Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E540A066321E11EF83B49883762E951A.roa
File: E540A066321E11EF83B49883762E951A.roa (raw, json)
Hash identifier: /C10ldh80SsHZgGuM//YRyQpeCCit+H4WT1J+f7cuHw=
Subject key identifier: AE:74:69:56:03:06:B0:6A:D3:42:59:E5:65:65:0E:EF:A6:3D:4D:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C62A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E540A066321E11EF83B49883762E951A.roa
Signing time: Mon 24 Jun 2024 11:42:55 +0000
ROA not before: Mon 24 Jun 2024 11:42:51 +0000
ROA not after: Mon 23 Dec 2024 11:42:51 +0000
asID: 201411
IP address blocks: 154.84.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50730 (0xc62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 11:42:51 2024 GMT
Not After : Dec 23 11:42:51 2024 GMT
Subject: CN=66795bbf-3e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:7c:63:81:92:ba:77:d3:24:7f:2f:cf:59:
bb:70:62:6e:21:26:8a:05:c7:06:df:5b:2a:b1:34:
bd:de:59:58:9d:c3:26:a2:29:d4:04:87:31:cf:08:
bd:54:63:a5:d0:32:fb:ac:92:3a:07:e1:fb:ea:31:
26:55:c2:7b:e5:35:df:be:09:f7:b5:34:3e:92:9c:
a7:f8:51:90:52:c3:fc:a7:bb:91:84:42:4f:2d:50:
3e:7a:73:80:3e:ce:e1:60:5e:fb:c5:d9:fb:b8:b2:
7e:34:8c:16:f9:11:bd:7b:79:c4:af:97:22:0d:e1:
06:59:83:7e:19:c1:0d:50:a3:96:4e:03:79:81:fc:
f3:23:95:67:5b:a2:be:8d:f8:62:d7:3c:f7:ad:fa:
a4:e5:58:20:30:57:6b:8f:5c:5b:2c:b2:d8:45:f5:
98:46:ae:59:13:9a:c4:63:2f:a7:34:8a:2a:a0:60:
f6:14:5d:4a:4f:ff:b1:f1:9c:f1:7f:99:19:62:0a:
ae:dc:cc:e8:ae:9f:c4:10:f2:3b:05:62:eb:6a:ee:
60:f0:c3:db:35:e9:66:ea:19:b2:7b:16:e7:f2:39:
8a:6b:cc:69:4b:eb:5a:5e:3c:8e:12:43:a5:c8:f8:
0f:dd:c9:1f:9d:38:5b:e9:c0:c0:f1:e0:bf:fe:bf:
98:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:69:56:03:06:B0:6A:D3:42:59:E5:65:65:0E:EF:A6:3D:4D:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E540A066321E11EF83B49883762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.158.0/24
Signature Algorithm: sha256WithRSAEncryption
08:30:a4:ae:40:fa:37:19:02:e0:d5:02:17:35:1c:0d:07:9d:
a1:ed:26:89:34:16:af:0e:e0:b2:da:dc:70:6d:d8:48:ca:c5:
8b:7a:48:a2:a0:95:fb:bc:aa:c8:77:b4:f0:6d:3f:3a:74:fe:
ce:40:c1:30:47:ce:a8:b9:08:a1:c9:50:09:e4:f8:ca:9c:0e:
8b:32:24:5b:d9:fa:33:10:e2:ea:bc:45:3e:55:2e:38:28:68:
a7:52:81:33:0e:37:2d:59:df:40:c4:5f:68:c6:74:94:05:a1:
55:e6:3f:d2:cd:8b:fd:bb:e6:7f:15:44:7d:31:ca:ba:a0:63:
9a:31:5e:d3:54:a1:d8:e5:8e:7f:5d:a6:22:be:8a:12:9c:3c:
ea:95:f3:c4:1f:d4:99:bd:5d:3d:d9:d2:59:b8:03:22:5e:c6:
6a:4d:d6:e3:5e:af:f0:69:3a:1c:bc:84:da:09:44:41:a9:f0:
45:02:0a:f4:df:b6:57:6b:7f:4d:d5:3a:31:cb:2a:49:c0:78:
cc:c7:45:bd:20:a3:0e:bd:0f:fb:cf:0a:87:ae:78:ed:50:c3:
fe:b2:8b:0f:21:41:9a:75:71:ae:df:b6:e7:a7:01:7b:9c:95:
0d:60:24:4a:8c:25:6a:92:f8:59:17:25:8f:19:b9:0d:4f:32:
cf:af:77:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMYqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI0MTE0MjUxWhcNMjQxMjIzMTE0MjUxWjAYMRYw
FAYDVQQDEw02Njc5NWJiZi0zZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzYl8Y4GSunfTJH8vz1m7cGJuISaKBccG31sqsTS93llYncMmoinUBIcx
zwi9VGOl0DL7rJI6B+H76jEmVcJ75TXfvgn3tTQ+kpyn+FGQUsP8p7uRhEJPLVA+
enOAPs7hYF77xdn7uLJ+NIwW+RG9e3nEr5ciDeEGWYN+GcENUKOWTgN5gfzzI5Vn
W6K+jfhi1zz3rfqk5VggMFdrj1xbLLLYRfWYRq5ZE5rEYy+nNIoqoGD2FF1KT/+x
8Zzxf5kZYgqu3Mzorp/EEPI7BWLrau5g8MPbNelm6hmyexbn8jmKa8xpS+taXjyO
EkOlyPgP3ckfnThb6cDA8eC//r+YcwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK50
aVYDBrBq00JZ5WVlDu+mPU2fMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNTQwQTA2NjMyMUUxMUVGODNCNDk4ODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlSeMA0GCSqGSIb3DQEB
CwUAA4IBAQAIMKSuQPo3GQLg1QIXNRwNB52h7SaJNBavDuCy2txwbdhIysWLekii
oJX7vKrId7TwbT86dP7OQMEwR86ouQihyVAJ5PjKnA6LMiRb2fozEOLqvEU+VS44
KGinUoEzDjctWd9AxF9oxnSUBaFV5j/SzYv9u+Z/FUR9Mcq6oGOaMV7TVKHY5Y5/
XaYivooSnDzqlfPEH9SZvV092dJZuAMiXsZqTdbjXq/waTocvITaCURBqfBFAgr0
37ZXa39N1ToxyypJwHjMx0W9IKMOvQ/7zwqHrnjtUMP+sosPIUGadXGu37bnpwF7
nJUNYCRKjCVqkvhZFyWPGbkNTzLPr3ew
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:32 2024 by rpki-client on console-ams.rpki-client.org