Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B00CB50A44F11EF9EDB79BD762E951A.roa
File: 3B00CB50A44F11EF9EDB79BD762E951A.roa (raw, json)
Hash identifier: h6pMLclyVqyh7mF6GHXYTq9qvPXhzOEMahGEq4Efa/A=
Subject key identifier: E7:31:F8:FA:97:5E:CD:FF:E5:0C:4B:2A:AA:99:8A:94:23:4B:D2:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B00CB50A44F11EF9EDB79BD762E951A.roa
Signing time: Sat 16 Nov 2024 19:16:07 +0000
ROA not before: Sat 16 Nov 2024 19:16:03 +0000
ROA not after: Mon 25 Nov 2024 19:16:03 +0000
asID: 9009
IP address blocks: 154.85.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69135 (0x10e0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:16:03 2024 GMT
Not After : Nov 25 19:16:03 2024 GMT
Subject: CN=6738ef77-50b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:2a:c6:a5:8e:7a:19:63:62:f2:4b:97:df:
a1:eb:f7:74:55:17:22:9b:3b:e6:c6:4d:7e:01:46:
5c:bb:9b:e8:6b:05:75:59:3e:7c:a5:71:9c:d2:cf:
86:7a:f7:05:2f:84:f7:c1:42:64:6d:1a:f5:be:15:
b0:8c:d9:d4:c0:46:0e:1b:16:68:60:eb:b4:df:c0:
97:4b:50:57:a2:3d:98:83:66:eb:f8:bf:da:76:b7:
24:0b:58:cd:80:91:8d:6d:2e:fd:23:ae:26:14:59:
d9:50:08:6b:17:ff:57:63:cf:3b:bb:bf:03:d1:f2:
a1:72:04:0e:92:f4:78:6e:48:22:b4:c0:93:b9:15:
f0:0c:b2:2d:4b:24:75:52:64:98:24:50:60:c6:82:
e4:a1:19:6d:d8:a9:be:17:6c:35:44:49:72:6b:e6:
5a:cd:17:ea:2f:09:9a:15:bb:91:b5:0f:6a:6a:d0:
3e:c8:21:bb:d7:50:28:7f:72:f4:6e:a1:fc:d5:db:
ef:1e:04:fa:71:d6:72:aa:f6:e2:81:78:78:9d:5a:
9f:ed:6c:33:68:32:53:be:58:1b:3c:17:55:9a:ee:
a0:c0:ab:37:71:98:af:f0:41:9f:a8:fe:f3:dc:fc:
5a:67:a3:44:22:b4:03:72:b2:ac:2e:75:21:d4:d2:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:F8:FA:97:5E:CD:FF:E5:0C:4B:2A:AA:99:8A:94:23:4B:D2:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B00CB50A44F11EF9EDB79BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.100.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a4:f3:d8:8e:4b:61:16:9a:f1:49:ae:33:fd:05:a1:98:73:
92:2a:2e:e2:04:ba:4f:b8:45:df:9e:10:fc:3e:9c:c3:6c:18:
eb:ee:51:54:0e:b1:ea:a2:bd:90:ae:6d:f5:df:3a:9b:10:b9:
dd:fd:b8:26:56:18:56:91:24:43:e7:91:00:b6:e4:fd:1a:55:
11:2f:b1:e4:fa:b2:af:4e:16:61:c4:57:6b:b8:d6:4e:c8:b2:
a4:53:9b:bf:3c:ba:81:ae:29:26:24:0d:1e:6f:1c:20:6b:38:
db:eb:db:9f:06:ad:92:85:43:79:c7:19:d9:c9:57:fb:4c:08:
76:f8:e2:dd:30:a7:4f:b6:6d:10:cc:5b:eb:ca:a6:b8:17:be:
a4:77:5f:1d:49:5c:36:5f:23:b1:f8:da:bc:d6:80:1b:29:93:
91:30:4a:35:69:d5:36:18:8e:c9:c4:0a:d5:64:bb:3a:61:cc:
37:d0:d4:34:1d:9e:81:e9:d3:51:40:d4:b5:11:33:57:1b:6b:
b2:c8:04:8e:06:12:a9:b7:98:3f:fe:6f:58:d5:f2:74:47:90:
77:87:80:4c:38:39:be:f8:42:1e:3c:f0:b2:b9:8c:b0:e7:b3:
60:48:5b:8c:3b:33:30:bb:92:6d:82:3c:54:12:4d:23:0b:39:
d0:29:31:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ4PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MTkxNjAzWhcNMjQxMTI1MTkxNjAzWjAYMRYw
FAYDVQQDEw02NzM4ZWY3Ny01MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmJkqxqWOehljYvJLl9+h6/d0VRcimzvmxk1+AUZcu5voawV1WT58pXGc
0s+GevcFL4T3wUJkbRr1vhWwjNnUwEYOGxZoYOu038CXS1BXoj2Yg2br+L/adrck
C1jNgJGNbS79I64mFFnZUAhrF/9XY887u78D0fKhcgQOkvR4bkgitMCTuRXwDLIt
SyR1UmSYJFBgxoLkoRlt2Km+F2w1RElya+ZazRfqLwmaFbuRtQ9qatA+yCG711Ao
f3L0bqH81dvvHgT6cdZyqvbigXh4nVqf7WwzaDJTvlgbPBdVmu6gwKs3cZiv8EGf
qP7z3PxaZ6NEIrQDcrKsLnUh1NL6CQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOcx
+PqXXs3/5QxLKqqZipQjS9ItMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zQjAwQ0I1MEE0NEYxMUVGOUVEQjc5QkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlVkMA0GCSqGSIb3DQEB
CwUAA4IBAQAJpPPYjkthFprxSa4z/QWhmHOSKi7iBLpPuEXfnhD8PpzDbBjr7lFU
DrHqor2Qrm313zqbELnd/bgmVhhWkSRD55EAtuT9GlURL7Hk+rKvThZhxFdruNZO
yLKkU5u/PLqBrikmJA0ebxwgazjb69ufBq2ShUN5xxnZyVf7TAh2+OLdMKdPtm0Q
zFvryqa4F76kd18dSVw2XyOx+Nq81oAbKZORMEo1adU2GI7JxArVZLs6Ycw30NQ0
HZ6B6dNRQNS1ETNXG2uyyASOBhKpt5g//m9Y1fJ0R5B3h4BMODm++EIePPCyuYyw
57NgSFuMOzMwu5JtgjxUEk0jCznQKTGk
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:36 2024 by rpki-client on console-ams.rpki-client.org