Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B3A08C1A4A11EFB7215F2E017001B1.roa
File: 29B3A08C1A4A11EFB7215F2E017001B1.roa (raw, json)
Hash identifier: 3ap7Y5cKABKt9dPYXBYvLi1hVGsjf+48001/VnPvoTg=
Subject key identifier: 38:FE:07:1C:95:C3:81:31:AB:FE:15:13:5F:77:F6:66:79:DC:AC:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BAA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B3A08C1A4A11EFB7215F2E017001B1.roa
Signing time: Sat 25 May 2024 03:52:10 +0000
ROA not before: Sat 25 May 2024 03:52:06 +0000
ROA not after: Mon 26 May 2025 03:52:06 +0000
asID: 209242
IP address blocks: 154.211.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47778 (0xbaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 03:52:06 2024 GMT
Not After : May 26 03:52:06 2025 GMT
Subject: CN=6651606a-4183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:f1:17:72:9f:5f:62:06:17:2d:00:d4:22:
25:de:a2:7b:c3:10:4e:c6:66:f0:1f:ba:fb:7a:b2:
6a:f6:f7:7e:2e:30:0e:77:f5:2b:92:48:72:fa:37:
c9:d3:d4:72:92:b7:22:36:ec:42:6d:03:9a:94:87:
55:99:dd:dd:5c:07:be:a0:3d:77:3c:f8:d5:b1:1c:
8f:aa:da:7b:ec:25:78:22:4f:0e:8a:81:0e:01:41:
79:80:a4:14:ac:4d:1f:69:23:85:d9:04:6b:78:55:
e1:fb:a5:25:6f:09:b6:d0:8f:e8:9b:3f:18:44:2f:
90:b2:4f:9a:88:6b:f7:7b:6b:44:d3:85:8c:02:80:
14:b3:32:e8:33:aa:90:c9:07:71:d9:51:e9:5e:fa:
36:cd:88:13:f1:a4:71:36:4a:4e:81:5f:7a:be:a1:
4f:f6:b0:d4:a8:6c:c7:d2:4a:97:de:e5:d2:58:66:
9c:95:ad:f0:2a:6a:4f:ff:3d:49:a9:94:ad:1e:2c:
0c:c7:ff:75:24:fb:c8:61:1c:da:cf:bb:62:a2:f1:
67:68:a1:8a:67:f3:3f:54:b0:d8:72:78:02:b9:30:
46:71:e5:4c:1e:a4:66:64:c4:ca:69:34:0c:2e:b6:
fa:ee:73:31:4e:5a:d7:39:f4:d3:34:d8:8c:16:26:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FE:07:1C:95:C3:81:31:AB:FE:15:13:5F:77:F6:66:79:DC:AC:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29B3A08C1A4A11EFB7215F2E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.8.0/24
Signature Algorithm: sha256WithRSAEncryption
91:47:4c:45:d4:69:9a:6f:1a:50:86:63:d0:42:ac:30:9c:8d:
11:d5:e9:66:08:69:03:95:96:b0:be:70:3b:8d:18:ce:77:5a:
77:e9:62:2c:c6:be:33:f7:7e:7c:94:f3:19:d5:f6:7b:ee:3e:
7f:87:72:b5:53:32:26:ea:16:b2:0a:ad:53:53:9b:6c:84:f1:
b7:ec:a4:3f:9b:2e:b2:d8:fe:73:c9:dc:fa:51:d1:1b:9d:69:
72:e6:9a:70:a0:9d:15:4c:66:92:31:85:1b:4f:ee:2e:f9:81:
48:e7:7f:be:6f:92:f4:dd:71:8d:78:73:2d:9e:49:cd:86:bd:
b6:25:c3:67:99:ed:f5:1e:29:37:94:ca:f4:a0:cf:8f:4e:14:
ef:35:97:1b:47:ec:84:00:45:48:77:cb:4a:69:c6:ec:4c:19:
01:61:61:b4:17:44:81:98:96:cb:fc:56:05:6f:2e:c8:44:0c:
a3:7d:24:fe:e6:ac:70:11:fb:10:ae:23:5e:8c:fb:69:d4:2e:
e2:34:81:e3:6c:b2:df:1e:4c:83:5d:ee:eb:bf:62:9f:f1:12:
c2:12:e4:ff:ca:4d:10:c4:d9:59:7b:4d:45:17:f3:1b:a3:1b:
32:b4:dc:3f:a9:e9:98:03:f2:a8:4d:5b:3c:2c:89:cd:24:05:
a0:3f:5e:12
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALqiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTI1MDM1MjA2WhcNMjUwNTI2MDM1MjA2WjAYMRYw
FAYDVQQDEw02NjUxNjA2YS00MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz1LxF3KfX2IGFy0A1CIl3qJ7wxBOxmbwH7r7erJq9vd+LjAOd/Urkkhy
+jfJ09RykrciNuxCbQOalIdVmd3dXAe+oD13PPjVsRyPqtp77CV4Ik8OioEOAUF5
gKQUrE0faSOF2QRreFXh+6Ulbwm20I/omz8YRC+Qsk+aiGv3e2tE04WMAoAUszLo
M6qQyQdx2VHpXvo2zYgT8aRxNkpOgV96vqFP9rDUqGzH0kqX3uXSWGacla3wKmpP
/z1JqZStHiwMx/91JPvIYRzaz7tiovFnaKGKZ/M/VLDYcngCuTBGceVMHqRmZMTK
aTQMLrb67nMxTlrXOfTTNNiMFibp4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDj+
BxyVw4Exq/4VE1939mZ53KzJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yOUIzQTA4QzFBNEExMUVGQjcyMTVGMkUwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMIMA0GCSqGSIb3DQEB
CwUAA4IBAQCRR0xF1GmabxpQhmPQQqwwnI0R1elmCGkDlZawvnA7jRjOd1p36WIs
xr4z9358lPMZ1fZ77j5/h3K1UzIm6hayCq1TU5tshPG37KQ/my6y2P5zydz6UdEb
nWly5ppwoJ0VTGaSMYUbT+4u+YFI53++b5L03XGNeHMtnknNhr22JcNnme31Hik3
lMr0oM+PThTvNZcbR+yEAEVId8tKacbsTBkBYWG0F0SBmJbL/FYFby7IRAyjfST+
5qxwEfsQriNejPtp1C7iNIHjbLLfHkyDXe7rv2Kf8RLCEuT/yk0QxNlZe01FF/Mb
oxsytNw/qemYA/KoTVs8LInNJAWgP14S
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:02 2024 by rpki-client on console-fra.rpki-client.org