Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26B2E4A0A4CF11EF8089936B762E951A.roa
File: 26B2E4A0A4CF11EF8089936B762E951A.roa (raw, json)
Hash identifier: Isc+ND6SelgkEBWwbdCMhf5lwf6l+xh2i/rYUU3w8Do=
Subject key identifier: D6:18:EB:2C:3D:21:D3:42:DD:76:96:F9:83:BA:33:02:34:CA:71:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010EA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26B2E4A0A4CF11EF8089936B762E951A.roa
Signing time: Sun 17 Nov 2024 10:31:49 +0000
ROA not before: Sun 17 Nov 2024 10:31:45 +0000
ROA not after: Mon 25 Nov 2024 10:31:45 +0000
asID: 9009
IP address blocks: 154.85.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69286 (0x10ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:31:45 2024 GMT
Not After : Nov 25 10:31:45 2024 GMT
Subject: CN=6739c614-b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:76:ce:ab:ec:10:a1:08:69:3c:4f:ce:01:
fc:41:b0:55:37:11:f2:3c:fe:3d:af:46:d6:9a:a7:
31:54:84:34:66:07:8b:81:78:66:01:fb:b1:34:0a:
ce:df:29:87:de:fd:f1:e7:3c:f8:55:db:aa:61:be:
29:b5:48:e2:b2:a2:c5:c4:74:48:36:f0:70:01:73:
45:88:ac:8d:d8:99:57:fe:18:ce:4b:22:29:91:e0:
e5:87:07:fa:64:66:f5:42:d5:df:b4:c0:bd:04:ed:
47:83:78:44:ab:0c:d7:f4:59:ee:b8:dd:52:8b:36:
86:08:ad:c3:68:b0:00:80:c8:d8:5a:9e:9f:b9:bf:
2e:14:b9:8b:7e:28:63:9d:d1:37:b3:c3:3f:86:75:
59:13:3f:39:78:86:a5:9a:7b:79:cc:5a:3d:e0:da:
df:44:70:07:56:4a:51:c8:d0:fe:90:c1:f2:85:96:
38:93:63:42:dc:a8:fd:a8:cc:1d:b1:aa:76:be:fe:
1d:8b:01:20:94:a0:03:e3:00:51:f7:49:c7:51:29:
62:a4:54:6a:9c:0a:68:cb:86:bf:4b:0b:85:5c:a9:
f0:81:0c:f8:6b:86:ad:54:c7:11:f1:f9:25:08:9a:
80:1b:2e:ce:2f:75:d4:c8:70:77:e1:81:c6:be:53:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:EB:2C:3D:21:D3:42:DD:76:96:F9:83:BA:33:02:34:CA:71:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26B2E4A0A4CF11EF8089936B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.100.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:e4:34:8a:9c:93:77:bb:9d:4e:28:a5:55:b3:16:b8:b5:4e:
a9:8c:a7:aa:87:aa:44:8f:85:98:2f:ae:dc:f7:6e:7d:a5:82:
8e:6e:32:ef:4a:c0:34:b0:10:ee:6a:c1:76:25:4f:f9:fa:45:
00:c3:86:9a:51:d8:76:83:9d:a1:a4:99:17:79:6f:4b:e0:18:
60:9f:c4:86:01:d7:ad:48:bd:40:f5:31:89:68:ea:e3:08:bc:
92:c1:f3:9d:20:af:bb:01:86:94:d7:8b:87:8a:80:e4:60:dc:
1d:d9:26:0e:d4:0a:ab:6e:66:1b:a5:da:85:cf:b4:c2:f8:9e:
46:53:c8:59:e5:fb:2f:e3:ea:3d:f8:49:30:ae:78:e6:b6:6e:
e7:a7:c1:be:9c:1c:cb:00:88:d1:7e:7a:6f:32:f8:b2:2a:23:
ca:cf:39:49:8a:29:1e:c3:ad:d3:fb:ca:0f:f7:79:b1:02:50:
55:5e:92:1a:3c:d4:07:a2:c7:97:f0:85:68:fb:91:56:3a:ff:
1c:b5:31:1a:44:0e:f5:76:0c:fd:65:c3:97:a9:93:97:af:8e:
8d:7a:b1:2e:39:17:85:d9:e2:d5:34:78:ee:f0:13:ba:79:0b:
94:2d:ba:da:06:66:63:9d:18:31:3a:e0:ae:61:86:9c:fb:a6:
35:3b:93:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ6mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MTAzMTQ1WhcNMjQxMTI1MTAzMTQ1WjAYMRYw
FAYDVQQDEw02NzM5YzYxNC1iMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA52x2zqvsEKEIaTxPzgH8QbBVNxHyPP49r0bWmqcxVIQ0ZgeLgXhmAfux
NArO3ymH3v3x5zz4VduqYb4ptUjisqLFxHRINvBwAXNFiKyN2JlX/hjOSyIpkeDl
hwf6ZGb1QtXftMC9BO1Hg3hEqwzX9FnuuN1SizaGCK3DaLAAgMjYWp6fub8uFLmL
fihjndE3s8M/hnVZEz85eIalmnt5zFo94NrfRHAHVkpRyND+kMHyhZY4k2NC3Kj9
qMwdsap2vv4diwEglKAD4wBR90nHUSlipFRqnApoy4a/SwuFXKnwgQz4a4atVMcR
8fklCJqAGy7OL3XUyHB34YHGvlP3kQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNYY
6yw9IdNC3XaW+YO6MwI0ynG2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNkIyRTRBMEE0Q0YxMUVGODA4OTkzNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlVkMA0GCSqGSIb3DQEB
CwUAA4IBAQDS5DSKnJN3u51OKKVVsxa4tU6pjKeqh6pEj4WYL67c9259pYKObjLv
SsA0sBDuasF2JU/5+kUAw4aaUdh2g52hpJkXeW9L4Bhgn8SGAdetSL1A9TGJaOrj
CLySwfOdIK+7AYaU14uHioDkYNwd2SYO1AqrbmYbpdqFz7TC+J5GU8hZ5fsv4+o9
+Ekwrnjmtm7np8G+nBzLAIjRfnpvMviyKiPKzzlJiikew63T+8oP93mxAlBVXpIa
PNQHoseX8IVo+5FWOv8ctTEaRA71dgz9ZcOXqZOXr46NerEuOReF2eLVNHju8BO6
eQuULbraBmZjnRgxOuCuYYac+6Y1O5OE
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:01 2024 by rpki-client on console-fra.rpki-client.org