Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA888FCC73FC11EF9C3556A7762E951A.roa
File: FA888FCC73FC11EF9C3556A7762E951A.roa (raw, json)
Hash identifier: ShBHUAGEHngfvqdj3s7nBpJDh2Onet6T7d/Ktb+xxLA=
Subject key identifier: 31:48:B7:F9:A1:21:CF:21:21:3B:B4:DF:B4:70:92:DA:A7:D8:55:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA888FCC73FC11EF9C3556A7762E951A.roa
Signing time: Mon 16 Sep 2024 07:26:24 +0000
ROA not before: Mon 16 Sep 2024 07:25:33 +0000
ROA not after: Sat 30 Nov 2024 07:25:33 +0000
asID: 136970
IP address blocks: 154.197.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61307 (0xef7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 16 07:25:33 2024 GMT
Not After : Nov 30 07:25:33 2024 GMT
Subject: CN=66e7dda0-b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:5e:f6:b5:9e:c6:f9:05:bf:33:b1:d4:19:
56:81:a0:d4:5c:dc:6b:3a:27:87:1e:4f:e1:85:8a:
c8:28:5a:06:dd:7e:e8:a8:2d:6b:be:54:f4:92:fc:
97:e7:c7:4d:d8:49:9f:04:79:71:b1:03:5a:39:c1:
cd:2f:6e:f9:b5:3d:60:72:75:28:58:be:81:eb:1d:
35:79:cc:ce:a6:f5:c2:d7:cd:cf:ef:d3:db:d6:a7:
b0:3f:1e:04:19:e1:ce:b3:7d:e1:db:db:a5:48:43:
e5:3e:a9:c3:17:7f:96:dc:4d:d3:4a:85:f8:4a:a4:
cc:68:76:e3:75:b9:6a:8e:ee:59:79:8f:45:7f:36:
4b:89:48:16:df:89:7a:ae:87:28:7d:25:f1:8b:5b:
a6:f9:e5:9e:b1:fc:a2:2a:27:1b:e9:0b:ce:bd:87:
44:b4:86:36:64:93:07:65:26:61:87:c7:33:0a:73:
4a:fb:6c:5b:ad:ad:2d:b9:68:38:e0:08:95:94:4b:
cb:53:38:11:0e:51:90:17:e0:8b:18:28:1e:a8:6c:
97:44:a9:21:3b:fc:78:74:3a:5b:9b:2c:31:cf:60:
83:30:b7:9b:02:75:54:cf:61:80:73:59:62:a4:1d:
21:1e:0d:5d:0a:63:f3:d5:d3:24:9a:15:b1:57:8c:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:48:B7:F9:A1:21:CF:21:21:3B:B4:DF:B4:70:92:DA:A7:D8:55:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA888FCC73FC11EF9C3556A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.4.0/22
Signature Algorithm: sha256WithRSAEncryption
98:6b:e7:9c:7b:dc:11:8d:85:45:8d:5c:07:cc:be:65:c3:d5:
fa:47:fe:e2:f0:43:26:06:99:eb:00:14:fc:78:d5:42:f0:9e:
40:0e:c1:07:0e:63:ec:99:ba:8e:21:81:5d:b5:cf:f8:d3:0a:
8f:7a:cb:41:47:f0:86:33:da:b2:c9:61:71:8d:ce:8c:e1:50:
3e:1f:b3:04:65:68:77:36:3d:1d:41:93:70:ce:05:a1:f9:d2:
a4:1f:45:64:b6:18:15:dd:90:96:23:9f:10:bd:31:8e:e1:6e:
54:8a:60:f2:44:51:e6:b5:ba:1a:7a:fb:d9:41:a0:30:ce:67:
9a:42:35:ca:86:3c:0e:72:50:fd:50:96:75:d0:8f:c4:c6:f9:
1f:f1:b2:d9:3a:d6:f0:c1:09:a5:3e:98:ca:cf:60:dd:04:dc:
93:16:4f:be:9a:05:81:87:14:f5:05:21:e9:e3:44:10:bd:69:
0d:8a:97:32:b8:44:dd:04:dd:e0:48:0a:22:3a:43:8f:65:aa:
31:bf:bc:de:35:41:eb:74:fc:6e:e2:4c:fc:84:9d:ff:f9:e4:
3d:d7:f6:ba:18:29:8c:cf:b9:c0:ce:c0:35:36:fa:b9:2d:34:
7a:97:78:1c:d3:63:35:58:dc:39:51:28:e9:2f:ee:e4:4f:34:
be:1c:70:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO97MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE2MDcyNTMzWhcNMjQxMTMwMDcyNTMzWjAYMRYw
FAYDVQQDEw02NmU3ZGRhMC1iNWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyate9rWexvkFvzOx1BlWgaDUXNxrOieHHk/hhYrIKFoG3X7oqC1rvlT0
kvyX58dN2EmfBHlxsQNaOcHNL275tT1gcnUoWL6B6x01eczOpvXC183P79Pb1qew
Px4EGeHOs33h29ulSEPlPqnDF3+W3E3TSoX4SqTMaHbjdblqju5ZeY9FfzZLiUgW
34l6rocofSXxi1um+eWesfyiKicb6QvOvYdEtIY2ZJMHZSZhh8czCnNK+2xbra0t
uWg44AiVlEvLUzgRDlGQF+CLGCgeqGyXRKkhO/x4dDpbmywxz2CDMLebAnVUz2GA
c1lipB0hHg1dCmPz1dMkmhWxV4wgtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDFI
t/mhIc8hITu037Rwktqn2FUQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQTg4OEZDQzczRkMxMUVGOUMzNTU2QTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsUEMA0GCSqGSIb3DQEB
CwUAA4IBAQCYa+ece9wRjYVFjVwHzL5lw9X6R/7i8EMmBpnrABT8eNVC8J5ADsEH
DmPsmbqOIYFdtc/40wqPestBR/CGM9qyyWFxjc6M4VA+H7MEZWh3Nj0dQZNwzgWh
+dKkH0VkthgV3ZCWI58QvTGO4W5UimDyRFHmtboaevvZQaAwzmeaQjXKhjwOclD9
UJZ10I/Exvkf8bLZOtbwwQmlPpjKz2DdBNyTFk++mgWBhxT1BSHp40QQvWkNipcy
uETdBN3gSAoiOkOPZaoxv7zeNUHrdPxu4kz8hJ3/+eQ91/a6GCmMz7nAzsA1Nvq5
LTR6l3gc02M1WNw5USjpL+7kTzS+HHCO
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:32 2024 by rpki-client on console-fra.rpki-client.org