Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A232F50539C11EE828E2B534AD9E6FC.roa
File: 0A232F50539C11EE828E2B534AD9E6FC.roa (raw, json)
Hash identifier: Gz9crK3iMvePITPQAXUYN8AjgF7C9qzbRG8RaO1fogk=
Subject key identifier: F9:23:52:EC:06:06:DE:FE:14:1B:28:C3:3B:94:40:3D:C2:EB:50:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A232F50539C11EE828E2B534AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:46:55 +0000
ROA not before: Fri 15 Sep 2023 07:46:51 +0000
ROA not after: Sat 08 Jun 2024 07:46:51 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15719 (0x3d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:46:51 2023 GMT
Not After : Jun 8 07:46:51 2024 GMT
Subject: CN=65040bee-d75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:23:9e:ff:32:79:7f:27:1b:2b:fa:a8:55:
a7:c8:95:e9:56:07:fd:97:c3:f6:7f:15:28:48:21:
31:ae:f7:d5:52:85:81:5a:ec:a6:1f:28:8b:bb:5c:
61:d9:3f:e3:34:d2:36:d0:2e:22:1a:8d:db:0f:c7:
9a:ab:0f:33:c0:16:e5:8b:bb:f0:83:8c:ef:ba:12:
ef:84:bb:d2:25:82:c3:a8:d7:8c:85:61:09:69:a1:
fe:f7:1a:f6:2d:2b:21:0c:0f:2a:ea:2b:a7:4b:12:
c3:de:b3:c2:6e:3b:7f:17:c3:d5:88:9a:56:10:3b:
8b:f9:06:d3:90:23:21:80:1a:52:17:de:d6:1d:df:
f4:bd:22:d3:7f:6b:88:e2:bc:10:d9:a2:22:27:ab:
d1:94:90:97:35:ee:43:51:98:cc:91:dd:71:a9:48:
28:8e:9a:ae:38:85:36:f7:0a:81:44:5c:69:8c:17:
af:03:1c:58:1f:f8:3f:16:73:1d:a5:ba:60:d1:5f:
96:53:a5:22:86:35:fd:f4:37:35:eb:fa:11:c7:46:
45:6c:cf:e8:1a:9e:0e:8f:55:6b:22:86:08:19:a9:
dd:ea:b5:0e:41:89:58:c9:c6:bf:c7:09:da:9f:eb:
da:18:b6:f7:2f:cf:81:aa:35:46:ce:32:85:ce:9a:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:23:52:EC:06:06:DE:FE:14:1B:28:C3:3B:94:40:3D:C2:EB:50:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A232F50539C11EE828E2B534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3a:08:62:1e:57:0e:93:8b:77:ae:07:7b:a1:85:46:3e:ed:
de:55:95:2e:6f:c1:b4:f3:16:12:5b:e7:ce:84:f9:ea:28:3d:
3c:86:7c:8a:58:89:74:d9:3b:ac:22:0b:b4:9f:00:4b:a9:6b:
d8:8f:8a:c4:0c:eb:78:db:f0:4c:8c:ea:30:d8:0a:b5:43:80:
ae:f9:50:a3:28:f9:6d:07:89:26:27:a2:f3:85:1a:ec:9e:56:
4f:86:19:2f:77:ce:c9:67:58:79:d9:64:5b:0f:f2:32:d8:79:
10:8a:01:d0:16:97:db:a5:06:21:fc:ab:d1:b3:a0:ef:fc:b0:
0f:ef:89:a1:96:61:b0:39:da:86:f9:f9:40:e7:a5:0f:d9:5e:
65:3f:c8:34:d1:8f:c8:1f:ab:f5:25:09:bf:36:4b:c5:c7:15:
8b:c8:22:03:65:91:d9:d0:59:f1:c0:ca:5c:d1:cc:3c:de:0a:
eb:a6:af:65:69:af:8e:52:11:7c:bd:1e:12:7f:4b:37:de:f5:
12:c3:be:94:15:9d:86:8c:a4:7e:34:2b:2e:5a:f1:50:b4:88:
04:3b:ae:94:ad:45:12:4e:0f:4b:c3:6d:c8:f8:fa:fe:7a:05:
c5:47:9f:d6:29:70:74:85:49:d3:c5:4a:5b:59:8a:91:3f:3a:
45:52:44:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPWcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MTUwNzQ2NTFaFw0yNDA2MDgwNzQ2NTFaMBgxFjAU
BgNVBAMTDTY1MDQwYmVlLWQ3NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClpiOe/zJ5fycbK/qoVafIlelWB/2Xw/Z/FShIITGu99VShYFa7KYfKIu7
XGHZP+M00jbQLiIajdsPx5qrDzPAFuWLu/CDjO+6Eu+Eu9IlgsOo14yFYQlpof73
GvYtKyEMDyrqK6dLEsPes8JuO38Xw9WImlYQO4v5BtOQIyGAGlIX3tYd3/S9ItN/
a4jivBDZoiInq9GUkJc17kNRmMyR3XGpSCiOmq44hTb3CoFEXGmMF68DHFgf+D8W
cx2lumDRX5ZTpSKGNf30NzXr+hHHRkVsz+gang6PVWsihggZqd3qtQ5BiVjJxr/H
Cdqf69oYtvcvz4GqNUbOMoXOmpzxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU+SNS
7AYG3v4UGyjDO5RAPcLrUJowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzBBMjMyRjUwNTM5QzExRUU4MjhFMkI1MzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXBYwDQYJKoZIhvcNAQEL
BQADggEBADA6CGIeVw6Ti3euB3uhhUY+7d5VlS5vwbTzFhJb586E+eooPTyGfIpY
iXTZO6wiC7SfAEupa9iPisQM63jb8EyM6jDYCrVDgK75UKMo+W0HiSYnovOFGuye
Vk+GGS93zslnWHnZZFsP8jLYeRCKAdAWl9ulBiH8q9GzoO/8sA/viaGWYbA52ob5
+UDnpQ/ZXmU/yDTRj8gfq/UlCb82S8XHFYvIIgNlkdnQWfHAylzRzDzeCuumr2Vp
r45SEXy9HhJ/Szfe9RLDvpQVnYaMpH40Ky5a8VC0iAQ7rpStRRJOD0vDbcj4+v56
BcVHn9YpcHSFSdPFSltZipE/OkVSRPQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org