Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBFC8D9E8ACA11EF848B5D58762E951A.roa
File: DBFC8D9E8ACA11EF848B5D58762E951A.roa (raw, json)
Hash identifier: 1ZFGyLRxg9K4GMm0stvrIhEGL5H25G5MVxGrY4MZi/s=
Subject key identifier: 9D:39:37:BB:8F:8D:90:1B:90:47:16:56:9D:8A:4B:54:46:A3:B3:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: FE2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBFC8D9E8ACA11EF848B5D58762E951A.roa
Signing time: Tue 15 Oct 2024 07:55:35 +0000
ROA not before: Tue 15 Oct 2024 07:55:31 +0000
ROA not after: Fri 22 Nov 2024 07:55:31 +0000
asID: 18779
IP address blocks: 154.203.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 07:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65068 (0xfe2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 15 07:55:31 2024 GMT
Not After : Nov 22 07:55:31 2024 GMT
Subject: CN=670e1ff7-9b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:ff:6e:db:9e:d0:67:55:cf:8a:1d:f0:62:
1a:0e:8b:11:86:27:81:e8:bf:ec:5a:36:ad:2d:3c:
5e:24:83:b9:54:59:f6:82:c6:23:9e:5f:9c:55:23:
19:72:46:f6:29:7c:0f:e2:d8:ec:f8:39:29:d8:21:
4b:cb:23:fa:6a:0a:8d:2c:ef:e6:f8:32:d6:25:a6:
2e:4d:d5:92:39:1a:21:d9:c0:60:dc:4d:55:b0:41:
60:2b:50:fa:9d:73:ba:64:13:70:b6:77:58:32:ea:
ee:b5:f9:5c:94:08:82:5c:48:fb:6d:9c:eb:bc:0c:
da:f9:c3:87:04:e4:63:a1:32:04:9f:e9:a0:a7:10:
55:d1:34:d6:22:d0:f6:36:49:ca:53:91:ab:3b:99:
71:c5:44:76:1d:87:e6:ee:b4:75:4e:46:fa:74:65:
f2:a0:cb:20:bf:97:bb:9c:5c:c3:ec:d4:0d:1e:4f:
ce:97:e5:9d:7a:ec:d4:8a:ff:d3:75:7a:f8:83:ca:
b8:c0:32:c3:49:84:d2:95:5c:24:23:80:ac:a6:3c:
fe:b1:f1:f3:18:fa:2c:a7:27:43:70:be:59:69:db:
4c:9e:6f:74:0d:ec:95:a5:93:9d:7a:90:5e:a9:29:
56:10:8b:e7:b6:fc:53:04:60:d7:d8:67:2a:5b:13:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:39:37:BB:8F:8D:90:1B:90:47:16:56:9D:8A:4B:54:46:A3:B3:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBFC8D9E8ACA11EF848B5D58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:18:f1:f3:e8:21:65:50:4d:b2:64:67:eb:33:5c:bc:2f:24:
c2:89:da:45:f9:4c:b5:cd:c3:1a:bf:b9:6d:de:26:d1:16:38:
9e:2d:05:5d:42:b9:92:df:20:8b:51:e3:86:b5:e0:97:7e:54:
c5:37:da:c0:1f:10:9b:76:e4:f1:7b:60:2e:2d:8e:3b:8d:aa:
18:b1:f3:68:26:f0:0c:69:f1:4c:35:7c:f7:3f:e4:e1:68:40:
fb:6e:5c:d8:cc:4b:5c:72:fc:32:d1:82:da:d6:31:02:90:0f:
51:ad:57:5f:b0:7d:d0:14:17:1d:a0:a0:1c:4b:36:a7:e8:60:
51:9f:6a:19:ad:17:00:6e:18:3a:8c:97:51:91:e5:fd:51:31:
92:b3:ff:f9:0a:62:ae:34:a2:48:82:3e:d1:cf:9d:73:70:b1:
4e:ab:fb:06:3b:5f:33:19:c0:54:26:e2:b2:74:cd:fa:6d:5a:
1c:ab:69:21:a9:eb:d3:3e:35:f6:a0:49:98:46:ec:41:2f:d2:
26:81:86:d3:06:1e:c1:2f:94:af:65:d9:b0:25:68:fe:37:60:
48:54:01:b7:25:c1:d5:1a:37:94:0c:4c:fa:27:f0:85:1d:0b:
f7:0f:46:f8:66:69:28:4d:a9:2e:3c:86:2c:7d:75:ff:2c:b0:
3c:09:fb:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAP4sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDE1MDc1NTMxWhcNMjQxMTIyMDc1NTMxWjAYMRYw
FAYDVQQDEw02NzBlMWZmNy05YjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvDT/btue0GdVz4od8GIaDosRhieB6L/sWjatLTxeJIO5VFn2gsYjnl+c
VSMZckb2KXwP4tjs+Dkp2CFLyyP6agqNLO/m+DLWJaYuTdWSORoh2cBg3E1VsEFg
K1D6nXO6ZBNwtndYMurutflclAiCXEj7bZzrvAza+cOHBORjoTIEn+mgpxBV0TTW
ItD2NknKU5GrO5lxxUR2HYfm7rR1Tkb6dGXyoMsgv5e7nFzD7NQNHk/Ol+WdeuzU
iv/TdXr4g8q4wDLDSYTSlVwkI4Cspjz+sfHzGPospydDcL5ZadtMnm90DeyVpZOd
epBeqSlWEIvntvxTBGDX2GcqWxNRLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ05
N7uPjZAbkEcWVp2KS1RGo7O9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQkZDOEQ5RThBQ0ExMUVGODQ4QjVENTg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmss4MA0GCSqGSIb3DQEB
CwUAA4IBAQDXGPHz6CFlUE2yZGfrM1y8LyTCidpF+Uy1zcMav7lt3ibRFjieLQVd
QrmS3yCLUeOGteCXflTFN9rAHxCbduTxe2AuLY47jaoYsfNoJvAMafFMNXz3P+Th
aED7blzYzEtccvwy0YLa1jECkA9RrVdfsH3QFBcdoKAcSzan6GBRn2oZrRcAbhg6
jJdRkeX9UTGSs//5CmKuNKJIgj7Rz51zcLFOq/sGO18zGcBUJuKydM36bVocq2kh
qevTPjX2oEmYRuxBL9ImgYbTBh7BL5SvZdmwJWj+N2BIVAG3JcHVGjeUDEz6J/CF
HQv3D0b4ZmkoTakuPIYsfXX/LLA8Cfui
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:10 2024 by rpki-client on console-ams.rpki-client.org