Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2077B82A44111EF86F83C6B762E951A.roa
File: E2077B82A44111EF86F83C6B762E951A.roa (raw, json)
Hash identifier: /C3YflsheJfxiCLB8r5rUp92v2/kdZdkZnK0zn3Dwng=
Subject key identifier: D0:F0:9C:49:DE:DD:BE:FF:37:19:12:8D:D9:0A:E5:ED:7B:36:00:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010DC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2077B82A44111EF86F83C6B762E951A.roa
Signing time: Sat 16 Nov 2024 17:40:34 +0000
ROA not before: Sat 16 Nov 2024 17:40:31 +0000
ROA not after: Sun 12 Jul 2026 17:40:31 +0000
asID: 55967
IP address blocks: 154.85.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69061 (0x10dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 17:40:31 2024 GMT
Not After : Jul 12 17:40:31 2026 GMT
Subject: CN=6738d912-2a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:9f:47:f4:12:b6:39:ba:8d:d9:6e:5f:d5:
79:9e:3e:a4:4e:73:90:5e:08:1c:1a:63:a2:62:21:
8c:81:4b:3c:0d:3d:9c:22:90:06:0c:00:cd:d6:27:
49:bf:f6:17:8c:50:4e:fb:a9:4d:bf:04:f0:85:9e:
d2:ce:64:6a:6f:90:65:24:10:be:c0:1b:32:8a:39:
30:4e:d4:50:66:18:d9:f0:b8:f7:96:fb:d6:85:c7:
19:fe:c8:63:05:d3:56:9e:d2:ab:15:31:d2:06:69:
19:36:db:e6:9e:17:22:c8:90:68:4a:49:17:07:2f:
40:43:1a:c6:85:f5:93:da:f3:16:63:48:2f:29:3e:
1b:db:c2:cc:3c:d9:8b:bd:ba:31:7d:b7:65:f3:29:
09:63:4b:58:1f:ad:a4:d4:5a:bc:c0:73:19:37:bd:
2d:91:5a:51:62:d4:8a:6c:a3:43:f3:f2:8a:3b:ee:
d5:65:17:f2:a9:46:eb:63:d9:11:22:b1:8b:84:68:
ea:dc:22:c8:b2:62:a4:17:a2:76:ca:84:bd:d5:4e:
e7:13:eb:26:25:1f:b0:c0:0c:af:3c:ad:37:55:a8:
5d:37:83:b8:5c:73:97:83:f7:e0:a7:ad:74:f3:d8:
8d:58:77:95:07:b1:69:38:a5:0f:19:90:b4:b9:a5:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:9C:49:DE:DD:BE:FF:37:19:12:8D:D9:0A:E5:ED:7B:36:00:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2077B82A44111EF86F83C6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.32.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:6f:d9:96:10:a1:39:fc:89:36:d0:6f:e2:3a:90:f0:1b:13:
f9:d3:bb:ff:44:be:3a:1c:5b:71:84:6c:86:3f:3e:ba:a0:24:
7c:a5:98:4a:a4:78:58:60:5d:b9:b1:e2:f2:cd:fd:ad:2d:5c:
48:c6:eb:02:e0:3b:4a:92:99:6f:e8:3b:d3:95:47:03:66:54:
ce:ff:2f:75:39:fa:0b:18:15:93:70:3d:08:28:d9:6d:58:e9:
30:49:db:0e:f9:d6:c7:0e:0b:aa:e4:79:e7:5b:71:14:11:44:
04:3f:fc:d7:08:12:41:a7:7d:f5:63:88:cd:9b:16:20:0d:04:
e0:10:7f:6e:d4:47:0c:f3:5a:2c:29:9f:a3:35:1f:d9:75:76:
b2:90:e3:d6:e3:2e:d8:6c:a2:61:52:49:1a:37:de:8e:1c:22:
ec:a7:b1:b8:b2:b8:48:06:21:39:21:8a:76:5e:f8:e0:69:61:
1d:d9:2f:30:ee:ba:2c:03:bd:a2:13:23:2a:65:c7:67:2c:93:
1e:52:4c:17:1b:5c:42:6a:73:2f:bf:76:f5:66:de:37:5b:85:
d3:c4:b2:c0:ea:2e:d3:88:6e:a9:da:30:28:67:a8:75:41:c0:
26:40:e9:0b:e5:f9:ae:41:15:71:02:c1:d3:d2:21:8a:22:2f:
c7:07:98:f4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ3FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MTc0MDMxWhcNMjYwNzEyMTc0MDMxWjAYMRYw
FAYDVQQDEw02NzM4ZDkxMi0yYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWefR/QStjm6jdluX9V5nj6kTnOQXggcGmOiYiGMgUs8DT2cIpAGDADN
1idJv/YXjFBO+6lNvwTwhZ7SzmRqb5BlJBC+wBsyijkwTtRQZhjZ8Lj3lvvWhccZ
/shjBdNWntKrFTHSBmkZNtvmnhciyJBoSkkXBy9AQxrGhfWT2vMWY0gvKT4b28LM
PNmLvboxfbdl8ykJY0tYH62k1Fq8wHMZN70tkVpRYtSKbKND8/KKO+7VZRfyqUbr
Y9kRIrGLhGjq3CLIsmKkF6J2yoS91U7nE+smJR+wwAyvPK03VahdN4O4XHOXg/fg
p61089iNWHeVB7FpOKUPGZC0uaUjUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNDw
nEne3b7/NxkSjdkK5e17NgCTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMjA3N0I4MkE0NDExMUVGODZGODNDNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlUgMA0GCSqGSIb3DQEB
CwUAA4IBAQC3b9mWEKE5/Ik20G/iOpDwGxP507v/RL46HFtxhGyGPz66oCR8pZhK
pHhYYF25seLyzf2tLVxIxusC4DtKkplv6DvTlUcDZlTO/y91OfoLGBWTcD0IKNlt
WOkwSdsO+dbHDguq5HnnW3EUEUQEP/zXCBJBp331Y4jNmxYgDQTgEH9u1EcM81os
KZ+jNR/ZdXaykOPW4y7YbKJhUkkaN96OHCLsp7G4srhIBiE5IYp2XvjgaWEd2S8w
7rosA72iEyMqZcdnLJMeUkwXG1xCanMvv3b1Zt43W4XTxLLA6i7TiG6p2jAoZ6h1
QcAmQOkL5fmuQRVxAsHT0iGKIi/HB5j0
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:42 2024 by rpki-client on console-ams.rpki-client.org