Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F4F1A429B8511EFA822CF42762E951A.roa
File: 6F4F1A429B8511EFA822CF42762E951A.roa (raw, json)
Hash identifier: JexqXMBOH0ourbge0yNC69SwS0coWrZw3UwVSqDa/nc=
Subject key identifier: 72:4C:17:FB:C2:6F:97:ED:2F:26:57:1C:76:05:18:50:E5:2B:20:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010817
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F4F1A429B8511EFA822CF42762E951A.roa
Signing time: Tue 05 Nov 2024 14:51:27 +0000
ROA not before: Tue 05 Nov 2024 14:51:24 +0000
ROA not after: Mon 20 Jan 2025 14:51:24 +0000
asID: 135097
IP address blocks: 154.91.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67607 (0x10817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:51:24 2024 GMT
Not After : Jan 20 14:51:24 2025 GMT
Subject: CN=672a30ef-6b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fe:7e:3b:4a:6c:c9:81:c1:76:a3:25:74:12:
e6:07:ac:88:69:89:b4:e2:6f:df:a8:4f:c1:b2:ae:
f4:ec:93:3f:05:7f:67:4b:6c:f8:00:4c:28:9d:9a:
77:ae:c5:95:66:d9:54:e9:31:4f:53:a0:cd:95:a6:
9b:61:29:c9:69:a8:4f:08:3b:c5:8b:c7:1d:e6:31:
53:3a:22:69:60:4b:3d:b7:60:1d:09:e1:cc:cf:a1:
ee:22:f2:c9:b7:16:93:f0:48:f8:1a:8b:a3:18:c4:
5d:be:9b:78:00:57:6a:3c:f5:56:27:19:00:09:b8:
bf:86:2f:58:60:12:53:5d:0e:4f:57:a9:29:5c:88:
32:71:3d:76:1c:7e:d5:bf:d2:e1:a8:5f:81:cb:0b:
57:a1:8f:f4:27:1d:af:b5:c3:d8:a2:9b:09:a0:1d:
57:1f:42:dd:05:35:9f:94:c6:b8:ac:12:6b:f9:5a:
d6:5d:f4:94:61:90:9c:9c:5e:ca:21:c8:e5:33:c9:
8d:5c:35:55:98:ea:83:e8:50:ea:eb:f5:af:3e:04:
39:cc:79:31:bf:f1:8a:02:44:3b:32:72:79:ff:64:
b5:00:bc:11:4b:02:b0:4a:0d:b4:20:86:58:bd:28:
43:a1:db:bc:cf:12:86:f7:88:10:16:60:f1:9d:52:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:17:FB:C2:6F:97:ED:2F:26:57:1C:76:05:18:50:E5:2B:20:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F4F1A429B8511EFA822CF42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.6.0/24
Signature Algorithm: sha256WithRSAEncryption
67:13:11:55:35:29:c3:93:ae:9d:5e:c3:5d:2f:4d:a0:d1:d5:
de:d9:78:79:8f:02:fe:25:64:ca:60:9d:ff:f2:47:0f:d3:ce:
2e:3e:27:6f:1d:d7:df:93:86:24:2a:6c:21:0d:ba:11:5b:b8:
d7:e7:02:66:5d:2b:4c:ba:c9:14:d8:3b:5c:90:db:ba:c0:76:
22:44:86:47:66:a1:32:cd:3d:f6:50:b4:0c:e6:1f:66:79:02:
a5:4d:47:23:34:73:b0:dd:85:c9:23:72:b1:de:19:29:b6:7a:
e6:88:c9:56:16:3a:6e:85:af:00:9c:17:52:a0:ba:55:89:c2:
4e:57:72:b0:d1:3b:0f:40:16:6d:a0:e2:60:2b:f5:58:07:af:
a7:73:dd:87:77:b2:9e:3c:a9:47:72:16:19:e6:e7:18:d5:e3:
92:b2:92:7c:21:f7:62:02:70:d6:4d:80:ab:f7:44:76:53:93:
c9:e4:40:85:10:7d:b1:94:12:5a:50:23:ab:54:0c:44:c2:4b:
22:30:57:06:f1:b1:62:25:a6:79:ae:4c:66:2c:51:11:f5:3e:
ed:cc:f2:76:fb:03:93:e3:cd:c8:fa:6d:b5:b3:30:89:5b:ae:
90:2d:08:2a:4f:b3:5f:f6:fb:0e:25:7d:96:4a:e4:9f:60:f1:
81:71:4d:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQgXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTQ1MTI0WhcNMjUwMTIwMTQ1MTI0WjAYMRYw
FAYDVQQDEw02NzJhMzBlZi02YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9P5+O0psyYHBdqMldBLmB6yIaYm04m/fqE/Bsq707JM/BX9nS2z4AEwo
nZp3rsWVZtlU6TFPU6DNlaabYSnJaahPCDvFi8cd5jFTOiJpYEs9t2AdCeHMz6Hu
IvLJtxaT8Ej4GoujGMRdvpt4AFdqPPVWJxkACbi/hi9YYBJTXQ5PV6kpXIgycT12
HH7Vv9LhqF+BywtXoY/0Jx2vtcPYopsJoB1XH0LdBTWflMa4rBJr+VrWXfSUYZCc
nF7KIcjlM8mNXDVVmOqD6FDq6/WvPgQ5zHkxv/GKAkQ7MnJ5/2S1ALwRSwKwSg20
IIZYvShDodu8zxKG94gQFmDxnVIXEQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHJM
F/vCb5ftLyZXHHYFGFDlKyCfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82RjRGMUE0MjlCODUxMUVGQTgyMkNGNDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlsGMA0GCSqGSIb3DQEB
CwUAA4IBAQBnExFVNSnDk66dXsNdL02g0dXe2Xh5jwL+JWTKYJ3/8kcP084uPidv
Hdffk4YkKmwhDboRW7jX5wJmXStMuskU2DtckNu6wHYiRIZHZqEyzT32ULQM5h9m
eQKlTUcjNHOw3YXJI3Kx3hkptnrmiMlWFjpuha8AnBdSoLpVicJOV3Kw0TsPQBZt
oOJgK/VYB6+nc92Hd7KePKlHchYZ5ucY1eOSspJ8IfdiAnDWTYCr90R2U5PJ5ECF
EH2xlBJaUCOrVAxEwksiMFcG8bFiJaZ5rkxmLFER9T7tzPJ2+wOT483I+m21szCJ
W66QLQgqT7Nf9vsOJX2WSuSfYPGBcU2J
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:10 2024 by rpki-client on console-fra.rpki-client.org