Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02E6A3D092B511EF963092AE762E951A.roa
File: 02E6A3D092B511EF963092AE762E951A.roa (raw, json)
Hash identifier: yRGW+9k6XkRxwxKAV/xhx/oGgLBmvDdHp1dzdOG+F6c=
Subject key identifier: 86:2B:BD:5E:6F:56:28:9F:64:CC:FE:20:20:17:13:2B:D1:B3:90:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02E6A3D092B511EF963092AE762E951A.roa
Signing time: Fri 25 Oct 2024 09:39:21 +0000
ROA not before: Fri 25 Oct 2024 09:39:17 +0000
ROA not after: Sun 01 Dec 2024 09:39:17 +0000
asID: 48031
IP address blocks: 154.222.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66032 (0x101f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:39:17 2024 GMT
Not After : Dec 1 09:39:17 2024 GMT
Subject: CN=671b6749-b7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:23:08:d2:59:db:bf:48:b5:e6:b1:d1:b5:
23:8a:4a:d0:5f:c4:1b:9c:d3:98:d6:2a:bd:8e:66:
6b:4b:a2:3d:65:da:60:69:a8:fb:c0:55:07:78:b9:
d9:f5:9d:6f:9c:0b:d4:4a:51:10:51:f0:68:0d:76:
ac:cc:39:f9:aa:3a:d0:51:81:53:77:c8:68:00:3b:
e1:1d:ff:c3:4b:30:6a:b4:b1:d1:7b:d5:07:a2:c7:
d8:e4:e0:5a:7f:26:e8:d5:76:55:23:bc:ea:89:fb:
26:2b:54:91:c4:0e:6b:61:63:ec:c5:8f:e9:dd:e8:
b9:d0:c6:8a:bf:15:48:c1:4e:e4:43:6e:98:7e:7d:
cc:20:46:8f:95:ad:6c:c9:e2:57:72:52:ff:d6:c7:
19:43:e4:8a:f6:53:93:c1:47:a7:4e:ca:35:1e:5b:
de:4b:7c:d9:be:7b:2e:7c:ca:2b:0c:a8:f3:cd:69:
97:52:c1:2e:77:ff:41:0b:44:74:58:c9:51:0b:12:
63:11:27:09:86:ce:a5:6b:3d:cf:6d:ab:be:69:23:
3c:05:ab:6b:a3:d9:23:17:72:cf:4b:e7:7d:7c:a4:
6c:c2:ed:4a:41:8e:3c:e4:e4:e9:30:e9:06:0c:b5:
5d:0a:62:8d:66:cf:e9:8e:6d:32:1e:07:52:00:13:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:BD:5E:6F:56:28:9F:64:CC:FE:20:20:17:13:2B:D1:B3:90:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02E6A3D092B511EF963092AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.222.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:f8:5b:d8:65:4a:19:7a:de:21:5d:c5:92:92:e2:b2:b6:2a:
6b:97:f6:da:4b:92:b1:b3:19:cd:5c:e2:24:e4:b5:c5:90:0e:
c9:fd:20:97:93:c0:90:52:97:1b:7b:ce:5e:b6:84:35:33:90:
8b:01:78:1f:3f:96:ee:5c:3d:c9:ef:eb:ff:09:46:bc:7c:8b:
9d:66:80:a8:ab:08:bd:c2:91:b1:f7:41:f8:c4:bd:c2:c2:21:
fd:51:c9:07:3f:23:7e:c6:49:48:f1:8f:4c:8d:52:c4:a7:3f:
c3:9f:c2:16:6e:a7:68:81:8e:cd:ae:29:7e:b0:93:5b:de:3a:
fc:bd:e1:9f:a8:28:b7:20:cc:7e:1d:e3:a6:53:47:26:04:01:
ee:c3:da:9f:fc:9a:f0:6c:63:3e:e0:c9:d3:a0:aa:91:1f:c6:
4b:a3:02:67:ea:b3:c0:0e:64:6b:da:bd:66:b8:0b:89:23:e7:
08:cd:bf:0b:5e:88:54:be:d6:41:9c:d9:90:65:29:d8:1f:6c:
3a:10:1c:ef:93:ed:af:19:0a:a4:94:a9:7b:7f:cd:a5:33:83:
55:a5:69:c0:2c:6e:b6:53:bb:39:0d:7a:40:66:b4:9e:f6:67:
32:9a:20:f6:12:e0:6e:15:6b:72:91:7c:90:b4:9b:52:da:f4:
fd:0c:c5:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQHwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MDkzOTE3WhcNMjQxMjAxMDkzOTE3WjAYMRYw
FAYDVQQDEw02NzFiNjc0OS1iN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtbcjCNJZ279Iteax0bUjikrQX8QbnNOY1iq9jmZrS6I9Zdpgaaj7wFUH
eLnZ9Z1vnAvUSlEQUfBoDXaszDn5qjrQUYFTd8hoADvhHf/DSzBqtLHRe9UHosfY
5OBafybo1XZVI7zqifsmK1SRxA5rYWPsxY/p3ei50MaKvxVIwU7kQ26Yfn3MIEaP
la1syeJXclL/1scZQ+SK9lOTwUenTso1HlveS3zZvnsufMorDKjzzWmXUsEud/9B
C0R0WMlRCxJjEScJhs6laz3Pbau+aSM8Batro9kjF3LPS+d9fKRswu1KQY485OTp
MOkGDLVdCmKNZs/pjm0yHgdSABOs2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIYr
vV5vViifZMz+ICAXEyvRs5BdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMkU2QTNEMDkyQjUxMUVGOTYzMDkyQUU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt7eMA0GCSqGSIb3DQEB
CwUAA4IBAQC8+FvYZUoZet4hXcWSkuKytiprl/baS5KxsxnNXOIk5LXFkA7J/SCX
k8CQUpcbe85etoQ1M5CLAXgfP5buXD3J7+v/CUa8fIudZoCoqwi9wpGx90H4xL3C
wiH9UckHPyN+xklI8Y9MjVLEpz/Dn8IWbqdogY7Nril+sJNb3jr8veGfqCi3IMx+
HeOmU0cmBAHuw9qf/JrwbGM+4MnToKqRH8ZLowJn6rPADmRr2r1muAuJI+cIzb8L
XohUvtZBnNmQZSnYH2w6EBzvk+2vGQqklKl7f82lM4NVpWnALG62U7s5DXpAZrSe
9mcymiD2EuBuFWtykXyQtJtS2vT9DMUe
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:53 2024 by rpki-client on console-ams.rpki-client.org