Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D62CCB3E904E11EFBD18B295762E951A.roa
File: D62CCB3E904E11EFBD18B295762E951A.roa (raw, json)
Hash identifier: 9mchRtEvVTGW4NL03xrCObf0SL6TZ4xkt6yuedsF+wE=
Subject key identifier: 7E:94:B6:2A:5A:68:DC:23:42:88:02:9D:78:C7:AC:51:60:9C:F6:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010079
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D62CCB3E904E11EFBD18B295762E951A.roa
Signing time: Tue 22 Oct 2024 08:22:55 +0000
ROA not before: Tue 22 Oct 2024 08:22:51 +0000
ROA not after: Tue 26 Nov 2024 08:22:51 +0000
asID: 395886
IP address blocks: 154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65657 (0x10079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:22:51 2024 GMT
Not After : Nov 26 08:22:51 2024 GMT
Subject: CN=671760df-7b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:a1:13:8d:e0:48:e7:bd:5e:77:1d:95:9f:
74:a0:75:d5:c8:f8:9a:24:32:07:4a:cd:af:2e:14:
82:a4:08:17:f4:5e:9c:db:0c:66:1d:c0:da:d0:95:
84:8e:63:19:88:08:5a:f9:49:52:87:ac:2f:d2:99:
e4:d3:6a:2b:78:25:6d:fc:d5:e2:c0:c3:f6:8e:ed:
10:7c:35:a2:47:fa:77:53:f1:ac:fe:4f:61:7a:0f:
51:90:69:b2:a9:58:2d:88:70:a4:98:7b:1f:bc:fb:
0d:89:43:f0:a4:be:d2:d9:25:a7:d4:56:c8:88:36:
37:2f:07:e7:ea:8c:b3:b2:cd:e8:fb:35:77:c4:2e:
6c:78:1a:a9:ed:1b:ce:40:af:e6:40:26:3f:ca:8c:
cb:6d:2b:95:2e:c7:36:4e:2a:77:f4:f0:1a:e2:86:
60:40:69:c3:ed:50:2c:be:a9:22:8d:4c:7c:41:4b:
07:54:c4:cf:7c:e4:51:a6:63:9c:fe:51:53:96:aa:
6e:c8:fd:5a:65:b3:29:d9:c9:1b:9a:ec:83:c1:75:
21:a5:e7:88:c4:0d:40:45:cc:a2:58:bc:e4:eb:fd:
7c:a1:6d:01:1f:be:a8:fb:a9:2f:96:c2:b3:1d:c2:
96:9c:d9:d0:41:cc:17:2e:f8:38:42:43:b9:ad:f8:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:B6:2A:5A:68:DC:23:42:88:02:9D:78:C7:AC:51:60:9C:F6:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D62CCB3E904E11EFBD18B295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.92.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:c5:9d:e5:c8:c6:61:06:4f:3b:48:15:12:13:41:d8:c9:cf:
13:65:4b:5b:b2:8d:80:9a:6a:90:cc:ed:15:bc:d2:99:cc:35:
33:f9:6c:d2:bd:2c:c0:80:55:98:f0:13:73:d2:fb:17:89:ed:
c8:8d:3e:3b:d5:26:d2:26:4b:7f:70:3d:84:55:eb:d0:29:2f:
78:03:d9:3b:bb:12:da:e7:77:31:f7:b7:7a:5c:f2:ef:a8:43:
19:c5:b2:ad:e3:dc:a4:4f:54:f7:56:4f:b7:b2:85:e0:fb:50:
a4:ba:62:d7:6f:b7:db:db:6c:8d:59:82:74:e0:ac:b1:70:d5:
b0:69:a6:51:e4:ba:89:d2:a7:74:09:ca:88:9c:69:96:c0:f1:
96:08:a8:15:45:db:5c:b7:da:57:98:84:aa:fc:41:4a:bb:35:
8b:7d:11:98:8d:72:51:45:2f:a2:36:6d:b4:ee:b8:0c:71:e4:
d2:7f:7c:ec:5e:74:86:20:0c:31:71:6e:cf:80:59:3c:39:b2:
55:a3:8f:3e:18:a0:52:29:3d:3a:00:70:89:54:0b:1e:c1:5c:
79:bf:4f:09:51:c0:b3:7d:08:98:ab:db:05:e2:90:1c:b7:22:
c2:89:d0:cd:c3:55:05:18:4b:fe:06:e3:d1:70:b4:68:3f:ab:
43:b4:39:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQB5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIyMDgyMjUxWhcNMjQxMTI2MDgyMjUxWjAYMRYw
FAYDVQQDEw02NzE3NjBkZi03YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmguhE43gSOe9XncdlZ90oHXVyPiaJDIHSs2vLhSCpAgX9F6c2wxmHcDa
0JWEjmMZiAha+UlSh6wv0pnk02oreCVt/NXiwMP2ju0QfDWiR/p3U/Gs/k9heg9R
kGmyqVgtiHCkmHsfvPsNiUPwpL7S2SWn1FbIiDY3Lwfn6oyzss3o+zV3xC5seBqp
7RvOQK/mQCY/yozLbSuVLsc2Tip39PAa4oZgQGnD7VAsvqkijUx8QUsHVMTPfORR
pmOc/lFTlqpuyP1aZbMp2ckbmuyDwXUhpeeIxA1ARcyiWLzk6/18oW0BH76o+6kv
lsKzHcKWnNnQQcwXLvg4QkO5rfhqeQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH6U
tipaaNwjQogCnXjHrFFgnPaBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjJDQ0IzRTkwNEUxMUVGQkQxOEIyOTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmslcMA0GCSqGSIb3DQEB
CwUAA4IBAQCkxZ3lyMZhBk87SBUSE0HYyc8TZUtbso2AmmqQzO0VvNKZzDUz+WzS
vSzAgFWY8BNz0vsXie3IjT471SbSJkt/cD2EVevQKS94A9k7uxLa53cx97d6XPLv
qEMZxbKt49ykT1T3Vk+3soXg+1CkumLXb7fb22yNWYJ04KyxcNWwaaZR5LqJ0qd0
CcqInGmWwPGWCKgVRdtct9pXmISq/EFKuzWLfRGYjXJRRS+iNm207rgMceTSf3zs
XnSGIAwxcW7PgFk8ObJVo48+GKBSKT06AHCJVAsewVx5v08JUcCzfQiYq9sF4pAc
tyLCidDNw1UFGEv+BuPRcLRoP6tDtDmH
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:48 2024 by rpki-client on console-fra.rpki-client.org