Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D898CAB6A64D11EFA60F5A4F762E951A.roa
File: D898CAB6A64D11EFA60F5A4F762E951A.roa (raw, json)
Hash identifier: xMZ/oPTxZvvBKC2nZNbZZ5PdzYpmwe3uRmDWPrlgHbs=
Subject key identifier: E0:91:AB:6C:FD:1A:F3:0C:19:89:4E:66:38:08:94:3C:39:A0:85:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D898CAB6A64D11EFA60F5A4F762E951A.roa
Signing time: Tue 19 Nov 2024 08:11:15 +0000
ROA not before: Tue 19 Nov 2024 08:11:11 +0000
ROA not after: Sun 15 Dec 2024 08:11:11 +0000
asID: 51396
IP address blocks: 154.213.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69400 (0x10f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 08:11:11 2024 GMT
Not After : Dec 15 08:11:11 2024 GMT
Subject: CN=673c4823-635f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:b9:91:b9:76:39:83:35:98:59:8f:12:4b:
61:3e:d3:f9:a9:17:f4:ff:f8:e9:26:53:13:3c:87:
21:9c:dc:6f:35:b1:06:24:68:d0:a8:90:0e:ef:8f:
ba:2f:6d:6b:34:95:b2:eb:37:16:c3:f7:54:d3:ea:
b8:c3:07:2a:e0:d0:d1:da:8d:d4:f0:20:8d:bc:57:
95:3d:79:7b:1b:79:04:9f:2c:3a:6a:eb:f2:c1:15:
d9:95:e6:e7:ca:5a:18:a9:4f:a3:9f:de:31:93:27:
91:ad:5f:30:99:96:49:81:2b:26:8a:dd:9b:93:60:
6d:96:53:2b:b4:14:3b:6d:e5:ab:a3:29:48:57:b3:
3c:5f:3d:30:d0:e1:9f:ca:5a:f3:86:58:b0:f7:cc:
89:7d:df:fa:0a:1c:c4:80:17:65:aa:58:ea:29:08:
f4:cb:0a:13:df:50:33:33:2a:b8:c5:2f:91:22:71:
4b:5c:78:91:0d:b6:17:a9:a4:56:9b:91:6a:e6:52:
e5:3c:d1:db:d1:fd:c2:50:c5:6f:b2:fd:86:16:9c:
de:64:07:e7:41:2e:96:69:cd:8e:cc:e0:82:90:d8:
21:07:e0:ff:50:2d:35:6d:17:41:bd:8d:94:42:14:
4b:71:92:cf:d8:a7:90:c6:26:13:40:a5:5a:0c:9c:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:AB:6C:FD:1A:F3:0C:19:89:4E:66:38:08:94:3C:39:A0:85:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D898CAB6A64D11EFA60F5A4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f2:5d:1c:ec:44:d0:91:88:71:0f:dc:10:db:3e:8b:65:d4:
aa:30:5c:7a:03:5f:54:c4:97:35:1f:98:05:2d:00:45:39:1f:
3d:b2:c1:05:e8:22:ad:80:8c:74:66:6e:e1:4b:8c:ae:2d:77:
2c:8a:ad:3b:db:13:b2:4c:60:0e:06:33:1c:d3:09:df:f6:71:
33:d3:d1:31:fb:43:8f:4b:0a:ed:69:c5:a0:4d:4d:30:8a:6a:
70:cd:fa:01:3c:f5:c9:04:30:16:24:68:49:7b:35:d5:cf:a0:
d5:5b:30:bf:75:4e:1c:f3:ab:84:24:34:65:9a:99:71:95:30:
1a:a8:df:d3:aa:e9:c4:8a:2b:cd:69:26:c4:ee:30:15:0e:f2:
1a:ae:47:51:8d:84:8b:aa:40:e0:f3:ae:22:ca:31:a9:30:df:
a3:8f:33:32:3d:9e:9e:5c:b8:e8:f7:04:ca:31:ed:94:6d:79:
6b:11:60:93:c8:e6:d1:91:de:d6:d5:83:43:0c:4e:b7:4d:ce:
88:a2:19:4e:2e:09:ce:c3:cd:0b:73:8c:5f:7d:6e:2b:aa:28:
aa:16:55:05:f8:f5:f0:40:ac:75:b8:28:cb:cb:96:48:40:03:
e5:52:3d:2a:c0:5f:09:b5:bc:30:62:4f:09:36:98:a1:be:f0:
f8:fc:0f:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ8YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE5MDgxMTExWhcNMjQxMjE1MDgxMTExWjAYMRYw
FAYDVQQDEw02NzNjNDgyMy02MzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuQW5kbl2OYM1mFmPEkthPtP5qRf0//jpJlMTPIchnNxvNbEGJGjQqJAO
74+6L21rNJWy6zcWw/dU0+q4wwcq4NDR2o3U8CCNvFeVPXl7G3kEnyw6auvywRXZ
lebnyloYqU+jn94xkyeRrV8wmZZJgSsmit2bk2BtllMrtBQ7beWroylIV7M8Xz0w
0OGfylrzhliw98yJfd/6ChzEgBdlqljqKQj0ywoT31AzMyq4xS+RInFLXHiRDbYX
qaRWm5Fq5lLlPNHb0f3CUMVvsv2GFpzeZAfnQS6Wac2OzOCCkNghB+D/UC01bRdB
vY2UQhRLcZLP2KeQxiYTQKVaDJzF6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOCR
q2z9GvMMGYlOZjgIlDw5oIXtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EODk4Q0FCNkE2NEQxMUVGQTYwRjVBNEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtW+MA0GCSqGSIb3DQEB
CwUAA4IBAQCb8l0c7ETQkYhxD9wQ2z6LZdSqMFx6A19UxJc1H5gFLQBFOR89ssEF
6CKtgIx0Zm7hS4yuLXcsiq072xOyTGAOBjMc0wnf9nEz09Ex+0OPSwrtacWgTU0w
impwzfoBPPXJBDAWJGhJezXVz6DVWzC/dU4c86uEJDRlmplxlTAaqN/TqunEiivN
aSbE7jAVDvIarkdRjYSLqkDg864iyjGpMN+jjzMyPZ6eXLjo9wTKMe2UbXlrEWCT
yObRkd7W1YNDDE63Tc6IohlOLgnOw80Lc4xffW4rqiiqFlUF+PXwQKx1uCjLy5ZI
QAPlUj0qwF8JtbwwYk8JNpihvvD4/A+2
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:29 2024 by rpki-client on console-fra.rpki-client.org