Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292DF0A4A45111EFAAF41A4A762E951A.roa
File: 292DF0A4A45111EFAAF41A4A762E951A.roa (raw, json)
Hash identifier: 46ZemqwSlcM/wDNX6r42zvS3Xw9fdV6tjfNkIkbL+No=
Subject key identifier: 04:5F:CC:A7:8C:C8:F5:AA:8F:F0:FA:73:D7:B7:74:93:E6:3F:47:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292DF0A4A45111EFAAF41A4A762E951A.roa
Signing time: Sat 16 Nov 2024 19:29:56 +0000
ROA not before: Sat 16 Nov 2024 19:29:49 +0000
ROA not after: Mon 25 Nov 2024 19:29:49 +0000
asID: 9009
IP address blocks: 154.92.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 19:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69153 (0x10e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:29:49 2024 GMT
Not After : Nov 25 19:29:49 2024 GMT
Subject: CN=6738f2b4-a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:36:42:be:08:d4:a1:c1:5c:cc:f1:1a:c0:
e7:b2:7f:eb:ac:3e:4d:05:af:67:6d:fc:e8:5f:4e:
fb:5a:b1:3f:b3:4e:15:67:f8:ee:51:7e:c1:1d:42:
fc:7a:43:a9:84:9e:fb:f5:b3:f7:c3:ae:2b:b1:ff:
9e:b1:71:1d:52:d4:60:bc:ae:84:06:79:0d:aa:96:
32:6b:43:12:51:57:87:c6:1d:da:1d:93:3a:52:96:
cf:60:0c:ed:12:4a:dd:1c:10:bd:cb:7a:5a:90:0a:
b0:dd:a8:63:dc:73:4a:93:36:c5:02:ff:9b:77:90:
66:a1:71:11:31:c0:a0:0e:f1:18:0d:a6:6a:d2:35:
83:07:fa:b2:3a:dc:9b:1e:fe:f7:a1:72:7b:b2:37:
70:c6:a0:8d:9b:1a:95:79:2b:f7:1d:6a:73:b8:f2:
dc:be:6a:79:02:25:14:16:3a:53:3e:06:e1:7d:2f:
83:18:18:c0:06:16:04:e5:ed:ef:78:57:3c:3a:cd:
62:68:da:ff:cf:c3:ce:99:e0:a0:91:38:06:b5:3e:
43:62:c2:0f:22:6a:63:5c:58:32:9f:a6:36:a7:a1:
22:57:5b:c1:73:57:b4:5a:48:cb:2b:56:90:56:a9:
4a:28:82:43:6c:a8:1f:55:b5:a1:7f:f3:b1:d6:00:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5F:CC:A7:8C:C8:F5:AA:8F:F0:FA:73:D7:B7:74:93:E6:3F:47:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292DF0A4A45111EFAAF41A4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.120.0/23
Signature Algorithm: sha256WithRSAEncryption
35:b3:53:bd:18:ca:ca:73:e7:ef:b8:a6:6d:9e:48:b8:33:ca:
53:53:79:4d:b7:72:cf:0c:d2:18:3c:c5:7e:c2:73:c5:95:f0:
0c:41:23:55:93:ee:41:a5:0f:1f:cb:62:0b:30:d1:8d:12:3c:
01:55:54:20:74:e5:51:bd:5b:32:c0:51:11:df:bf:38:e3:80:
f2:20:52:dc:df:24:4e:60:6f:e1:f3:e6:59:e5:a1:31:66:7c:
06:80:37:df:42:35:d0:1f:06:94:af:df:07:9e:68:19:0c:29:
af:55:2a:a2:b6:44:e5:af:31:21:28:0f:b1:81:ba:91:98:9e:
46:d2:56:be:ff:10:71:2b:ae:71:bf:73:c7:20:e3:3b:b3:79:
95:4e:cd:4c:07:f5:32:6b:33:15:c7:e1:74:3c:83:06:4e:c4:
6e:ea:51:86:73:be:1a:13:7c:dd:00:3d:17:53:bd:24:19:72:
27:05:09:80:d9:3a:10:74:04:56:5f:7c:ed:5d:71:fd:da:6a:
0a:18:28:01:a9:b6:50:d7:26:d6:14:fa:8c:cf:00:fe:c1:8a:
c8:74:7b:fb:10:0b:53:7f:b4:84:29:77:c6:b5:7b:b5:d3:61:
79:ce:a0:5b:98:af:dc:4a:41:76:d0:5e:1d:cf:3c:dd:69:ed:
b8:93:de:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ4hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MTkyOTQ5WhcNMjQxMTI1MTkyOTQ5WjAYMRYw
FAYDVQQDEw02NzM4ZjJiNC1hN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqrA2Qr4I1KHBXMzxGsDnsn/rrD5NBa9nbfzoX077WrE/s04VZ/juUX7B
HUL8ekOphJ779bP3w64rsf+esXEdUtRgvK6EBnkNqpYya0MSUVeHxh3aHZM6UpbP
YAztEkrdHBC9y3pakAqw3ahj3HNKkzbFAv+bd5BmoXERMcCgDvEYDaZq0jWDB/qy
OtybHv73oXJ7sjdwxqCNmxqVeSv3HWpzuPLcvmp5AiUUFjpTPgbhfS+DGBjABhYE
5e3veFc8Os1iaNr/z8POmeCgkTgGtT5DYsIPImpjXFgyn6Y2p6EiV1vBc1e0WkjL
K1aQVqlKKIJDbKgfVbWhf/Ox1gCK/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFARf
zKeMyPWqj/D6c9e3dJPmP0cOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOTJERjBBNEE0NTExMUVGQUFGNDFBNEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlx4MA0GCSqGSIb3DQEB
CwUAA4IBAQA1s1O9GMrKc+fvuKZtnki4M8pTU3lNt3LPDNIYPMV+wnPFlfAMQSNV
k+5BpQ8fy2ILMNGNEjwBVVQgdOVRvVsywFER378444DyIFLc3yROYG/h8+ZZ5aEx
ZnwGgDffQjXQHwaUr98HnmgZDCmvVSqitkTlrzEhKA+xgbqRmJ5G0la+/xBxK65x
v3PHIOM7s3mVTs1MB/UyazMVx+F0PIMGTsRu6lGGc74aE3zdAD0XU70kGXInBQmA
2ToQdARWX3ztXXH92moKGCgBqbZQ1ybWFPqMzwD+wYrIdHv7EAtTf7SEKXfGtXu1
02F5zqBbmK/cSkF20F4dzzzdae24k94z
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:22:29 2024 by rpki-client on console-ams.rpki-client.org