Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1CB0CE638911EFB8E9575B762E951A.roa
File: EA1CB0CE638911EFB8E9575B762E951A.roa (raw, json)
Hash identifier: NmfAaUCL7UAZhQEw4Q6qSixo/wU2VTrvfC2ebBxxXAs=
Subject key identifier: C3:38:29:E6:02:3D:C7:98:21:D9:36:94:AC:D4:03:2F:A5:12:1E:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E4FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1CB0CE638911EFB8E9575B762E951A.roa
Signing time: Mon 26 Aug 2024 09:02:26 +0000
ROA not before: Mon 26 Aug 2024 09:02:23 +0000
ROA not after: Sat 06 Sep 2025 09:02:23 +0000
asID: 131618
IP address blocks: 154.222.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58622 (0xe4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 09:02:23 2024 GMT
Not After : Sep 6 09:02:23 2025 GMT
Subject: CN=66cc44a2-116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:37:d8:6a:ae:cf:20:95:35:d3:d1:35:fa:
24:c3:44:b6:a6:30:50:61:5c:67:cd:62:81:92:26:
83:65:5c:62:c1:2d:a0:be:fb:06:9d:f9:a6:5f:92:
eb:c7:2c:f1:66:52:db:1e:e2:58:17:a3:c3:b6:21:
96:a9:6d:da:26:8f:5b:a3:53:51:98:8d:a9:14:3a:
ae:e1:e7:a3:2d:13:c3:64:40:e3:b6:de:7f:bd:90:
0e:24:e3:ba:a4:e2:1b:3d:b8:c6:51:07:07:f5:c2:
94:58:13:76:26:d9:b3:91:5f:a4:8c:b9:b9:02:4b:
7b:66:5c:ab:3e:d0:20:9a:11:eb:06:80:db:41:46:
97:da:57:eb:06:a9:21:d4:41:18:2c:cb:68:dc:f2:
e2:33:61:12:3e:b1:e6:36:b7:7c:75:2b:8a:cd:e8:
ac:1c:da:09:65:3d:1d:14:04:5e:49:92:65:49:90:
74:61:19:b1:0f:5a:e4:47:8e:12:c4:8f:af:8d:8b:
8d:bd:33:6b:91:80:aa:10:19:26:27:c1:aa:1f:8d:
8f:c7:c2:d6:98:aa:eb:4f:54:63:09:3f:5a:9c:77:
99:0d:68:fb:e9:f2:06:c2:11:d3:0d:94:11:58:b2:
15:ab:45:4c:e0:bc:c5:5f:aa:ea:37:01:09:87:c2:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:38:29:E6:02:3D:C7:98:21:D9:36:94:AC:D4:03:2F:A5:12:1E:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1CB0CE638911EFB8E9575B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:52:2a:c1:68:29:be:83:21:1b:5e:4b:45:78:42:36:b5:dc:
58:20:81:25:20:9e:49:b8:6c:3d:ff:64:4f:67:da:d2:68:4a:
83:8f:3d:2c:c6:9e:6a:f5:ff:bf:b0:d3:0e:78:9f:9e:6f:b0:
fc:96:84:f9:64:fd:50:68:20:8c:26:3e:3f:74:a7:da:c5:9f:
91:79:d2:25:2a:d5:ee:e7:88:bb:46:96:ce:8d:47:4e:f9:e0:
94:53:ad:2f:9d:d9:d5:23:8f:56:18:32:a9:c1:bc:84:ad:78:
2b:74:67:55:32:5f:b0:bc:0b:6d:e9:d7:dc:3c:e0:3e:24:a4:
55:21:48:f0:32:f2:7f:14:8d:29:3e:ba:71:4e:b2:d6:75:81:
ed:f1:54:07:c6:ed:e6:94:59:50:57:f8:a5:11:2f:81:f1:15:
28:ee:77:8a:a7:65:dc:0b:68:19:7d:f2:1c:7a:7a:fc:0b:cf:
fb:dd:dd:a3:cc:5a:c3:46:d9:95:a6:f1:1c:e0:4f:86:72:f5:
b7:ba:e9:92:b8:05:f0:ee:82:6e:41:7a:45:e2:af:5b:bd:25:
3a:20:64:63:14:28:00:80:73:6f:c7:5d:ad:9b:d9:cd:46:6e:
3a:ec:7e:88:08:79:f8:32:08:a0:9c:9a:6b:98:9b:be:ca:11:
ea:05:2b:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOT+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwODI2MDkwMjIzWhcNMjUwOTA2MDkwMjIzWjAYMRYw
FAYDVQQDEw02NmNjNDRhMi0xMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyzQ32GquzyCVNdPRNfokw0S2pjBQYVxnzWKBkiaDZVxiwS2gvvsGnfmm
X5LrxyzxZlLbHuJYF6PDtiGWqW3aJo9bo1NRmI2pFDqu4eejLRPDZEDjtt5/vZAO
JOO6pOIbPbjGUQcH9cKUWBN2JtmzkV+kjLm5Akt7ZlyrPtAgmhHrBoDbQUaX2lfr
Bqkh1EEYLMto3PLiM2ESPrHmNrd8dSuKzeisHNoJZT0dFAReSZJlSZB0YRmxD1rk
R44SxI+vjYuNvTNrkYCqEBkmJ8GqH42Px8LWmKrrT1RjCT9anHeZDWj76fIGwhHT
DZQRWLIVq0VM4LzFX6rqNwEJh8IkeQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMM4
KeYCPceYIdk2lKzUAy+lEh4EMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQTFDQjBDRTYzODkxMUVGQjhFOTU3NUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4AMA0GCSqGSIb3DQEB
CwUAA4IBAQDLUirBaCm+gyEbXktFeEI2tdxYIIElIJ5JuGw9/2RPZ9rSaEqDjz0s
xp5q9f+/sNMOeJ+eb7D8loT5ZP1QaCCMJj4/dKfaxZ+RedIlKtXu54i7RpbOjUdO
+eCUU60vndnVI49WGDKpwbyErXgrdGdVMl+wvAtt6dfcPOA+JKRVIUjwMvJ/FI0p
PrpxTrLWdYHt8VQHxu3mlFlQV/ilES+B8RUo7neKp2XcC2gZffIcenr8C8/73d2j
zFrDRtmVpvEc4E+GcvW3uumSuAXw7oJuQXpF4q9bvSU6IGRjFCgAgHNvx12tm9nN
Rm467H6ICHn4MgignJprmJu+yhHqBSvG
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:33 2024 by rpki-client on console-ams.rpki-client.org