Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27DB04C09AA711EF8AB69C49762E951A.roa
File: 27DB04C09AA711EF8AB69C49762E951A.roa (raw, json)
Hash identifier: epmSLLlRPs5G+QXb6ySuHNLQtSN+4quif3HKG2wl8Sk=
Subject key identifier: 36:2C:65:87:39:41:79:3F:FC:12:9E:96:E0:62:21:08:F0:1C:E9:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010698
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27DB04C09AA711EF8AB69C49762E951A.roa
Signing time: Mon 04 Nov 2024 12:20:19 +0000
ROA not before: Mon 04 Nov 2024 12:20:15 +0000
ROA not after: Mon 09 Dec 2024 12:20:15 +0000
asID: 141883
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67224 (0x10698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 4 12:20:15 2024 GMT
Not After : Dec 9 12:20:15 2024 GMT
Subject: CN=6728bc03-a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:66:b0:66:a4:18:f2:20:b6:57:72:0f:b3:
b2:61:76:56:2e:64:7d:16:e8:29:a4:6c:6f:5b:a6:
09:71:f3:6f:5c:a0:1e:0a:36:e9:b1:fb:30:3b:27:
40:f2:8e:82:b8:28:3c:3d:c2:68:9c:ff:12:4a:99:
c5:4b:a8:c9:cf:64:ad:f7:1f:55:1e:7c:3d:64:85:
7c:af:82:24:23:2e:6b:f5:5d:e7:0c:75:68:67:d3:
96:26:fc:c0:4a:54:fb:16:d4:fc:35:7d:4a:99:20:
f0:bc:87:fc:22:c7:e6:84:aa:0f:98:77:bd:71:7c:
52:37:b3:86:57:12:14:48:4f:bc:10:8a:57:b8:83:
37:7a:41:6d:6a:e6:18:13:34:76:8d:d9:04:f8:df:
e6:6a:6a:c6:fe:7c:d3:6a:df:8d:50:b9:78:1a:e6:
e9:a2:08:85:4d:4b:1b:9a:e5:fa:ab:0e:52:4f:63:
7d:fc:7a:e1:ef:51:b8:54:c8:61:3f:8a:e7:02:18:
b1:4e:9f:dd:40:18:86:c1:86:39:a7:db:bf:b7:e1:
f9:09:f2:79:7b:17:a8:0f:27:90:f2:78:a0:5f:9b:
b4:c3:98:91:10:16:f6:c7:e1:b5:d1:c7:eb:16:5a:
40:67:64:51:6c:01:81:da:cb:ca:8a:41:82:5b:29:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:65:87:39:41:79:3F:FC:12:9E:96:E0:62:21:08:F0:1C:E9:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27DB04C09AA711EF8AB69C49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
63:52:38:88:a6:12:f2:44:2b:67:32:07:34:4c:c3:15:da:db:
03:ca:d7:fd:55:50:c9:f7:3e:6b:b5:b9:b9:3f:59:b3:64:55:
10:f7:d9:f9:8d:a8:96:78:d7:22:33:f2:3b:fc:b7:39:f1:6e:
3f:66:c8:ca:cd:8d:d6:01:8b:8d:78:9e:cc:4c:67:5e:50:ad:
df:b5:08:1a:4d:76:6c:72:fb:18:06:6a:77:c1:92:7b:92:81:
71:ea:92:23:e3:86:23:a0:c8:4e:68:ca:4e:31:ac:23:65:c4:
ea:59:dc:01:86:a8:a3:28:60:ff:9f:b3:d7:41:81:f9:21:40:
27:0c:96:fb:1a:c7:89:3e:cb:6f:26:ba:cd:8c:cd:d3:63:eb:
1c:d5:28:75:b0:36:f2:f9:80:61:d9:b4:0f:28:38:f0:ba:5b:
bb:75:60:1a:36:5e:84:1a:2f:8a:23:b9:d2:36:e3:f7:e3:0f:
93:ba:48:c8:2b:1d:a9:a9:fb:ce:fd:8a:62:7c:9e:b5:ad:d7:
96:6c:22:92:37:2f:22:78:58:21:d1:57:06:f1:a2:7a:88:b7:
7a:40:70:5a:2b:b7:35:15:a5:8c:0a:75:e4:07:12:84:ad:ab:
91:0a:01:6e:64:0d:55:bc:17:07:da:f4:49:8a:e3:17:45:2a:
34:f6:bb:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQaYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA0MTIyMDE1WhcNMjQxMjA5MTIyMDE1WjAYMRYw
FAYDVQQDEw02NzI4YmMwMy1hNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw7RmsGakGPIgtldyD7OyYXZWLmR9FugppGxvW6YJcfNvXKAeCjbpsfsw
OydA8o6CuCg8PcJonP8SSpnFS6jJz2St9x9VHnw9ZIV8r4IkIy5r9V3nDHVoZ9OW
JvzASlT7FtT8NX1KmSDwvIf8IsfmhKoPmHe9cXxSN7OGVxIUSE+8EIpXuIM3ekFt
auYYEzR2jdkE+N/mamrG/nzTat+NULl4GubpogiFTUsbmuX6qw5ST2N9/Hrh71G4
VMhhP4rnAhixTp/dQBiGwYY5p9u/t+H5CfJ5exeoDyeQ8nigX5u0w5iREBb2x+G1
0cfrFlpAZ2RRbAGB2svKikGCWykcdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDYs
ZYc5QXk//BKeluBiIQjwHOnPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yN0RCMDRDMDlBQTcxMUVGOEFCNjlDNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmlvgMA0GCSqGSIb3DQEB
CwUAA4IBAQBjUjiIphLyRCtnMgc0TMMV2tsDytf9VVDJ9z5rtbm5P1mzZFUQ99n5
jaiWeNciM/I7/Lc58W4/ZsjKzY3WAYuNeJ7MTGdeUK3ftQgaTXZscvsYBmp3wZJ7
koFx6pIj44YjoMhOaMpOMawjZcTqWdwBhqijKGD/n7PXQYH5IUAnDJb7GseJPstv
JrrNjM3TY+sc1Sh1sDby+YBh2bQPKDjwulu7dWAaNl6EGi+KI7nSNuP34w+TukjI
Kx2pqfvO/YpifJ61rdeWbCKSNy8ieFgh0VcG8aJ6iLd6QHBaK7c1FaWMCnXkBxKE
rauRCgFuZA1VvBcH2vRJiuMXRSo09rt/
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:57 2024 by rpki-client on console-ams.rpki-client.org