Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F830A4E6A0E111EF839F0884762E951A.roa
File: F830A4E6A0E111EF839F0884762E951A.roa (raw, json)
Hash identifier: tD6GXBD60Q7kpUvh8jRdyTOIOnmmbqJJTAzr9jEGEbI=
Subject key identifier: 32:84:85:42:6B:BA:52:98:6F:F4:AE:6E:75:1E:31:7C:BF:75:77:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F830A4E6A0E111EF839F0884762E951A.roa
Signing time: Tue 12 Nov 2024 10:36:26 +0000
ROA not before: Tue 12 Nov 2024 10:36:22 +0000
ROA not after: Fri 22 Nov 2024 10:36:22 +0000
asID: 5065
IP address blocks: 154.90.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68680 (0x10c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 10:36:22 2024 GMT
Not After : Nov 22 10:36:22 2024 GMT
Subject: CN=67332faa-0f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:8a:18:84:c0:c9:a2:98:f6:d0:cf:b4:bc:
6f:7d:17:72:6d:41:23:3c:a0:f5:cb:0d:ad:f6:85:
f4:09:4e:20:7e:12:31:4a:ea:1e:4c:29:a7:79:ee:
f2:df:ae:8d:5f:20:42:4b:22:c5:f5:09:d7:56:4b:
dd:b7:5a:6f:b0:3c:92:4b:43:13:13:bc:83:b9:2e:
c8:e2:45:e0:b1:df:e0:22:a0:39:24:f3:1a:6b:20:
58:ab:13:1c:45:e9:10:1e:a6:8c:b7:5c:8c:15:86:
c5:70:a9:29:38:df:f3:b1:61:f4:53:44:78:c6:25:
b4:f0:3f:65:09:ab:25:b4:36:bf:14:39:e3:f8:75:
77:a5:24:93:6c:18:94:20:22:40:f8:59:2d:da:b3:
a6:d2:ee:d1:7f:b9:a9:aa:1f:52:4a:1e:40:9a:ae:
5e:da:6a:bf:37:dc:18:09:af:c7:b0:a7:0e:78:bd:
0e:9c:ae:05:35:ab:56:27:db:a6:0c:b0:60:a4:cd:
0f:57:49:6c:83:55:9b:df:77:a9:37:b0:94:26:b8:
ac:f0:e1:41:e8:16:87:fe:25:36:90:7b:14:89:71:
5b:69:65:fe:8e:53:c1:46:9a:5d:d9:35:44:ea:37:
12:c1:21:a8:06:ff:b3:53:80:c8:f1:8f:da:5c:5d:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:85:42:6B:BA:52:98:6F:F4:AE:6E:75:1E:31:7C:BF:75:77:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F830A4E6A0E111EF839F0884762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ec:fe:64:a1:9a:da:77:6e:a2:79:c8:57:fa:a2:19:68:2a:
e3:a6:59:15:81:59:b8:c2:80:09:95:aa:ce:b3:98:10:97:07:
64:ec:e5:24:8e:36:83:b5:5e:a6:9c:98:19:32:29:2e:f8:70:
cb:ff:ec:3a:50:03:a7:c6:e1:1a:c1:c9:f8:35:94:52:88:b2:
44:45:ad:8f:4a:23:2d:8d:12:0c:1f:cc:3b:82:ee:65:e0:00:
2d:db:72:b7:ef:55:cf:5b:50:d9:7f:2d:a3:38:f5:88:6e:3f:
35:fc:cf:80:4c:12:0b:73:c4:6e:d0:24:06:5e:6f:0f:78:ed:
a5:e0:00:b3:67:c9:79:58:5e:20:61:8e:91:e9:1c:85:3c:01:
87:b7:d2:91:7c:26:12:ce:f7:cf:d1:f2:5e:d3:76:50:e6:be:
1b:65:3e:32:ad:fd:ce:09:68:35:0f:64:fb:8e:b3:a2:25:d1:
9f:a5:d1:df:66:d9:1a:ce:9c:0d:80:d1:66:8e:80:1c:c1:8b:
4c:fc:77:c4:3c:eb:37:dc:3f:55:0e:8e:4e:f1:bd:d9:82:ae:
ba:c2:2c:da:3c:64:12:fc:5c:ea:4c:a4:61:2e:c5:97:46:f0:
1a:d1:a1:3b:84:cf:4d:80:aa:a1:b1:d8:69:e4:fb:f9:28:31:
b2:d4:65:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQxIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEyMTAzNjIyWhcNMjQxMTIyMTAzNjIyWjAYMRYw
FAYDVQQDEw02NzMzMmZhYS0wZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzR2KGITAyaKY9tDPtLxvfRdybUEjPKD1yw2t9oX0CU4gfhIxSuoeTCmn
ee7y366NXyBCSyLF9QnXVkvdt1pvsDySS0MTE7yDuS7I4kXgsd/gIqA5JPMaayBY
qxMcRekQHqaMt1yMFYbFcKkpON/zsWH0U0R4xiW08D9lCasltDa/FDnj+HV3pSST
bBiUICJA+Fkt2rOm0u7Rf7mpqh9SSh5Amq5e2mq/N9wYCa/HsKcOeL0OnK4FNatW
J9umDLBgpM0PV0lsg1Wb33epN7CUJris8OFB6BaH/iU2kHsUiXFbaWX+jlPBRppd
2TVE6jcSwSGoBv+zU4DI8Y/aXF3o8QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDKE
hUJrulKYb/SubnUeMXy/dXcDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GODMwQTRFNkEwRTExMUVGODM5RjA4ODQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmloYMA0GCSqGSIb3DQEB
CwUAA4IBAQA47P5koZrad26iechX+qIZaCrjplkVgVm4woAJlarOs5gQlwdk7OUk
jjaDtV6mnJgZMiku+HDL/+w6UAOnxuEawcn4NZRSiLJERa2PSiMtjRIMH8w7gu5l
4AAt23K371XPW1DZfy2jOPWIbj81/M+ATBILc8Ru0CQGXm8PeO2l4ACzZ8l5WF4g
YY6R6RyFPAGHt9KRfCYSzvfP0fJe03ZQ5r4bZT4yrf3OCWg1D2T7jrOiJdGfpdHf
ZtkazpwNgNFmjoAcwYtM/HfEPOs33D9VDo5O8b3Zgq66wizaPGQS/FzqTKRhLsWX
RvAa0aE7hM9NgKqhsdhp5Pv5KDGy1GWC
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:14 2024 by rpki-client on console-fra.rpki-client.org