Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/C0DBCA12772411EE97845E254AD9E6FC.roa
File: C0DBCA12772411EE97845E254AD9E6FC.roa (raw, json)
Hash identifier: PmQWIFasSyO/g5ux8YMAAh1QfRCd83q16lWkH5Ucw5Q=
Subject key identifier: B8:30:E5:E0:D2:AA:04:52:68:F2:20:BE:1E:C3:13:FC:50:7E:A2:90
Certificate issuer: /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial: FD
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Authority info access: rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/C0DBCA12772411EE97845E254AD9E6FC.roa
Signing time: Mon 30 Oct 2023 13:03:43 +0000
ROA not before: Mon 30 Oct 2023 13:03:40 +0000
ROA not after: Thu 30 Oct 2025 13:03:40 +0000
asID: 15964
IP address blocks: 195.24.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Validity
Not Before: Oct 30 13:03:40 2023 GMT
Not After : Oct 30 13:03:40 2025 GMT
Subject: CN=653fa9af-088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:b7:8c:51:54:6c:d9:41:b7:f2:2d:88:22:
c3:95:fe:05:e6:00:71:48:87:3c:89:7e:9c:f6:03:
38:5f:6f:5b:cf:31:ba:6e:65:85:c6:48:af:56:77:
cb:eb:a8:40:b4:48:15:56:59:a7:f0:26:3e:c2:13:
ba:1d:13:33:31:e7:ac:db:0e:69:20:62:a2:d0:ca:
ad:d2:db:29:dd:01:89:b9:31:98:62:f9:4f:f9:17:
06:a8:2d:05:48:07:80:de:03:5a:6f:46:69:fa:f6:
7c:81:9b:e7:c1:68:b5:64:56:47:b8:42:e0:d8:03:
b6:bb:75:22:07:ad:ff:2e:31:0d:c3:8e:c8:c3:97:
f2:69:08:f9:ea:6d:d5:39:8c:62:cc:e4:a8:c5:ba:
9e:75:27:03:96:13:e8:fc:78:77:69:d9:f9:f8:fd:
52:a8:27:97:f6:b2:6f:69:54:0d:b9:eb:11:1f:17:
00:1a:b9:a0:ea:51:b2:d5:cc:1a:34:c5:cf:15:4e:
2d:d3:4a:b1:65:f6:a3:0f:97:07:ba:4f:2f:93:3e:
ff:89:04:50:e0:48:8d:a0:3c:3f:9a:bd:c6:78:d5:
cd:04:88:70:bf:e7:d6:07:12:07:16:d9:ab:df:43:
7d:75:70:87:40:38:20:29:38:61:b2:0f:2b:dd:3d:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:E5:E0:D2:AA:04:52:68:F2:20:BE:1E:C3:13:FC:50:7E:A2:90
X509v3 Authority Key Identifier:
keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/C0DBCA12772411EE97845E254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.24.195.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7c:a5:48:a2:fb:04:65:9e:99:2a:e7:5f:67:7b:65:88:bf:
c7:f4:81:57:e9:a6:70:f9:96:a3:1e:7b:7e:b4:e7:13:c9:ac:
c1:14:77:61:6c:a1:aa:b8:f0:e6:66:06:f5:42:25:f5:be:9a:
7c:66:e6:bf:1e:d7:8f:84:ac:c3:4e:d4:95:5e:c0:44:c4:66:
e6:5e:ab:58:f8:09:50:79:4d:6c:a0:ca:27:cb:2d:7d:67:fd:
1a:3f:e4:62:b7:fe:76:38:72:2e:18:38:62:0f:35:a0:fa:74:
c2:d2:3c:c5:f3:4d:3e:c1:d1:0a:bc:3e:dd:3d:f8:54:df:79:
c3:34:91:5b:66:8b:cd:8b:18:44:e9:62:d4:f7:9b:a1:01:82:
6c:b3:d0:19:7b:12:d5:21:b8:1e:b7:2c:8b:fa:42:de:c3:7f:
b3:4e:62:8b:2e:b2:46:c9:f2:6a:35:e4:b6:fd:bd:bd:b6:a8:
91:60:3b:14:03:fe:fd:79:37:21:e7:54:64:d5:e4:29:0f:a9:
77:0c:5e:20:4a:bc:2b:e1:0d:de:b2:19:33:96:c1:c8:23:35:
19:c0:9c:ac:7a:16:3a:c6:67:20:a2:3a:4f:07:d5:3f:ba:c3:
40:4a:72:ce:09:7d:b6:80:fc:f5:f3:63:96:bc:fe:2d:1b:e4:
b0:42:b8:d1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OTU5MUNSSTExMC8GA1UEBRMoRENGRUEzODQ3NzIyRDJGRUM3QTAzOUU5OTAzOEY3
NTM4MjU5RDAzMTAeFw0yMzEwMzAxMzAzNDBaFw0yNTEwMzAxMzAzNDBaMBgxFjAU
BgNVBAMTDTY1M2ZhOWFmLTA4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1BLeMUVRs2UG38i2IIsOV/gXmAHFIhzyJfpz2Azhfb1vPMbpuZYXGSK9W
d8vrqEC0SBVWWafwJj7CE7odEzMx56zbDmkgYqLQyq3S2yndAYm5MZhi+U/5Fwao
LQVIB4DeA1pvRmn69nyBm+fBaLVkVke4QuDYA7a7dSIHrf8uMQ3DjsjDl/JpCPnq
bdU5jGLM5KjFup51JwOWE+j8eHdp2fn4/VKoJ5f2sm9pVA256xEfFwAauaDqUbLV
zBo0xc8VTi3TSrFl9qMPlwe6Ty+TPv+JBFDgSI2gPD+avcZ41c0EiHC/59YHEgcW
2avfQ311cIdAOCApOGGyDyvdPUwHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUuDDl
4NKqBFJo8iC+HsMT/FB+opAwHwYDVR0jBBgwFoAU3P6jhHci0v7HoDnpkDj3U4JZ
0DEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIyNDY4LzNQNmpo
SGNpMHY3SG9EbnBrRGozVTRKWjBERS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzNQNmpoSGNpMHY3SG9EbnBrRGozVTRKWjBERS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjk1OTFDLzY3MjM1N0Q0QzI0NzExRUQ5NTk3OTBBMEYxMjIy
NDY4L0MwREJDQTEyNzcyNDExRUU5Nzg0NUUyNTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDGMMwDQYJKoZIhvcNAQELBQAD
ggEBADB8pUii+wRlnpkq519ne2WIv8f0gVfppnD5lqMee3605xPJrMEUd2Fsoaq4
8OZmBvVCJfW+mnxm5r8e14+ErMNO1JVewETEZuZeq1j4CVB5TWygyifLLX1n/Ro/
5GK3/nY4ci4YOGIPNaD6dMLSPMXzTT7B0Qq8Pt09+FTfecM0kVtmi82LGETpYtT3
m6EBgmyz0Bl7EtUhuB63LIv6Qt7Df7NOYosuskbJ8mo15Lb9vb22qJFgOxQD/v15
NyHnVGTV5CkPqXcMXiBKvCvhDd6yGTOWwcgjNRnAnKx6FjrGZyCiOk8H1T+6w0BK
cs4JfbaA/PXzY5a8/i0b5LBCuNE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:14 2024 by rpki-client on console-ams.rpki-client.org