Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70576A0A4CB11EFB8791758762E951A.roa
File: D70576A0A4CB11EFB8791758762E951A.roa (raw, json)
Hash identifier: usSNJonNU7UH2VvLcEcOHGriHZXxQzAAIPf0MGMT9jA=
Subject key identifier: 1A:76:34:01:44:64:E8:AB:32:6F:44:28:0D:45:C0:54:49:E9:23:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70576A0A4CB11EFB8791758762E951A.roa
Signing time: Sun 17 Nov 2024 10:08:06 +0000
ROA not before: Sun 17 Nov 2024 10:08:03 +0000
ROA not after: Mon 25 Nov 2024 10:08:03 +0000
asID: 9009
IP address blocks: 154.194.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69262 (0x10e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:08:03 2024 GMT
Not After : Nov 25 10:08:03 2024 GMT
Subject: CN=6739c086-c97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:c3:fa:a6:7d:41:a2:6c:0e:69:1c:5e:3a:
e6:58:8f:76:8e:37:b2:7d:bf:06:30:f3:9c:a1:fe:
df:39:91:49:ce:37:38:fa:4a:d2:64:21:15:02:af:
b7:72:65:40:04:45:87:6a:f3:d0:2a:71:b5:8f:90:
93:f0:83:e7:fa:47:e9:81:d5:6a:ce:5d:7c:5d:c3:
53:e5:45:38:6b:06:47:5e:6f:73:a2:99:2e:96:4e:
67:4f:ea:09:93:fe:9a:16:22:a7:5a:f8:cf:1c:b5:
df:e5:2f:30:b5:76:d1:9c:78:27:66:6f:cd:ba:9d:
32:0b:1f:22:2e:4a:d8:31:44:1c:58:c1:94:34:92:
ff:7b:1e:a4:ed:14:16:50:11:05:36:8a:6a:d2:3b:
43:38:73:97:68:f5:93:9c:c2:c1:82:4a:89:2d:f0:
1c:04:44:51:44:92:f3:3c:af:36:18:46:95:00:1f:
67:97:d5:7e:42:96:8c:d9:2b:ff:e5:dc:8b:ac:72:
30:c9:46:78:33:35:31:96:19:b8:a8:0e:39:ee:a3:
a9:11:93:ad:03:dc:3a:1f:19:f4:ef:f4:1e:0c:0f:
e7:10:17:5c:98:0d:0d:6e:93:dc:2f:5a:fe:0e:95:
a0:34:be:d3:01:c3:1f:b9:54:0f:7b:9d:7c:a4:66:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:76:34:01:44:64:E8:AB:32:6F:44:28:0D:45:C0:54:49:E9:23:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70576A0A4CB11EFB8791758762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.11.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3b:1b:b8:a3:45:6c:f5:09:24:c9:e8:b1:62:2e:e2:26:63:
bf:ab:eb:3d:99:28:bf:77:3f:8a:6d:da:bc:09:06:98:b3:b2:
bf:ec:09:be:7d:75:ca:d6:de:ef:87:2c:9f:a0:ce:0d:2f:6d:
75:a0:de:8c:c2:cf:46:aa:d6:43:68:14:dc:8f:7d:17:cd:cc:
61:bb:c8:e1:fd:6f:38:93:1e:21:5f:c2:c2:20:d3:c3:e8:e2:
7f:ca:b4:ac:10:53:66:ee:48:29:1e:31:d9:1f:93:3d:cd:e5:
1c:97:6f:91:b8:27:4b:28:8b:ff:ff:16:95:84:ac:6a:a0:e0:
67:ad:aa:45:f4:72:df:d2:3e:3b:f0:10:b1:e1:2c:c9:38:21:
8b:5c:2c:7b:36:ff:82:e2:e3:c5:2c:7d:ad:f6:bc:30:32:25:
7a:89:ee:6b:5d:0e:9f:bb:a7:ff:9a:0f:60:ed:90:8b:1d:70:
af:c0:36:08:27:fe:93:a1:36:0b:1c:4e:83:fe:50:9f:1b:1d:
7c:ce:1d:ce:4a:22:a3:20:fe:64:3c:97:f0:4e:18:87:e6:c7:
8f:0c:5c:60:74:53:3b:ec:10:fd:d6:86:91:0f:52:0c:66:36:
48:58:8f:7b:ee:83:b8:be:2f:0c:7c:8e:57:13:94:5b:b9:fc:
ad:12:b6:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ6OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MTAwODAzWhcNMjQxMTI1MTAwODAzWjAYMRYw
FAYDVQQDEw02NzM5YzA4Ni1jOTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSzD+qZ9QaJsDmkcXjrmWI92jjeyfb8GMPOcof7fOZFJzjc4+krSZCEV
Aq+3cmVABEWHavPQKnG1j5CT8IPn+kfpgdVqzl18XcNT5UU4awZHXm9zopkulk5n
T+oJk/6aFiKnWvjPHLXf5S8wtXbRnHgnZm/Nup0yCx8iLkrYMUQcWMGUNJL/ex6k
7RQWUBEFNopq0jtDOHOXaPWTnMLBgkqJLfAcBERRRJLzPK82GEaVAB9nl9V+QpaM
2Sv/5dyLrHIwyUZ4MzUxlhm4qA457qOpEZOtA9w6Hxn07/QeDA/nEBdcmA0NbpPc
L1r+DpWgNL7TAcMfuVQPe518pGadHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBp2
NAFEZOirMm9EKA1FwFRJ6SPGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENzA1NzZBMEE0Q0IxMUVGQjg3OTE3NTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsILMA0GCSqGSIb3DQEB
CwUAA4IBAQByOxu4o0Vs9QkkyeixYi7iJmO/q+s9mSi/dz+Kbdq8CQaYs7K/7Am+
fXXK1t7vhyyfoM4NL211oN6Mws9GqtZDaBTcj30Xzcxhu8jh/W84kx4hX8LCINPD
6OJ/yrSsEFNm7kgpHjHZH5M9zeUcl2+RuCdLKIv//xaVhKxqoOBnrapF9HLf0j47
8BCx4SzJOCGLXCx7Nv+C4uPFLH2t9rwwMiV6ie5rXQ6fu6f/mg9g7ZCLHXCvwDYI
J/6ToTYLHE6D/lCfGx18zh3OSiKjIP5kPJfwThiH5sePDFxgdFM77BD91oaRD1IM
ZjZIWI977oO4vi8MfI5XE5RbufytErYX
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:08 2024 by rpki-client on console-fra.rpki-client.org