Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/206F8B1E7B2311EF838338AB762E951A.roa
File: 206F8B1E7B2311EF838338AB762E951A.roa (raw, json)
Hash identifier: tTxaBQWyOF+qgGFlWFBPOkj/R1GtwwnVRb8bMmTxnxU=
Subject key identifier: 70:24:58:F4:11:AA:55:FB:DF:6B:E9:72:59:1D:75:BE:EA:13:B6:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F36A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/206F8B1E7B2311EF838338AB762E951A.roa
Signing time: Wed 25 Sep 2024 09:47:07 +0000
ROA not before: Wed 25 Sep 2024 09:47:03 +0000
ROA not after: Tue 30 Sep 2025 09:47:03 +0000
asID: 211392
IP address blocks: 154.85.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62314 (0xf36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:47:03 2024 GMT
Not After : Sep 30 09:47:03 2025 GMT
Subject: CN=66f3dc1b-4c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:56:df:ff:d3:69:e7:cd:76:ba:a9:45:cb:
54:f8:52:f1:80:ea:c5:70:78:9a:ef:02:52:07:d4:
1a:8f:56:4a:a6:2a:10:23:c3:9c:b0:8d:bc:05:ca:
01:7b:50:38:e3:ea:27:89:47:5c:af:f3:9f:c9:49:
ad:4d:9a:3b:c8:34:37:32:5f:19:d5:36:f1:64:0c:
cc:26:65:66:33:ac:8b:d4:a5:62:9f:79:f3:ae:e1:
84:21:2a:a7:b1:c4:a6:a6:d2:68:4c:32:d0:cb:f7:
3c:13:22:e3:62:2a:3b:29:ed:d0:0b:6e:9c:bb:90:
b9:f5:bc:99:7c:48:8d:66:a6:cd:d3:58:f2:d5:3a:
ab:8a:8f:31:0d:97:ef:2c:13:75:92:45:24:d1:0f:
80:1d:ef:77:8a:8a:98:8c:78:0e:f5:0e:b3:4b:08:
3f:14:6b:fb:34:16:47:07:fd:e2:22:d5:5f:2f:59:
db:5d:24:e5:e0:b4:da:cc:3e:23:b3:1e:66:d5:5f:
73:cc:b4:a1:4b:a7:fe:98:60:6e:80:ad:6f:3e:c3:
dd:94:7c:a1:79:bd:9d:06:df:98:f3:83:61:7c:4d:
49:c4:93:94:e5:a2:0b:39:46:d4:73:35:c4:eb:36:
78:ff:58:0b:f6:53:f4:13:a0:8c:63:d6:b7:fc:53:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:58:F4:11:AA:55:FB:DF:6B:E9:72:59:1D:75:BE:EA:13:B6:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/206F8B1E7B2311EF838338AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.8.0/23
Signature Algorithm: sha256WithRSAEncryption
85:1a:c3:d5:f8:1f:d9:d8:79:85:13:ef:74:4a:2d:96:d8:e4:
f5:ac:f8:ff:ff:ca:16:00:9f:8d:b6:b0:be:33:aa:2e:bf:1b:
9a:59:3e:19:46:db:7b:55:c2:24:dd:e2:5d:31:29:41:07:6f:
85:8f:f3:68:3e:cd:8a:8b:29:cb:d7:63:60:5f:92:8c:19:77:
ad:6b:99:f4:b6:c9:a0:de:0e:91:77:b0:e8:25:6a:b6:4b:b1:
9c:99:33:5a:10:8a:45:b5:6a:b0:6a:ed:cf:9e:c5:47:e6:a3:
64:f2:99:65:9e:ae:59:fa:5a:7b:95:26:27:b6:d7:3a:21:78:
7f:b1:90:38:ec:2b:76:0a:19:03:24:98:de:47:10:4b:77:67:
7a:1c:da:d0:cd:64:9f:13:04:87:b3:13:ac:59:cb:78:cb:fa:
ed:38:9f:0a:dd:06:f8:52:bd:2d:ea:c1:30:bf:3c:90:8f:7c:
7a:1c:e6:cd:ad:17:c2:8f:07:e3:e0:a0:f3:19:ec:c5:fe:01:
eb:4d:21:67:92:55:0e:04:a9:88:65:a8:0f:99:d7:50:09:f8:
0d:49:f5:fb:35:0f:72:1f:59:76:21:14:d8:05:c7:ad:af:bd:
b7:19:0e:6b:f1:af:84:8e:ba:ca:c3:eb:e3:c2:5a:61:99:48:
d5:df:7d:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPNqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTI1MDk0NzAzWhcNMjUwOTMwMDk0NzAzWjAYMRYw
FAYDVQQDEw02NmYzZGMxYi00YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA18dW3//TaefNdrqpRctU+FLxgOrFcHia7wJSB9Qaj1ZKpioQI8OcsI28
BcoBe1A44+oniUdcr/OfyUmtTZo7yDQ3Ml8Z1TbxZAzMJmVmM6yL1KVin3nzruGE
ISqnscSmptJoTDLQy/c8EyLjYio7Ke3QC26cu5C59byZfEiNZqbN01jy1Tqrio8x
DZfvLBN1kkUk0Q+AHe93ioqYjHgO9Q6zSwg/FGv7NBZHB/3iItVfL1nbXSTl4LTa
zD4jsx5m1V9zzLShS6f+mGBugK1vPsPdlHyheb2dBt+Y84NhfE1JxJOU5aILOUbU
czXE6zZ4/1gL9lP0E6CMY9a3/FMDPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHAk
WPQRqlX732vpclkddb7qE7bpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMDZGOEIxRTdCMjMxMUVGODM4MzM4QUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlUIMA0GCSqGSIb3DQEB
CwUAA4IBAQCFGsPV+B/Z2HmFE+90Si2W2OT1rPj//8oWAJ+NtrC+M6ouvxuaWT4Z
Rtt7VcIk3eJdMSlBB2+Fj/NoPs2KiynL12NgX5KMGXeta5n0tsmg3g6Rd7DoJWq2
S7GcmTNaEIpFtWqwau3PnsVH5qNk8pllnq5Z+lp7lSYnttc6IXh/sZA47Ct2ChkD
JJjeRxBLd2d6HNrQzWSfEwSHsxOsWct4y/rtOJ8K3Qb4Ur0t6sEwvzyQj3x6HObN
rRfCjwfj4KDzGezF/gHrTSFnklUOBKmIZagPmddQCfgNSfX7NQ9yH1l2IRTYBcet
r723GQ5r8a+EjrrKw+vjwlphmUjV330m
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:56 2024 by rpki-client on console-ams.rpki-client.org