Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239353FA33A411EF9DBAFC8F762E951A.roa
File: 239353FA33A411EF9DBAFC8F762E951A.roa (raw, json)
Hash identifier: DGaF/bioNLvkgsSRjpyUQ7zpYvB9dSrBwPUx4qDRtKo=
Subject key identifier: 2C:F9:96:1A:33:53:18:30:C8:B0:AB:95:48:43:90:3D:45:AE:4B:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C76C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239353FA33A411EF9DBAFC8F762E951A.roa
Signing time: Wed 26 Jun 2024 10:09:14 +0000
ROA not before: Wed 26 Jun 2024 10:09:10 +0000
ROA not after: Mon 30 Dec 2024 10:09:10 +0000
asID: 984
IP address blocks: 154.194.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51052 (0xc76c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 10:09:10 2024 GMT
Not After : Dec 30 10:09:10 2024 GMT
Subject: CN=667be8ca-a76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:68:d9:26:c6:23:8d:07:21:a4:a7:e6:7d:
68:f9:64:0a:8a:f7:de:d6:0f:88:7b:c8:e0:0e:e7:
1e:69:be:f0:2c:ec:ba:45:91:d5:2a:3f:fa:36:5a:
e9:b2:e9:9c:f9:10:9d:5b:ba:2f:9f:e0:f8:9d:ab:
66:cc:07:b4:ca:91:79:00:5f:7e:16:f7:26:22:59:
d1:0f:e5:fd:52:a4:40:10:02:2e:06:5a:1d:14:b1:
39:9e:06:eb:4b:1c:78:10:0f:11:2a:6c:b8:b9:84:
bc:bf:95:bf:fb:ca:7d:e2:cb:1a:ec:80:6f:8e:7c:
84:a7:3f:23:2b:5d:6f:ea:5c:6f:09:3f:66:bf:19:
28:a7:65:20:14:7a:7e:0a:a6:7e:07:67:8b:76:31:
b8:a8:e8:71:29:29:7c:f0:17:0b:23:a1:f3:14:7a:
27:cc:fe:28:0b:20:93:fd:d9:e0:f1:75:09:00:2f:
ab:8e:77:73:1a:48:cc:62:01:ed:9f:c4:4d:cb:22:
e1:1f:4f:3c:2d:4d:d7:3f:9c:0b:f2:81:c6:a8:85:
7a:a8:cb:ac:35:25:10:93:b9:b5:05:13:fe:aa:bb:
6c:22:4f:cc:03:8a:46:21:91:a7:78:bb:33:e1:a0:
9d:31:32:ec:86:9a:01:b7:2d:0d:84:b7:87:24:72:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:96:1A:33:53:18:30:C8:B0:AB:95:48:43:90:3D:45:AE:4B:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239353FA33A411EF9DBAFC8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:7f:c8:ea:14:fa:d2:21:22:8a:7c:8f:c3:e6:cb:a0:c0:85:
30:72:bb:69:56:5e:26:4f:7b:a5:cf:80:99:4f:d4:c1:b4:1e:
53:8f:fb:eb:32:c2:c2:87:f9:76:ef:a0:4a:29:9f:b7:92:6b:
f6:28:1c:f0:f5:f1:f5:25:4c:28:84:48:95:a0:90:b9:99:25:
9f:f0:2c:63:84:68:ed:ec:63:ee:31:91:28:9d:17:85:89:b3:
13:2b:f5:84:66:91:ce:5a:b1:90:9e:ac:21:2d:fc:d2:27:97:
0b:16:a6:cf:d1:e8:08:68:dd:17:40:30:9b:c5:c1:4d:39:a3:
b3:e9:20:e5:e2:fa:b7:54:c6:9b:22:37:10:9b:2d:60:e3:be:
c1:91:9d:a5:78:2f:c4:a3:80:53:13:8f:4e:68:f4:4d:53:b5:
39:8c:bf:2d:da:b4:dd:c8:b8:c8:a7:ee:93:92:24:ea:1c:fb:
5a:25:43:82:2f:15:32:44:a4:2b:ae:13:21:aa:b0:b8:d5:42:
4d:62:4c:dc:2e:ce:d1:f4:bd:30:a5:32:5d:3f:f3:d2:7a:70:
35:09:e7:b8:ab:05:d8:21:cb:3d:4d:a8:66:c3:64:8a:b8:6a:
47:53:fa:48:0f:bb:0c:4d:f1:f6:86:72:33:a5:89:29:b2:ee:
94:55:e3:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMdsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI2MTAwOTEwWhcNMjQxMjMwMTAwOTEwWjAYMRYw
FAYDVQQDEw02NjdiZThjYS1hNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzkJo2SbGI40HIaSn5n1o+WQKivfe1g+Ie8jgDuceab7wLOy6RZHVKj/6
Nlrpsumc+RCdW7ovn+D4natmzAe0ypF5AF9+FvcmIlnRD+X9UqRAEAIuBlodFLE5
ngbrSxx4EA8RKmy4uYS8v5W/+8p94ssa7IBvjnyEpz8jK11v6lxvCT9mvxkop2Ug
FHp+CqZ+B2eLdjG4qOhxKSl88BcLI6HzFHonzP4oCyCT/dng8XUJAC+rjndzGkjM
YgHtn8RNyyLhH088LU3XP5wL8oHGqIV6qMusNSUQk7m1BRP+qrtsIk/MA4pGIZGn
eLsz4aCdMTLshpoBty0NhLeHJHKeNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCz5
lhozUxgwyLCrlUhDkD1FrkuXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMzkzNTNGQTMzQTQxMUVGOURCQUZDOEY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsLAMA0GCSqGSIb3DQEB
CwUAA4IBAQBef8jqFPrSISKKfI/D5sugwIUwcrtpVl4mT3ulz4CZT9TBtB5Tj/vr
MsLCh/l276BKKZ+3kmv2KBzw9fH1JUwohEiVoJC5mSWf8CxjhGjt7GPuMZEonReF
ibMTK/WEZpHOWrGQnqwhLfzSJ5cLFqbP0egIaN0XQDCbxcFNOaOz6SDl4vq3VMab
IjcQmy1g477BkZ2leC/Eo4BTE49OaPRNU7U5jL8t2rTdyLjIp+6TkiTqHPtaJUOC
LxUyRKQrrhMhqrC41UJNYkzcLs7R9L0wpTJdP/PSenA1Cee4qwXYIcs9Tahmw2SK
uGpHU/pID7sMTfH2hnIzpYkpsu6UVeNK
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org