Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26CC3668F00B11EE93F75162775412E6.roa
File: 26CC3668F00B11EE93F75162775412E6.roa (raw, json)
Hash identifier: JtbTH30E8oCQzmvEfw53kgL3Jy29wAPz6wLWUJSRKGI=
Subject key identifier: BA:C4:72:92:75:3F:25:9F:A5:38:2B:10:02:B2:C8:5B:85:9C:2C:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A844
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26CC3668F00B11EE93F75162775412E6.roa
Signing time: Mon 01 Apr 2024 09:35:18 +0000
ROA not before: Mon 01 Apr 2024 09:35:15 +0000
ROA not after: Sat 11 May 2024 09:35:15 +0000
asID: 138915
IP address blocks: 154.205.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43076 (0xa844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:35:15 2024 GMT
Not After : May 11 09:35:15 2024 GMT
Subject: CN=660a7fd6-6054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:81:60:f7:69:b1:99:c2:a8:96:a9:95:e5:
89:c1:a3:70:03:64:13:c9:87:be:30:97:66:4c:81:
b6:a1:7d:24:dd:28:bf:7d:a7:a6:6f:3d:c4:61:6c:
b6:5c:48:c6:fb:c2:50:9e:fa:ac:f6:ba:bc:5b:a0:
37:81:10:13:c0:99:d2:37:ed:cf:79:0e:dc:e0:32:
cb:33:11:f4:1a:7a:9f:61:01:f6:6b:5f:43:6f:83:
1c:89:70:97:fa:cb:77:b6:e7:4e:03:cc:e3:20:c4:
6f:80:a7:03:60:97:69:2e:bc:23:a0:13:60:a9:6f:
bd:8b:a2:69:e3:76:c7:44:ab:1f:6b:c2:69:f5:40:
a0:ac:ba:0b:2f:c5:1a:cd:ee:9e:71:0a:d2:ff:20:
83:e2:cb:ba:c7:60:48:77:37:0c:43:7d:a3:ce:d2:
8d:cb:94:75:24:9d:23:a7:98:ef:1c:a1:c9:6b:28:
51:66:28:69:ea:98:c9:cb:73:90:ff:9a:25:8c:b3:
1e:52:68:88:0c:1e:a5:2d:22:af:92:0c:1c:fb:21:
7a:1e:0f:c9:d0:3a:c9:6c:41:af:b9:9c:99:f7:c9:
6a:4c:99:29:9c:c0:e0:90:66:90:d6:3d:d6:16:55:
84:78:26:a4:93:9d:45:81:80:44:4c:46:f2:f6:96:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:72:92:75:3F:25:9F:A5:38:2B:10:02:B2:C8:5B:85:9C:2C:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26CC3668F00B11EE93F75162775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.132.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e9:cb:1b:21:f3:ee:58:78:99:6f:05:f2:15:ea:d5:52:aa:
62:b9:1d:d0:d2:60:b0:46:1c:6e:cf:49:04:03:f1:c7:db:09:
98:99:18:a8:86:19:bd:94:43:da:6a:15:66:0d:8f:ba:91:5d:
06:3c:36:99:13:1e:57:56:e6:8e:98:08:40:aa:f7:da:e1:66:
87:af:26:a8:13:d5:29:ae:8a:bb:97:eb:0c:85:c4:a2:d4:22:
da:40:9c:67:6f:c4:cf:dd:2e:0b:3b:db:ba:1c:88:d3:0e:44:
ff:8e:11:3e:19:50:98:77:08:93:42:fc:6e:48:dc:5d:f4:c0:
06:f3:0e:1c:5b:cd:75:69:5c:17:ef:f9:13:8a:38:49:0a:00:
09:85:93:db:db:1c:b3:38:c0:14:4b:1d:e0:16:d4:44:13:1a:
3f:ce:8a:ce:40:86:35:24:17:c4:e1:2e:de:3f:43:ed:65:52:
dd:a1:60:b5:4f:71:9f:f8:28:d9:6d:c7:1d:1c:ce:ad:29:11:
df:62:35:bf:39:bf:9f:a8:c1:ea:bd:d0:fc:d3:34:64:63:9a:
8c:f9:0d:11:f3:6b:95:ce:73:33:0d:1c:05:91:f2:64:91:dc:
a1:e0:a1:96:40:17:8e:4a:ac:ff:91:49:47:cf:a6:ad:e9:ac:
be:62:d6:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKhEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDkzNTE1WhcNMjQwNTExMDkzNTE1WjAYMRYw
FAYDVQQDEw02NjBhN2ZkNi02MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApJKBYPdpsZnCqJapleWJwaNwA2QTyYe+MJdmTIG2oX0k3Si/faembz3E
YWy2XEjG+8JQnvqs9rq8W6A3gRATwJnSN+3PeQ7c4DLLMxH0GnqfYQH2a19Db4Mc
iXCX+st3tudOA8zjIMRvgKcDYJdpLrwjoBNgqW+9i6Jp43bHRKsfa8Jp9UCgrLoL
L8Uaze6ecQrS/yCD4su6x2BIdzcMQ32jztKNy5R1JJ0jp5jvHKHJayhRZihp6pjJ
y3OQ/5oljLMeUmiIDB6lLSKvkgwc+yF6Hg/J0DrJbEGvuZyZ98lqTJkpnMDgkGaQ
1j3WFlWEeCakk51FgYBETEby9pZkZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLrE
cpJ1PyWfpTgrEAKyyFuFnCzpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNkNDMzY2OEYwMEIxMUVFOTNGNzUxNjI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2EMA0GCSqGSIb3DQEB
CwUAA4IBAQA06csbIfPuWHiZbwXyFerVUqpiuR3Q0mCwRhxuz0kEA/HH2wmYmRio
hhm9lEPaahVmDY+6kV0GPDaZEx5XVuaOmAhAqvfa4WaHryaoE9Uproq7l+sMhcSi
1CLaQJxnb8TP3S4LO9u6HIjTDkT/jhE+GVCYdwiTQvxuSNxd9MAG8w4cW811aVwX
7/kTijhJCgAJhZPb2xyzOMAUSx3gFtREExo/zorOQIY1JBfE4S7eP0PtZVLdoWC1
T3Gf+CjZbccdHM6tKRHfYjW/Ob+fqMHqvdD80zRkY5qM+Q0R82uVznMzDRwFkfJk
kdyh4KGWQBeOSqz/kUlHz6at6ay+Ytbf
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org