Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034E2F24736F11EFB22D1671762E951A.roa
File: 034E2F24736F11EFB22D1671762E951A.roa (raw, json)
Hash identifier: kA3jRlazLke3vWsoc0bYNdgo60jfFjRJGwTAyMb7GaE=
Subject key identifier: B2:89:41:C7:EF:F3:EF:07:13:10:7C:CF:05:60:F4:E2:C9:AA:14:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034E2F24736F11EFB22D1671762E951A.roa
Signing time: Sun 15 Sep 2024 14:30:11 +0000
ROA not before: Sun 15 Sep 2024 14:30:07 +0000
ROA not after: Wed 01 Oct 2025 14:30:07 +0000
asID: 22846
IP address blocks: 154.197.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61270 (0xef56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 14:30:07 2024 GMT
Not After : Oct 1 14:30:07 2025 GMT
Subject: CN=66e6ef72-8d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:df:ff:08:f7:57:95:39:9d:19:95:7c:c3:
a0:0b:da:af:1d:04:55:fc:d3:9b:c3:0e:3d:b6:51:
da:ea:e2:f1:ae:93:fd:16:2d:ab:14:4e:80:33:12:
2a:76:f6:e4:92:26:16:99:2f:9c:b0:91:98:97:c9:
a9:a3:17:63:f2:ef:72:63:96:e5:bb:00:42:27:72:
fc:fc:27:af:fc:eb:08:43:aa:cc:78:e0:74:f9:c5:
b9:3c:b7:97:91:5e:f0:bb:46:87:9a:c8:29:41:33:
4f:2f:0a:98:3c:38:fa:5c:1a:d7:70:4b:ae:08:11:
fa:98:a8:2a:12:5e:5a:83:5f:2c:35:8d:5e:0e:d3:
d0:db:24:cc:f4:41:ca:e5:aa:57:51:e2:63:5e:12:
9a:bf:09:1a:13:d9:db:0c:31:ae:12:f3:cf:2c:e2:
79:f4:5c:95:fb:b6:37:8d:31:5f:e9:d8:b6:ff:6f:
3e:1b:a4:ef:d9:35:01:b2:28:9a:c2:df:df:57:0e:
ea:ed:1c:ea:e2:34:75:dc:01:bb:62:5b:fb:8d:cb:
1b:66:99:eb:9d:2d:3b:cd:e2:6d:cf:01:4c:b9:63:
6d:d8:8d:66:8a:9a:fe:d2:9a:5d:71:9b:5f:fa:e2:
25:08:35:2f:e0:2e:5a:1f:15:3e:49:45:f9:b5:56:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:41:C7:EF:F3:EF:07:13:10:7C:CF:05:60:F4:E2:C9:AA:14:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034E2F24736F11EFB22D1671762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.114.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:43:e7:f4:f2:1f:af:97:dd:b8:ca:ba:70:43:5e:69:2e:25:
25:6e:e8:78:cc:63:15:53:2c:92:f2:e9:eb:ab:6a:59:1f:c2:
f8:fb:d8:58:a0:c1:cd:fc:dc:8b:fa:b1:67:5c:62:74:25:6b:
52:36:37:1e:d1:58:fb:e8:03:ff:59:e3:d1:8a:ef:11:8c:f8:
b4:ca:03:26:b1:a7:8c:de:b1:36:b2:9f:03:3a:32:d3:e3:df:
a0:e4:f0:b5:c4:6b:c8:65:84:57:ee:50:98:63:2e:4a:cb:d0:
b0:0f:e3:61:90:28:91:72:9a:17:ea:49:8c:58:97:7c:f0:1c:
f3:f6:03:36:15:79:b0:3a:7f:db:84:a0:b6:68:33:7c:28:cd:
25:98:21:cd:e0:73:93:78:4f:10:87:c8:f5:87:96:e9:1a:43:
e1:10:73:03:07:a1:53:6d:c5:d9:bb:5a:65:31:e8:9d:c1:b5:
62:c3:ac:04:0c:4c:95:d1:98:32:7a:70:7a:94:19:25:58:c9:
91:b6:4e:79:16:cc:e8:4a:4b:f6:59:48:bb:37:20:a4:99:7a:
32:7f:ab:ee:83:2a:ab:7e:99:2d:13:6b:71:03:91:a4:d7:aa:
5f:f1:0e:ac:d9:ee:62:bf:8d:bd:43:7a:29:e1:71:dc:58:13:
b6:b9:01:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO9WMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE1MTQzMDA3WhcNMjUxMDAxMTQzMDA3WjAYMRYw
FAYDVQQDEw02NmU2ZWY3Mi04ZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv2bf/wj3V5U5nRmVfMOgC9qvHQRV/NObww49tlHa6uLxrpP9Fi2rFE6A
MxIqdvbkkiYWmS+csJGYl8mpoxdj8u9yY5bluwBCJ3L8/Cev/OsIQ6rMeOB0+cW5
PLeXkV7wu0aHmsgpQTNPLwqYPDj6XBrXcEuuCBH6mKgqEl5ag18sNY1eDtPQ2yTM
9EHK5apXUeJjXhKavwkaE9nbDDGuEvPPLOJ59FyV+7Y3jTFf6di2/28+G6Tv2TUB
siiawt/fVw7q7Rzq4jR13AG7Ylv7jcsbZpnrnS07zeJtzwFMuWNt2I1mipr+0ppd
cZtf+uIlCDUv4C5aHxU+SUX5tVZuuQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLKJ
Qcfv8+8HExB8zwVg9OLJqhTwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMzRFMkYyNDczNkYxMUVGQjIyRDE2NzE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsVyMA0GCSqGSIb3DQEB
CwUAA4IBAQCKQ+f08h+vl924yrpwQ15pLiUlbuh4zGMVUyyS8unrq2pZH8L4+9hY
oMHN/NyL+rFnXGJ0JWtSNjce0Vj76AP/WePRiu8RjPi0ygMmsaeM3rE2sp8DOjLT
49+g5PC1xGvIZYRX7lCYYy5Ky9CwD+NhkCiRcpoX6kmMWJd88Bzz9gM2FXmwOn/b
hKC2aDN8KM0lmCHN4HOTeE8Qh8j1h5bpGkPhEHMDB6FTbcXZu1plMeidwbViw6wE
DEyV0ZgyenB6lBklWMmRtk55FszoSkv2WUi7NyCkmXoyf6vugyqrfpktE2txA5Gk
16pf8Q6s2e5iv429Q3op4XHcWBO2uQFH
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:33:53 2024 by rpki-client on console-ams.rpki-client.org