Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC85CB82A15C11EFA548DA49762E951A.roa
File: EC85CB82A15C11EFA548DA49762E951A.roa (raw, json)
Hash identifier: bSDrrIEKZ+F+CgIv442fiGwndv9deGGqV9j/eqgmuJQ=
Subject key identifier: 75:65:FF:87:C6:44:74:2F:C3:08:2A:BE:B9:F5:B0:BB:99:55:9A:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC85CB82A15C11EFA548DA49762E951A.roa
Signing time: Wed 13 Nov 2024 01:16:35 +0000
ROA not before: Wed 13 Nov 2024 01:16:31 +0000
ROA not after: Sat 12 Jul 2025 01:16:31 +0000
asID: 55967
IP address blocks: 154.85.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68725 (0x10c75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 13 01:16:31 2024 GMT
Not After : Jul 12 01:16:31 2025 GMT
Subject: CN=6733fdf3-0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:d0:5c:27:95:18:4a:be:f1:73:38:01:2b:
75:e1:7f:bb:02:aa:8e:c4:6c:4a:d9:d7:ad:40:b3:
8f:98:36:52:76:ec:7c:cc:e7:36:43:af:dd:82:f8:
91:9b:cf:cb:5c:f8:60:33:10:ab:78:5d:f2:18:87:
1e:16:25:f5:f1:18:33:b1:6a:f0:29:a2:82:8d:63:
d3:5a:39:7f:0c:d4:00:9f:02:5c:fa:5f:20:43:90:
6e:ca:66:29:6e:bc:8c:aa:d0:dc:6b:fe:16:f7:18:
1f:a9:10:66:ed:7c:12:f1:19:d5:87:eb:67:6b:c2:
6f:75:dd:45:15:10:10:db:e3:c3:e4:a2:48:f1:7e:
80:a7:cd:65:ca:0c:0a:e1:fb:ba:ca:32:af:9d:f7:
34:5e:a3:b7:92:2f:da:b0:ed:3b:08:7f:76:ce:b8:
4a:a2:42:97:7c:20:6c:35:c5:41:a2:10:b9:78:73:
5d:f4:03:3f:7e:35:13:b0:f9:5d:f1:73:15:a6:25:
8e:85:e5:b8:0f:73:f6:b2:90:01:a3:1d:da:cf:13:
95:bc:27:e2:2c:ee:c6:44:32:74:99:dc:43:46:6f:
4f:06:23:0b:51:ed:7c:11:24:85:da:73:21:18:86:
15:4d:60:5b:37:74:41:d7:77:d9:bb:6a:33:c0:5c:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:FF:87:C6:44:74:2F:C3:08:2A:BE:B9:F5:B0:BB:99:55:9A:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC85CB82A15C11EFA548DA49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:13:f5:4f:70:ed:00:59:f0:e5:e8:a7:48:31:65:c7:15:84:
be:47:6e:86:fb:d8:22:c7:d7:39:e1:83:57:c9:10:87:88:16:
21:7d:d9:b3:30:90:bc:52:f0:b1:32:4f:a0:6b:7a:8c:c5:6d:
d5:69:17:f2:72:68:cb:48:b9:f9:6b:f1:b3:53:5f:4e:70:73:
0b:4d:78:b4:fd:70:16:1a:dd:a0:08:26:79:82:ce:11:44:27:
9a:bf:28:3d:4d:e2:83:bb:63:94:8b:d9:80:84:7a:b6:8e:38:
60:30:07:ba:67:ef:7f:4a:25:0d:f4:d9:ff:62:68:ca:02:cc:
35:80:12:94:1e:63:f5:e5:e3:b8:63:a4:46:3f:87:46:e9:cc:
d3:02:fc:37:cd:26:0e:4a:53:b4:b3:d9:18:a5:96:34:11:83:
d4:f8:55:01:51:83:68:84:4e:21:c9:27:7e:38:69:0f:39:9c:
cd:ea:c4:8c:29:7c:37:53:27:8e:ad:93:0d:e0:72:c1:1e:31:
ef:71:9e:00:e9:76:64:ae:ab:f9:2d:2f:c8:f4:2d:79:98:51:
7b:9e:d0:b4:14:72:bd:48:62:89:7d:80:44:52:54:7e:17:0f:
3a:b1:d7:27:c1:9d:fa:2d:17:eb:1a:c9:e1:f3:a5:b2:cb:73:
69:61:9c:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQx1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEzMDExNjMxWhcNMjUwNzEyMDExNjMxWjAYMRYw
FAYDVQQDEw02NzMzZmRmMy0wYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApWzQXCeVGEq+8XM4ASt14X+7AqqOxGxK2detQLOPmDZSdux8zOc2Q6/d
gviRm8/LXPhgMxCreF3yGIceFiX18RgzsWrwKaKCjWPTWjl/DNQAnwJc+l8gQ5Bu
ymYpbryMqtDca/4W9xgfqRBm7XwS8RnVh+tna8Jvdd1FFRAQ2+PD5KJI8X6Ap81l
ygwK4fu6yjKvnfc0XqO3ki/asO07CH92zrhKokKXfCBsNcVBohC5eHNd9AM/fjUT
sPld8XMVpiWOheW4D3P2spABox3azxOVvCfiLO7GRDJ0mdxDRm9PBiMLUe18ESSF
2nMhGIYVTWBbN3RB13fZu2ozwFzVAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHVl
/4fGRHQvwwgqvrn1sLuZVZp1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQzg1Q0I4MkExNUMxMUVGQTU0OERBNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlUgMA0GCSqGSIb3DQEB
CwUAA4IBAQA7E/VPcO0AWfDl6KdIMWXHFYS+R26G+9gix9c54YNXyRCHiBYhfdmz
MJC8UvCxMk+ga3qMxW3VaRfycmjLSLn5a/GzU19OcHMLTXi0/XAWGt2gCCZ5gs4R
RCeavyg9TeKDu2OUi9mAhHq2jjhgMAe6Z+9/SiUN9Nn/YmjKAsw1gBKUHmP15eO4
Y6RGP4dG6czTAvw3zSYOSlO0s9kYpZY0EYPU+FUBUYNohE4hySd+OGkPOZzN6sSM
KXw3UyeOrZMN4HLBHjHvcZ4A6XZkrqv5LS/I9C15mFF7ntC0FHK9SGKJfYBEUlR+
Fw86sdcnwZ36LRfrGsnh86Wyy3NpYZyj
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:45 2024 by rpki-client on console-ams.rpki-client.org