a:1a:7b:1a:7e:ed:7e:c7:1a:54:
f8:f2:89:d9:19:a4:85:db:a4:9d:96:b9:61:1e:fe:0a:89:70:
a3:b2:60:bf:29:5b:7a:ca:69:80:77:b5:96:0d:ce:a6:ce:6f:
e4:09:c2:43:98:65:f6:62:af:fd:44:47:f0:f4:0b:b0:53:9c:
cd:a1:28:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQe1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTIyMzUwWhcNMjUwMTEzMTIyMzUwWjAYMRYw
FAYDVQQDEw02NzJhMGU1OS0zNjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxZ85RphAn4Bn+RayBHJymIMZfMTXrxzBdSFGq9+l1A4cz+Fay9ViSO5M
cbLR7Md38MZcQcW5OzICwsDqTngRwd52w2NkA2okuziq4ZL94cw2PWd5J7ybUr/x
1kT4hvH9mzcrO17SHbcRY1fc390vLYv5BbB/dTauR8PD4MIR1ELSCxSLqIqo3II/
bKAAxt4X8mml+mkbVk055wU4GQWmY1QDXfo+EajjvQJtyeKye0aYXKsY7ytFImy4
IYi3VZiETYUxTV5bpoNsor+idWICjbBmIvGrbA7ToTgDa4RLhrZQLjYBbRJzcGe/
2IslUa96HUgukPQym+CSI46iavZeJwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMYK
eUZUfvd8t/VvHKJJQ7p0TdpoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMjI0NDZBQzlCNzAxMUVGQTc2QzlBNDE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsMgMA0GCSqGSIb3DQEB
CwUAA4IBAQBPyGboxe0SmioRac1jO4ZaaPEPtgiIcmjfqLd30GXXC2zWTJ8cggbI
eh/TQuk2u6FOg7MJc/iVT3H7aRmDa3SO5Y7G/S+xyaSceJaO24N6/TJRqL1mS3Mt
LYy01QVbHO8fPpSd3Jn7DGxUjusYdppeeQuNsV+r1NsXm8HJTOL9yYkf9QvGmG3t
AHwmOMBMlZT+8WB/AHTD9OBBJFhXf6mK7VNrAHIbcvH++ODRR5z+vgIZ63YSox8f
3tXWgioaexp+7X7HGlT48onZGaSF26SdlrlhHv4KiXCjsmC/KVt6ymmAd7WWDc6m
zm/kCcJDmGX2Yq/9REfw9AuwU5zNoSjG
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:35:21 2024 by rpki-client on console-fra.rpki-client.org