Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/985B73F86B7011EFBCFBD082762E951A.roa
File: 985B73F86B7011EFBCFBD082762E951A.roa (raw, json)
Hash identifier: rvpp6Kns5e/Pwe/rzVTNBx4KVxZUF1C0Dh+LLpfr9DM=
Subject key identifier: 15:EA:A2:25:C4:F6:29:7A:4A:97:F7:FD:1B:4C:79:5D:59:7F:97:17
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 05B1
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/985B73F86B7011EFBCFBD082762E951A.roa
Signing time: Thu 05 Sep 2024 10:21:21 +0000
ROA not before: Thu 05 Sep 2024 10:21:18 +0000
ROA not after: Tue 03 Feb 2026 10:21:18 +0000
asID: 6453
IP address blocks: 102.177.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Sep 5 10:21:18 2024 GMT
Not After : Feb 3 10:21:18 2026 GMT
Subject: CN=66d98621-d2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:a3:29:bb:cb:45:99:ba:00:8f:b2:b4:e8:
a9:51:c7:78:ef:0e:58:bc:67:c9:92:55:04:25:0b:
0a:05:4b:ee:0a:7d:77:4e:5b:99:2c:f4:ff:e7:7a:
28:d4:7b:33:51:a5:66:ab:fe:50:d0:43:09:06:43:
b5:5a:96:81:9d:9c:98:72:97:3f:09:10:f9:81:58:
b2:30:24:30:62:6d:f6:4c:89:30:0f:83:7c:a8:07:
69:ea:03:18:10:a9:da:8e:02:14:13:2a:bd:49:1b:
74:55:cb:37:62:4e:3b:f9:70:48:f0:d2:d3:a1:d1:
7e:81:51:4b:94:e0:9c:56:01:a0:58:8c:c6:ce:60:
61:a3:68:da:4b:6e:3e:38:9e:65:b6:3e:3e:60:33:
53:25:5b:bb:ac:d5:0f:8d:33:2c:d3:d2:71:fa:54:
93:3a:91:0f:18:d9:ad:43:43:a3:7d:d6:1a:47:d1:
2f:f6:9f:31:ae:59:e3:5e:75:53:39:ba:19:22:b3:
f4:53:fe:8f:41:6a:08:0f:a0:07:d0:ab:24:d4:92:
6b:00:72:3d:da:be:f4:4f:c0:3a:32:c7:c7:44:59:
dc:dc:a7:97:07:91:31:be:7f:2a:43:3b:7c:27:e0:
c6:d1:f2:d1:1d:1f:56:43:df:6c:9e:c2:53:4d:16:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:A2:25:C4:F6:29:7A:4A:97:F7:FD:1B:4C:79:5D:59:7F:97:17
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/985B73F86B7011EFBCFBD082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:5d:c3:a6:a9:06:f4:9c:ee:58:22:aa:ed:ae:cd:1a:5e:ff:
66:92:96:08:66:1f:77:dd:8c:fc:dd:53:f3:22:12:62:1e:1f:
15:26:98:04:32:67:0b:29:78:da:31:0d:0b:70:55:09:57:14:
f6:9a:8f:56:e0:1a:03:bd:5d:36:a5:c2:3d:24:4d:a1:6d:18:
8b:d0:5a:8a:a7:80:0b:e7:58:1b:6c:d3:bc:10:a1:70:de:51:
16:99:b7:3f:f4:1c:1a:dd:c8:b1:6c:34:54:0a:c3:2f:48:b7:
90:0f:e5:cb:61:d9:7a:70:fa:e4:ab:12:99:11:ee:08:82:20:
fe:2d:5b:32:86:e1:af:41:ae:2d:01:04:3f:ad:df:a1:3b:12:
0e:1a:5e:ae:45:a9:d9:a5:9d:ab:16:b2:ce:c2:20:48:0f:07:
5e:2a:bf:d3:9e:dd:bb:c1:49:6a:6d:4e:d4:8b:8b:66:09:79:
ce:42:a8:54:f8:ee:23:41:fe:72:0d:c2:55:df:ce:89:72:43:
8f:4b:f7:76:af:85:e8:f5:c1:7c:3a:2d:0d:33:ed:7a:86:de:
d0:ee:3d:69:a0:d3:22:6f:a7:bd:10:d9:8a:7c:33:71:44:d8:
66:78:16:f4:4b:ba:48:3a:73:9a:ac:e6:c8:51:67:96:b4:24:
39:96:98:bc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RGQTRBRjExMC8GA1UEBRMoOTdDOTBFMjUyMTJEODg3Q0Y5RTFERTZGRERGNTUx
QkE4MTJGQTEzOTAeFw0yNDA5MDUxMDIxMThaFw0yNjAyMDMxMDIxMThaMBgxFjAU
BgNVBAMTDTY2ZDk4NjIxLWQyYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ1KMpu8tFmboAj7K06KlRx3jvDli8Z8mSVQQlCwoFS+4KfXdOW5ks9P/n
eijUezNRpWar/lDQQwkGQ7ValoGdnJhylz8JEPmBWLIwJDBibfZMiTAPg3yoB2nq
AxgQqdqOAhQTKr1JG3RVyzdiTjv5cEjw0tOh0X6BUUuU4JxWAaBYjMbOYGGjaNpL
bj44nmW2Pj5gM1MlW7us1Q+NMyzT0nH6VJM6kQ8Y2a1DQ6N91hpH0S/2nzGuWeNe
dVM5uhkis/RT/o9BaggPoAfQqyTUkmsAcj3avvRPwDoyx8dEWdzcp5cHkTG+fypD
O3wn4MbR8tEdH1ZD32yewlNNFn2jAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUFeqi
JcT2KXpKl/f9G0x5XVl/lxcwHwYDVR0jBBgwFoAUl8kOJSEtiHz54d5v3fVRuoEv
oTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4QUVBMjI4L2w4a09K
U0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w4a09KU0V0aUh6NTRkNXYzZlZSdW9Fdm9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjdERkE0LzA4QjhEODIwOTNBQzExRUJCMUQyQTgzMkY4
QUVBMjI4Lzk4NUI3M0Y4NkI3MDExRUZCQ0ZCRDA4Mjc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmsb4wDQYJKoZIhvcNAQEL
BQADggEBAMJdw6apBvSc7lgiqu2uzRpe/2aSlghmH3fdjPzdU/MiEmIeHxUmmAQy
ZwspeNoxDQtwVQlXFPaaj1bgGgO9XTalwj0kTaFtGIvQWoqngAvnWBts07wQoXDe
URaZtz/0HBrdyLFsNFQKwy9It5AP5cth2Xpw+uSrEpkR7giCIP4tWzKG4a9Bri0B
BD+t36E7Eg4aXq5FqdmlnasWss7CIEgPB14qv9Oe3bvBSWptTtSLi2YJec5CqFT4
7iNB/nINwlXfzolyQ49L93avhej1wXw6LQ0z7XqG3tDuPWmg0yJvp70Q2Yp8M3FE
2GZ4FvRLukg6c5qs5shRZ5a0JDmWmLw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org