Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/272EC57E33A111EFADA57979762E951A.roa
File: 272EC57E33A111EFADA57979762E951A.roa (raw, json)
Hash identifier: 2g7zuz918HFfxu2flne3BtIwg/5GHXqHs8T0Z04nRG0=
Subject key identifier: 11:46:3C:88:30:69:AC:ED:44:4D:01:9B:1A:16:62:84:F2:36:A8:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C768
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/272EC57E33A111EFADA57979762E951A.roa
Signing time: Wed 26 Jun 2024 09:47:51 +0000
ROA not before: Wed 26 Jun 2024 09:47:48 +0000
ROA not after: Mon 30 Dec 2024 09:47:48 +0000
asID: 984
IP address blocks: 154.202.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51048 (0xc768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:47:48 2024 GMT
Not After : Dec 30 09:47:48 2024 GMT
Subject: CN=667be3c7-f00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:9d:6b:35:e5:a9:d0:a6:ab:9e:00:f2:aa:
06:84:d2:4c:55:6f:f2:56:1d:e5:75:8f:81:ee:96:
1f:1d:92:2d:a8:24:71:56:90:6a:08:0d:a2:39:0b:
f5:a3:0f:28:75:29:a7:0f:50:7d:2c:e6:ea:58:33:
4f:35:3c:a3:5d:1b:0d:9c:85:95:4d:0b:1e:e3:75:
9d:fb:99:de:4f:2b:4d:e3:eb:49:e7:6b:3c:47:a6:
c9:c8:85:4f:d6:18:f5:7b:61:49:de:c0:ce:f2:82:
6a:c5:0c:11:44:28:07:3d:d2:38:b1:21:8e:8d:43:
42:58:61:e0:1b:0e:2f:a5:ce:db:4d:2a:26:2c:70:
f2:de:2b:40:51:b9:0c:61:b8:d9:16:26:e1:f5:26:
4c:8f:dd:82:e9:e9:6e:a7:bb:f9:50:f0:4f:48:4f:
02:e1:d8:f8:97:70:9a:b0:ff:6a:a3:60:96:b6:6d:
71:d2:d4:44:45:91:b5:59:f4:34:77:82:59:84:0b:
a6:44:eb:c7:a8:51:57:62:cc:a2:ab:29:9a:c1:88:
70:60:8a:8d:91:92:c7:16:2b:a3:5c:ec:a8:fa:94:
be:37:c0:15:65:af:fd:0b:e1:f1:91:6a:a2:51:f5:
aa:f2:07:bb:90:d6:33:c0:df:6c:f0:92:8b:8c:71:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:3C:88:30:69:AC:ED:44:4D:01:9B:1A:16:62:84:F2:36:A8:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/272EC57E33A111EFADA57979762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.128.0/17
Signature Algorithm: sha256WithRSAEncryption
15:22:5b:7d:34:3e:4e:7e:e0:fe:1e:9d:c4:85:c3:fa:7b:f0:
de:8d:d2:3d:3b:36:b4:d8:f0:e1:5e:66:48:72:fb:f9:e7:6b:
ec:59:a5:8a:7e:57:89:9a:c6:31:a8:10:3b:d9:ee:99:5d:91:
c7:2c:92:f9:06:d1:f7:fc:9c:76:65:78:e1:8f:5d:25:e9:07:
3c:a5:88:03:f1:f8:c0:5c:b2:2e:aa:84:02:52:ba:cf:24:20:
86:ac:73:a9:58:cb:76:06:69:45:33:c8:b7:97:3e:2d:91:67:
5f:df:76:80:ca:f2:a1:44:71:16:78:f5:a1:a7:c9:a3:ee:a8:
35:97:37:8a:20:88:ac:cb:70:59:fd:b4:cb:d8:97:26:f4:50:
47:44:66:7d:e2:20:1d:07:6a:54:3c:9b:fa:e2:df:3f:10:cc:
e1:5d:92:f9:69:7a:75:2c:0a:9e:3c:28:9c:6b:d8:f9:51:08:
8e:32:20:19:a3:92:bc:69:51:03:fd:5b:5c:46:21:ee:6a:73:
6f:03:b9:19:d7:7d:0c:46:45:ea:bf:54:b7:d2:ae:df:b1:fd:
5c:a6:2b:5e:46:8b:1a:7a:9b:03:3b:f3:6d:49:31:49:04:82:
1b:19:ab:f2:45:38:6e:eb:ce:44:71:3d:f2:17:73:f0:c3:f3:
7d:60:79:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMdoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjI2MDk0NzQ4WhcNMjQxMjMwMDk0NzQ4WjAYMRYw
FAYDVQQDEw02NjdiZTNjNy1mMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3y+dazXlqdCmq54A8qoGhNJMVW/yVh3ldY+B7pYfHZItqCRxVpBqCA2i
OQv1ow8odSmnD1B9LObqWDNPNTyjXRsNnIWVTQse43Wd+5neTytN4+tJ52s8R6bJ
yIVP1hj1e2FJ3sDO8oJqxQwRRCgHPdI4sSGOjUNCWGHgGw4vpc7bTSomLHDy3itA
UbkMYbjZFibh9SZMj92C6elup7v5UPBPSE8C4dj4l3CasP9qo2CWtm1x0tRERZG1
WfQ0d4JZhAumROvHqFFXYsyiqymawYhwYIqNkZLHFiujXOyo+pS+N8AVZa/9C+Hx
kWqiUfWq8ge7kNYzwN9s8JKLjHGmcQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBFG
PIgwaaztRE0BmxoWYoTyNqjfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNzJFQzU3RTMzQTExMUVGQURBNTc5Nzk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmsqAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVIlt9ND5OfuD+Hp3EhcP6e/DejdI9Oza02PDhXmZIcvv552vsWaWK
fleJmsYxqBA72e6ZXZHHLJL5BtH3/Jx2ZXjhj10l6Qc8pYgD8fjAXLIuqoQCUrrP
JCCGrHOpWMt2BmlFM8i3lz4tkWdf33aAyvKhRHEWePWhp8mj7qg1lzeKIIisy3BZ
/bTL2Jcm9FBHRGZ94iAdB2pUPJv64t8/EMzhXZL5aXp1LAqePCica9j5UQiOMiAZ
o5K8aVED/VtcRiHuanNvA7kZ130MRkXqv1S30q7fsf1cpiteRosaepsDO/NtSTFJ
BIIbGavyRThu685EcT3yF3Pww/N9YHk5
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org