Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA612F54905011EFB6FD7FA2762E951A.roa
File: DA612F54905011EFB6FD7FA2762E951A.roa (raw, json)
Hash identifier: KVXDzNElNHsvU2oR8cmvz+iD0r0xb4N7jHNt+5h8SU0=
Subject key identifier: 0D:5F:33:85:8F:53:CC:DC:68:8C:20:0B:4B:67:55:EC:7C:80:B8:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010089
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA612F54905011EFB6FD7FA2762E951A.roa
Signing time: Tue 22 Oct 2024 08:37:21 +0000
ROA not before: Tue 22 Oct 2024 08:37:17 +0000
ROA not after: Tue 26 Nov 2024 08:37:17 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65673 (0x10089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 22 08:37:17 2024 GMT
Not After : Nov 26 08:37:17 2024 GMT
Subject: CN=67176441-b7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:58:bf:97:57:17:32:0f:d2:19:28:3d:60:
49:ea:28:10:b0:38:7e:21:da:45:fa:42:7c:dc:b6:
3c:14:19:86:8b:83:69:c2:e1:6b:56:d9:bf:49:05:
a6:22:f0:61:cb:9d:46:bc:d5:85:6b:7a:01:7d:69:
fb:3d:06:da:7d:54:f4:38:5c:b7:79:3d:26:ca:0e:
ab:8f:d6:20:0c:ff:5d:21:c3:14:8c:76:ed:e6:4d:
76:e8:2b:14:7c:58:bf:ca:2f:57:2d:4a:d9:2a:67:
7d:de:6b:52:dd:51:74:41:49:e2:be:81:90:4a:ff:
54:06:c5:25:d7:a6:a6:83:bb:56:cf:61:67:31:20:
17:eb:bb:70:99:5d:49:6a:b0:a8:e2:8a:c8:ad:0b:
1b:33:48:9e:31:c1:61:2e:15:44:53:51:26:c7:a3:
b8:93:2f:30:1f:f9:2a:b5:be:ab:81:d2:42:0d:3c:
59:bb:5d:62:8f:aa:4f:ea:70:de:33:37:56:eb:1d:
dc:3b:46:13:7a:b5:46:3c:d6:67:a1:d4:07:26:0b:
b4:5b:48:d0:b9:a0:5d:db:80:7b:0e:50:20:2f:cf:
1f:d6:3c:0c:21:ba:f2:72:86:61:a0:38:55:fb:ff:
77:23:57:c9:83:23:17:eb:c1:96:e1:20:9c:6a:dc:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:33:85:8F:53:CC:DC:68:8C:20:0B:4B:67:55:EC:7C:80:B8:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA612F54905011EFB6FD7FA2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
43:07:03:9d:e1:d3:c6:51:19:5f:5e:c6:34:07:e4:50:ec:78:
36:64:7f:ab:45:62:79:cc:f7:f0:08:44:07:27:46:85:51:3a:
6f:eb:6f:7e:7c:85:af:fd:5d:01:94:ff:f1:ad:a4:21:2c:fd:
0a:11:79:2c:fd:c4:b6:b4:2e:49:de:d4:21:05:21:72:7e:a9:
b2:94:43:c5:5c:c9:cc:74:bd:41:6a:20:f4:d9:2a:c1:1d:82:
07:85:a5:26:6d:3f:5f:57:b9:0b:74:33:03:43:fb:0c:3e:2d:
5f:29:a6:73:5e:cc:a6:6e:03:c6:ee:26:51:0f:7b:b7:52:3c:
9b:9d:41:d7:46:9f:ad:9b:17:33:22:32:58:3b:22:32:dc:5b:
dc:73:1e:67:64:fa:67:68:d4:c2:e0:4b:60:71:59:e8:85:fa:
41:ab:96:11:ea:40:b5:5b:f2:74:e7:b9:ed:2a:2a:d2:42:ca:
94:85:e4:0e:19:c5:62:fe:c4:09:4f:39:0f:d9:d7:f9:69:33:
a0:15:a9:ee:7c:8d:7a:06:ed:72:d3:2f:6b:8b:70:40:7a:d8:
e1:f3:10:0e:9f:41:74:91:61:03:4d:0a:0a:36:f0:00:b7:7f:
36:1c:2b:c1:02:77:f4:24:0f:aa:b4:d0:dd:86:e6:b0:18:48:
5d:31:f5:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQCJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIyMDgzNzE3WhcNMjQxMTI2MDgzNzE3WjAYMRYw
FAYDVQQDEw02NzE3NjQ0MS1iN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAycRYv5dXFzIP0hkoPWBJ6igQsDh+IdpF+kJ83LY8FBmGi4NpwuFrVtm/
SQWmIvBhy51GvNWFa3oBfWn7PQbafVT0OFy3eT0myg6rj9YgDP9dIcMUjHbt5k12
6CsUfFi/yi9XLUrZKmd93mtS3VF0QUnivoGQSv9UBsUl16amg7tWz2FnMSAX67tw
mV1JarCo4orIrQsbM0ieMcFhLhVEU1Emx6O4ky8wH/kqtb6rgdJCDTxZu11ij6pP
6nDeMzdW6x3cO0YTerVGPNZnodQHJgu0W0jQuaBd24B7DlAgL88f1jwMIbrycoZh
oDhV+/93I1fJgyMX68GW4SCcatwx9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA1f
M4WPU8zcaIwgC0tnVex8gLisMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQTYxMkY1NDkwNTAxMUVGQjZGRDdGQTI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmslAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDBwOd4dPGURlfXsY0B+RQ7Hg2ZH+rRWJ5zPfwCEQHJ0aFUTpv629+
fIWv/V0BlP/xraQhLP0KEXks/cS2tC5J3tQhBSFyfqmylEPFXMnMdL1BaiD02SrB
HYIHhaUmbT9fV7kLdDMDQ/sMPi1fKaZzXsymbgPG7iZRD3u3UjybnUHXRp+tmxcz
IjJYOyIy3Fvccx5nZPpnaNTC4EtgcVnohfpBq5YR6kC1W/J057ntKirSQsqUheQO
GcVi/sQJTzkP2df5aTOgFanufI16Bu1y0y9ri3BAetjh8xAOn0F0kWEDTQoKNvAA
t382HCvBAnf0JA+qtNDdhuawGEhdMfXK
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:49 2024 by rpki-client on console-fra.rpki-client.org