Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69E889AC7B1F11EF96DFF793762E951A.roa
File: 69E889AC7B1F11EF96DFF793762E951A.roa (raw, json)
Hash identifier: Vlh+mmUCTOp4LqvktpBKnZLUxUsS4d+I3BzYi3/FFVY=
Subject key identifier: 06:D9:BE:32:F2:37:D4:C5:E2:32:C1:8B:EC:BE:8C:2F:33:F2:17:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F33A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69E889AC7B1F11EF96DFF793762E951A.roa
Signing time: Wed 25 Sep 2024 09:20:32 +0000
ROA not before: Wed 25 Sep 2024 09:20:29 +0000
ROA not after: Wed 18 Dec 2024 09:20:29 +0000
asID: 47890
IP address blocks: 154.214.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62266 (0xf33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:20:29 2024 GMT
Not After : Dec 18 09:20:29 2024 GMT
Subject: CN=66f3d5e0-d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:cb:8d:1c:a1:55:f2:d2:67:f9:89:54:2f:
28:47:c7:6a:5b:c3:f5:ce:d6:0c:96:3a:d7:a7:46:
1f:55:07:f1:8f:a8:1b:f6:5e:81:1c:7c:98:57:84:
0e:a6:7b:4e:90:42:7c:1a:07:33:eb:ff:7e:eb:9d:
e2:2c:98:8f:58:c8:eb:b7:a4:dc:36:d4:45:e4:16:
14:8a:95:cb:34:ef:bb:6b:1c:44:6a:45:26:35:ce:
f2:a5:da:86:be:81:c9:05:d2:f2:c6:ee:bc:b7:16:
33:dd:3e:b6:4c:06:9c:f3:c6:62:4f:3b:07:f5:a4:
f7:cd:66:68:b4:21:4e:a8:17:2c:53:65:5f:1d:3d:
30:39:8e:fa:08:99:e5:18:aa:07:1a:15:ca:3c:1b:
ca:83:18:10:c4:82:16:cf:0c:d9:f6:fa:98:ca:f0:
7f:d3:8f:b7:c5:85:59:15:5c:ff:f8:d1:ba:22:ff:
2a:1b:39:8b:59:a7:0b:0a:3d:5f:3f:e7:f1:6e:11:
3a:03:ad:1b:a9:39:03:ef:f1:fb:5e:79:cc:97:fa:
65:f5:4f:4d:36:6d:9a:c8:0b:9e:27:2c:31:c9:21:
35:99:62:64:45:65:12:24:3c:10:1f:da:52:11:76:
db:ee:40:eb:3f:ba:25:15:1b:e5:6b:6b:09:cf:cd:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D9:BE:32:F2:37:D4:C5:E2:32:C1:8B:EC:BE:8C:2F:33:F2:17:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69E889AC7B1F11EF96DFF793762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.205.0/24
Signature Algorithm: sha256WithRSAEncryption
23:21:6f:df:a9:c9:e5:60:8c:f6:22:49:ed:e4:30:9e:a1:2c:
b0:eb:07:ad:f5:e5:65:e5:26:fa:3c:2f:bb:b3:b9:3d:b2:4b:
b9:2e:84:fd:be:35:97:c9:9b:bf:c3:b3:df:91:54:55:fe:45:
44:59:e3:44:b5:f2:ef:e5:0c:c4:a7:2b:b7:10:29:df:21:d1:
e9:ca:55:c5:94:4a:ad:fa:9a:04:64:bc:8e:ee:80:fe:70:34:
76:79:93:8c:5d:46:c3:e2:1d:7b:90:6f:e6:1f:5a:ff:aa:1b:
9f:d9:91:9f:1c:99:5d:0c:62:bd:c3:be:0d:53:c7:85:24:49:
24:0a:82:f7:f5:48:f2:da:da:d6:9e:39:26:d7:c5:6e:cd:f2:
e7:e8:56:88:e7:62:87:be:8e:72:e3:26:1f:a8:64:27:a3:ef:
f7:4d:db:3e:a6:ea:a2:87:36:c3:ed:2b:7e:90:1e:85:65:fb:
44:58:c0:47:0f:9b:0f:97:fe:a5:ad:72:61:f5:13:65:25:88:
38:50:4a:b6:66:e6:54:5b:4f:67:d4:3b:6b:b4:b0:15:bd:e1:
18:3f:5c:5c:25:bf:17:41:7f:05:d0:a6:f7:f9:36:3b:75:ce:
1a:08:25:02:ca:d1:13:80:29:d3:ba:25:03:88:c3:01:4c:8e:
38:b5:d3:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPM6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTI1MDkyMDI5WhcNMjQxMjE4MDkyMDI5WjAYMRYw
FAYDVQQDEw02NmYzZDVlMC1kMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3UDLjRyhVfLSZ/mJVC8oR8dqW8P1ztYMljrXp0YfVQfxj6gb9l6BHHyY
V4QOpntOkEJ8Ggcz6/9+653iLJiPWMjrt6TcNtRF5BYUipXLNO+7axxEakUmNc7y
pdqGvoHJBdLyxu68txYz3T62TAac88ZiTzsH9aT3zWZotCFOqBcsU2VfHT0wOY76
CJnlGKoHGhXKPBvKgxgQxIIWzwzZ9vqYyvB/04+3xYVZFVz/+NG6Iv8qGzmLWacL
Cj1fP+fxbhE6A60bqTkD7/H7XnnMl/pl9U9NNm2ayAueJywxySE1mWJkRWUSJDwQ
H9pSEXbb7kDrP7olFRvla2sJz80WOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAbZ
vjLyN9TF4jLBi+y+jC8z8hcaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OUU4ODlBQzdCMUYxMUVGOTZERkY3OTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbNMA0GCSqGSIb3DQEB
CwUAA4IBAQAjIW/fqcnlYIz2Iknt5DCeoSyw6wet9eVl5Sb6PC+7s7k9sku5LoT9
vjWXyZu/w7PfkVRV/kVEWeNEtfLv5QzEpyu3ECnfIdHpylXFlEqt+poEZLyO7oD+
cDR2eZOMXUbD4h17kG/mH1r/qhuf2ZGfHJldDGK9w74NU8eFJEkkCoL39Ujy2trW
njkm18VuzfLn6FaI52KHvo5y4yYfqGQno+/3Tds+puqihzbD7St+kB6FZftEWMBH
D5sPl/6lrXJh9RNlJYg4UEq2ZuZUW09n1DtrtLAVveEYP1xcJb8XQX8F0Kb3+TY7
dc4aCCUCytETgCnTuiUDiMMBTI44tdPl
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:52:59 2024 by rpki-client on console-ams.rpki-client.org