Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6561B58A0DA11EF99BEA459762E951A.roa
File: F6561B58A0DA11EF99BEA459762E951A.roa (raw, json)
Hash identifier: rnOHNWzkphrhgnN0hFxXMg+wldyMs3qnpdPQp0jlkp8=
Subject key identifier: 52:A8:19:85:91:6F:4A:36:68:68:85:10:00:9A:7D:71:C4:E6:21:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6561B58A0DA11EF99BEA459762E951A.roa
Signing time: Tue 12 Nov 2024 09:46:17 +0000
ROA not before: Tue 12 Nov 2024 09:46:13 +0000
ROA not after: Sat 07 Dec 2024 09:46:13 +0000
asID: 63139
IP address blocks: 154.223.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68652 (0x10c2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:46:13 2024 GMT
Not After : Dec 7 09:46:13 2024 GMT
Subject: CN=673323e9-93ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:1c:88:f9:77:dd:69:fd:27:09:6d:48:74:
4f:52:d9:a4:5e:6a:09:ea:b5:3d:72:77:c5:26:8d:
be:e7:35:a6:6d:1b:e0:23:5e:4a:83:32:8a:e1:5f:
25:82:93:03:e2:49:1e:57:62:1d:55:3d:de:6f:af:
b2:4e:9b:46:98:65:84:ac:8c:ac:c3:aa:e6:d2:96:
7d:d8:c9:3c:ef:fa:07:dd:79:6d:dc:6c:c4:87:9d:
59:74:58:10:bc:3f:4c:16:e9:24:94:e2:86:a0:ea:
59:f2:6e:c1:4a:de:dd:63:fe:7f:59:65:51:65:7a:
cf:86:42:dc:ac:bc:54:18:2c:61:bb:02:a2:17:8e:
84:f1:71:9e:25:6b:3f:42:ef:15:36:a4:b4:f9:55:
83:2f:f3:8a:3e:c6:ab:29:df:6c:e4:86:13:1c:97:
44:f2:12:2d:51:8a:af:79:e1:60:5d:f5:80:9e:04:
22:30:22:b9:b8:4a:b9:63:7b:ef:c3:63:78:bd:c3:
48:ba:4d:f6:4b:9c:a3:eb:c0:d3:c4:77:f8:40:2d:
44:5e:97:c7:c6:41:6b:c1:09:5f:bb:bd:32:9e:cb:
85:68:56:1d:b9:ce:94:5f:e1:c9:60:e0:68:a8:ab:
e4:5c:42:61:a0:5a:e1:cb:0d:ab:b6:23:94:cf:93:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:19:85:91:6F:4A:36:68:68:85:10:00:9A:7D:71:C4:E6:21:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6561B58A0DA11EF99BEA459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:7e:bc:95:81:49:7e:2b:b8:9d:2c:1d:65:1a:aa:b2:4b:2c:
bf:a1:e7:81:c7:cf:53:07:73:4a:14:cf:05:d0:52:4e:e3:65:
2a:9c:ef:9b:bc:13:a7:7f:26:ba:82:fe:e8:b9:e8:9d:90:fd:
69:13:b3:43:b3:ff:18:fc:70:0f:eb:1c:f2:b4:8d:37:42:e3:
8f:87:4c:2a:87:ec:df:c0:89:68:23:34:4d:46:bb:dc:09:a5:
53:3a:14:cd:a0:ae:03:7a:3e:9b:26:cb:54:22:f3:d2:18:ed:
53:0f:b4:de:5e:43:db:e4:e4:c2:10:87:5e:c2:42:1b:de:82:
82:db:a3:f6:e5:ff:39:bc:8b:8f:a2:88:05:5b:de:15:65:5e:
32:c4:99:45:ee:c2:3c:3b:50:3f:bf:59:e1:84:b9:dc:cf:44:
54:c8:91:88:40:63:99:06:a5:50:de:5a:f0:20:a9:b7:5e:04:
cf:3a:5a:52:f5:be:bd:a8:97:4a:85:c7:b1:7f:2d:4d:b7:9b:
72:21:b3:ba:18:51:d0:96:f4:bb:af:6e:08:58:1a:6a:4d:91:
68:34:26:f2:36:46:24:ab:95:0f:95:6d:8e:43:1b:69:7e:c9:
48:75:1d:a2:9b:49:47:6c:90:a0:16:81:d4:36:90:19:f3:d7:
8c:51:12:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQwsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEyMDk0NjEzWhcNMjQxMjA3MDk0NjEzWjAYMRYw
FAYDVQQDEw02NzMzMjNlOS05M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAIciPl33Wn9JwltSHRPUtmkXmoJ6rU9cnfFJo2+5zWmbRvgI15KgzKK
4V8lgpMD4kkeV2IdVT3eb6+yTptGmGWErIysw6rm0pZ92Mk87/oH3Xlt3GzEh51Z
dFgQvD9MFukklOKGoOpZ8m7BSt7dY/5/WWVRZXrPhkLcrLxUGCxhuwKiF46E8XGe
JWs/Qu8VNqS0+VWDL/OKPsarKd9s5IYTHJdE8hItUYqveeFgXfWAngQiMCK5uEq5
Y3vvw2N4vcNIuk32S5yj68DTxHf4QC1EXpfHxkFrwQlfu70ynsuFaFYduc6UX+HJ
YOBoqKvkXEJhoFrhyw2rtiOUz5NFCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFKo
GYWRb0o2aGiFEACafXHE5iFjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GNjU2MUI1OEEwREExMUVGOTlCRUE0NTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8kMA0GCSqGSIb3DQEB
CwUAA4IBAQCtfryVgUl+K7idLB1lGqqySyy/oeeBx89TB3NKFM8F0FJO42UqnO+b
vBOnfya6gv7oueidkP1pE7NDs/8Y/HAP6xzytI03QuOPh0wqh+zfwIloIzRNRrvc
CaVTOhTNoK4Dej6bJstUIvPSGO1TD7TeXkPb5OTCEIdewkIb3oKC26P25f85vIuP
oogFW94VZV4yxJlF7sI8O1A/v1nhhLncz0RUyJGIQGOZBqVQ3lrwIKm3XgTPOlpS
9b69qJdKhcexfy1Nt5tyIbO6GFHQlvS7r24IWBpqTZFoNCbyNkYkq5UPlW2OQxtp
fslIdR2im0lHbJCgFoHUNpAZ89eMURK1
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org