Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA0440EA75311EF831EA0B6762E951A.roa
File: DAA0440EA75311EF831EA0B6762E951A.roa (raw, json)
Hash identifier: OXqvWLN3NCNU+E9y5RXtmGxvX1VLzJY/0ZIg6dEK9ZY=
Subject key identifier: 00:DF:E3:91:51:D7:5F:DC:26:C9:11:8D:16:92:AC:E9:17:E9:16:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010FCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA0440EA75311EF831EA0B6762E951A.roa
Signing time: Wed 20 Nov 2024 15:26:46 +0000
ROA not before: Wed 20 Nov 2024 15:26:43 +0000
ROA not after: Sun 01 Dec 2024 15:26:43 +0000
asID: 135377
IP address blocks: 154.197.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69581 (0x10fcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 15:26:43 2024 GMT
Not After : Dec 1 15:26:43 2024 GMT
Subject: CN=673dffb6-6d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:46:d8:aa:71:59:cf:35:df:ff:6c:df:7b:
77:eb:2b:23:68:69:c3:17:fe:f9:53:5f:5a:77:b9:
3a:64:f7:18:de:0f:99:26:ce:d0:d1:97:6a:1d:36:
de:95:b5:3d:70:fd:bd:1e:3b:b4:5f:03:03:28:fa:
5a:b6:7a:3d:3a:81:0b:ba:03:a8:f1:46:24:c6:39:
23:e0:d1:70:cb:3a:e0:fd:71:b5:68:62:2c:92:90:
55:aa:31:6a:53:22:d2:66:94:7c:44:45:3d:cf:4b:
32:b1:d1:7f:c0:64:6c:85:15:b2:18:e1:d5:09:96:
70:e9:f5:07:2f:b4:65:ae:87:55:cb:67:4d:63:20:
ec:4e:fe:c9:b5:15:d5:89:e0:07:ab:f5:49:ad:9a:
83:25:1d:71:20:6d:1f:50:bc:2b:bd:5d:79:89:fe:
cd:87:c4:7f:79:a3:5c:6b:ac:bc:0b:f9:3f:86:92:
3c:e8:bd:18:a2:e6:22:6c:58:fd:1d:91:ed:c0:61:
cd:a8:d7:a6:07:e5:95:8d:34:86:ea:25:be:f7:b3:
cf:40:44:19:4b:16:69:f7:c6:27:88:01:3c:ab:33:
78:1a:98:2d:19:c3:b9:23:d6:83:8a:81:6a:0d:5b:
bd:18:53:2d:79:53:48:15:b8:3c:5e:71:7f:a9:e0:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DF:E3:91:51:D7:5F:DC:26:C9:11:8D:16:92:AC:E9:17:E9:16:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA0440EA75311EF831EA0B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.56.0/23
Signature Algorithm: sha256WithRSAEncryption
04:67:7a:98:2b:dd:5e:3d:8b:e6:9c:e0:ad:8a:e5:10:58:87:
70:7e:57:ff:0c:f3:de:69:c7:45:35:ca:5f:be:ce:66:6a:6a:
fd:e7:39:83:8a:c9:48:fd:60:e2:29:4c:41:df:7e:01:22:24:
b4:7d:03:57:8b:ae:f1:23:83:23:5d:f3:33:90:0e:72:c8:c3:
cd:c6:3c:fd:df:28:29:f4:c6:9a:6f:74:4f:1e:eb:a7:33:39:
d9:33:38:23:54:cb:56:2c:50:12:e7:0f:db:8e:a9:b2:fb:fd:
ac:29:38:05:9d:2f:6b:72:50:1f:13:ec:a1:06:42:b4:cf:d2:
27:70:86:4a:86:0c:d6:0e:92:14:84:9f:d4:d5:f9:79:3d:47:
ab:db:a2:91:6d:b7:a3:a5:41:d7:d9:43:9b:cb:68:22:5b:65:
ce:0f:c3:f9:d2:43:57:3e:d6:6e:17:a8:d0:8e:3a:7f:a6:73:
c3:6f:36:85:bb:fb:c9:17:1d:77:f1:0c:e6:8e:e1:15:8e:15:
80:6c:1c:4b:ba:c1:12:3c:d9:50:6d:4c:8d:e4:78:78:8c:75:
03:76:84:34:86:e8:fd:1c:c7:06:b4:d4:b1:14:4c:33:4b:4d:
29:33:00:41:9f:8b:9b:a1:94:0d:eb:f6:e8:6c:b4:df:63:37:
4e:da:a6:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ/NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIwMTUyNjQzWhcNMjQxMjAxMTUyNjQzWjAYMRYw
FAYDVQQDEw02NzNkZmZiNi02ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4VtG2KpxWc813/9s33t36ysjaGnDF/75U19ad7k6ZPcY3g+ZJs7Q0Zdq
HTbelbU9cP29Hju0XwMDKPpatno9OoELugOo8UYkxjkj4NFwyzrg/XG1aGIskpBV
qjFqUyLSZpR8REU9z0sysdF/wGRshRWyGOHVCZZw6fUHL7RlrodVy2dNYyDsTv7J
tRXVieAHq/VJrZqDJR1xIG0fULwrvV15if7Nh8R/eaNca6y8C/k/hpI86L0YouYi
bFj9HZHtwGHNqNemB+WVjTSG6iW+97PPQEQZSxZp98YniAE8qzN4GpgtGcO5I9aD
ioFqDVu9GFMteVNIFbg8XnF/qeAjDwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFADf
45FR11/cJskRjRaSrOkX6RZdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQUEwNDQwRUE3NTMxMUVGODMxRUEwQjY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsU4MA0GCSqGSIb3DQEB
CwUAA4IBAQAEZ3qYK91ePYvmnOCtiuUQWIdwflf/DPPeacdFNcpfvs5mamr95zmD
islI/WDiKUxB334BIiS0fQNXi67xI4MjXfMzkA5yyMPNxjz93ygp9Maab3RPHuun
MznZMzgjVMtWLFAS5w/bjqmy+/2sKTgFnS9rclAfE+yhBkK0z9IncIZKhgzWDpIU
hJ/U1fl5PUer26KRbbejpUHX2UOby2giW2XOD8P50kNXPtZuF6jQjjp/pnPDbzaF
u/vJFx138QzmjuEVjhWAbBxLusESPNlQbUyN5Hh4jHUDdoQ0huj9HMcGtNSxFEwz
S00pMwBBn4uboZQN6/bobLTfYzdO2qYL
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:30 2024 by rpki-client on console-ams.rpki-client.org