Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4578070A72211EFAA20E386762E951A.roa
File: D4578070A72211EFAA20E386762E951A.roa (raw, json)
Hash identifier: LH75VgSxfPXuQ8FecZNx/alWB0YkjFsWrtBYxmLp+es=
Subject key identifier: 5F:76:4C:E9:B0:FA:AF:EF:B8:47:98:81:E7:C2:26:76:77:80:62:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4578070A72211EFAA20E386762E951A.roa
Signing time: Wed 20 Nov 2024 09:35:51 +0000
ROA not before: Wed 20 Nov 2024 09:35:47 +0000
ROA not after: Mon 02 Dec 2024 09:35:47 +0000
asID: 39600
IP address blocks: 154.203.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69481 (0x10f69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:35:47 2024 GMT
Not After : Dec 2 09:35:47 2024 GMT
Subject: CN=673dad76-60b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:a7:03:29:25:23:48:dc:90:96:c7:83:b1:
0d:60:c9:fb:d1:b2:4e:c7:b6:4a:31:0e:bf:ee:88:
a6:60:d7:db:22:1a:4a:37:e7:f2:12:d4:36:8a:77:
2a:50:77:3d:ab:f7:eb:bb:1c:8c:27:5e:75:e9:c5:
81:9a:6d:63:6d:b7:7e:0f:6a:89:c9:a8:b5:c3:67:
8d:85:c3:9e:a0:02:0a:64:3c:ca:fe:9b:01:41:c4:
8e:6b:70:3e:d2:32:72:fa:a8:e1:b4:41:e0:10:79:
fd:a0:e4:8a:0c:dd:6a:98:3d:af:f8:14:38:db:b5:
a1:c1:24:0e:b6:d7:e2:8f:db:7e:7a:73:bf:bc:1a:
ca:b8:2e:82:1f:b1:5b:b3:a5:88:72:84:04:0b:2c:
41:ce:9d:28:5d:34:fa:5a:17:91:7b:db:92:0a:df:
93:5b:27:f1:5a:e5:2d:a0:6a:45:cc:15:b6:78:3d:
62:c9:16:c0:14:c5:ce:df:14:38:50:40:85:ce:9a:
a2:0f:83:ba:49:f7:ae:87:4a:58:45:3d:68:18:24:
e0:5f:1c:12:3e:0b:40:44:db:59:03:bf:08:6d:3a:
d1:73:58:6d:52:45:99:b8:ca:63:46:94:09:90:7e:
a0:24:d8:ce:53:e5:ef:6e:62:7c:8d:1d:1d:9e:5e:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:4C:E9:B0:FA:AF:EF:B8:47:98:81:E7:C2:26:76:77:80:62:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4578070A72211EFAA20E386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.72.0/21
Signature Algorithm: sha256WithRSAEncryption
00:65:26:c9:c3:62:5d:d9:cb:03:04:39:c3:96:9e:ef:fa:c6:
f6:e7:d7:4e:64:61:da:89:ef:6e:da:1c:e6:01:14:87:3f:af:
9a:b9:c2:d3:34:04:85:ed:11:c7:26:23:3a:88:7f:5b:45:a9:
8d:9e:4c:8e:53:6a:ee:9d:5a:9b:80:2f:d2:c6:4d:e3:20:99:
af:78:14:7b:e7:22:f0:4f:47:e2:5a:18:c4:90:4f:58:31:ae:
90:65:f2:15:44:ea:35:fc:50:34:eb:90:6b:84:0c:5c:e7:55:
9c:b6:34:de:4c:b1:e3:db:c3:2d:21:68:30:02:df:6f:c1:c2:
33:9e:53:22:1c:b2:74:43:7e:a1:21:d6:0c:27:01:e0:80:03:
4f:eb:7a:0d:6a:e5:d6:e8:d4:74:27:06:0a:e3:63:5a:9f:03:
67:34:49:6c:77:b5:00:f1:23:fd:89:fc:40:f8:2e:a7:9c:d0:
29:e9:3a:a0:70:49:fe:f5:f6:e0:bd:83:8b:b3:49:84:d3:39:
1b:79:9d:f4:4c:28:ef:d9:ea:b6:e3:fe:bc:6c:c2:7c:54:ce:
28:ed:c9:0a:dd:c3:31:59:2c:ef:65:c4:91:a0:10:0e:e5:0e:
24:ba:77:33:98:37:1f:13:06:46:31:a6:92:19:07:b5:38:23:
19:7f:8c:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ9pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIwMDkzNTQ3WhcNMjQxMjAyMDkzNTQ3WjAYMRYw
FAYDVQQDEw02NzNkYWQ3Ni02MGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtwOnAyklI0jckJbHg7ENYMn70bJOx7ZKMQ6/7oimYNfbIhpKN+fyEtQ2
incqUHc9q/fruxyMJ1516cWBmm1jbbd+D2qJyai1w2eNhcOeoAIKZDzK/psBQcSO
a3A+0jJy+qjhtEHgEHn9oOSKDN1qmD2v+BQ427WhwSQOttfij9t+enO/vBrKuC6C
H7Fbs6WIcoQECyxBzp0oXTT6WheRe9uSCt+TWyfxWuUtoGpFzBW2eD1iyRbAFMXO
3xQ4UECFzpqiD4O6Sfeuh0pYRT1oGCTgXxwSPgtARNtZA78IbTrRc1htUkWZuMpj
RpQJkH6gJNjOU+XvbmJ8jR0dnl54wQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF92
TOmw+q/vuEeYgefCJnZ3gGKYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDU3ODA3MEE3MjIxMUVGQUEyMEUzODY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmstIMA0GCSqGSIb3DQEB
CwUAA4IBAQAAZSbJw2Jd2csDBDnDlp7v+sb259dOZGHaie9u2hzmARSHP6+aucLT
NASF7RHHJiM6iH9bRamNnkyOU2runVqbgC/Sxk3jIJmveBR75yLwT0fiWhjEkE9Y
Ma6QZfIVROo1/FA065BrhAxc51WctjTeTLHj28MtIWgwAt9vwcIznlMiHLJ0Q36h
IdYMJwHggANP63oNauXW6NR0JwYK42NanwNnNElsd7UA8SP9ifxA+C6nnNAp6Tqg
cEn+9fbgvYOLs0mE0zkbeZ30TCjv2eq24/68bMJ8VM4o7ckK3cMxWSzvZcSRoBAO
5Q4kunczmDcfEwZGMaaSGQe1OCMZf4xN
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:26 2024 by rpki-client on console-fra.rpki-client.org