Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859AFF0A7EBC11EE9B6301664AD9E6FC.roa
File: 859AFF0A7EBC11EE9B6301664AD9E6FC.roa (raw, json)
Hash identifier: M1kcOei01y74u16YbMpxdG9mRprkCjZ7hf+kHqG9yOE=
Subject key identifier: 7A:78:0B:21:FE:E3:3E:42:65:26:92:34:48:9B:DC:AF:0E:68:DD:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DD9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859AFF0A7EBC11EE9B6301664AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:57:46 +0000
ROA not before: Thu 09 Nov 2023 04:57:42 +0000
ROA not after: Wed 06 Nov 2024 04:57:42 +0000
asID: 139057
IP address blocks: 154.92.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19929 (0x4dd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:57:42 2023 GMT
Not After : Nov 6 04:57:42 2024 GMT
Subject: CN=654c66c9-cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:5c:ff:31:65:38:94:56:c4:45:26:d0:96:
32:a1:5e:ab:92:74:c0:1a:7d:8b:48:0f:bb:b0:77:
40:a2:9d:5f:25:40:ca:fa:1d:56:85:ca:d6:29:04:
f8:73:4c:d6:19:70:ef:53:25:20:e7:ee:97:0d:43:
6d:6c:ec:09:91:e1:51:f0:61:d7:84:7e:da:23:c8:
56:97:c8:08:46:96:30:a6:38:09:72:ec:16:6e:76:
64:20:18:4c:f4:fb:00:c3:dd:5c:c2:f5:21:8b:75:
fe:df:0e:13:45:d6:06:f6:8f:de:0b:c5:5c:96:5f:
fb:36:84:e8:0c:47:67:a5:3d:19:20:d8:dc:fd:f6:
7e:7e:b9:39:1f:b2:7b:61:8e:76:83:b9:ba:b6:4d:
d0:51:e9:5b:bd:3d:b4:1b:0e:d5:a7:cc:bf:d9:8a:
f5:f4:51:29:93:2a:67:19:34:30:77:cf:20:87:c8:
47:35:18:8b:22:18:ed:29:bf:7a:dd:a6:bf:29:0e:
6b:d3:40:6f:88:03:4f:9e:11:b7:1d:ec:07:ac:3e:
dd:a8:ed:66:1a:f0:29:92:61:5e:51:e1:ba:25:86:
fc:aa:34:51:e3:ae:6e:cb:b5:6d:10:b7:c4:53:b4:
d5:85:77:e9:79:d6:de:f1:43:11:55:be:d3:dd:7c:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:0B:21:FE:E3:3E:42:65:26:92:34:48:9B:DC:AF:0E:68:DD:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/859AFF0A7EBC11EE9B6301664AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:74:5c:43:b6:98:97:24:76:0c:18:7d:3c:63:42:4f:20:c9:
d5:8a:36:2a:62:ac:68:af:1d:db:61:18:01:75:8f:35:7c:d9:
f0:c4:65:97:d3:6f:f1:bd:38:0c:e1:91:76:87:74:13:e2:e7:
48:86:3d:a9:c0:74:de:f2:54:fe:be:4c:9f:02:f1:57:fb:e3:
13:dc:3b:ee:b5:b7:55:2a:23:ac:85:82:7a:97:dc:5c:f3:e2:
ed:30:8a:eb:24:d2:ca:a7:fc:c4:97:c7:e6:43:5c:be:88:71:
ba:59:4e:10:58:c2:ec:25:eb:ac:a8:84:76:b0:37:7a:e9:d3:
ac:a2:cf:0a:e5:fb:80:10:2d:89:2d:11:c8:c2:38:28:1a:80:
5d:ca:be:f4:d4:89:b5:a8:35:8f:18:d2:a2:99:b3:43:3b:df:
90:28:7c:01:8c:6a:a4:04:7e:ee:44:bf:b8:99:ff:fc:28:f3:
06:ca:f2:31:81:72:e6:9c:86:f1:21:67:f4:41:36:50:e7:4d:
28:a5:4d:5a:d8:6b:55:e9:45:3f:e8:08:82:9d:26:16:3b:0c:
e6:c5:cd:47:0b:33:0a:92:82:66:c4:9b:71:a9:1f:89:84:1b:
11:3f:48:11:92:b9:68:4a:8f:8d:c3:53:42:09:40:44:6e:82:
2d:3c:19:29
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICTdkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDkwNDU3NDJaFw0yNDExMDYwNDU3NDJaMBgxFjAU
BgNVBAMTDTY1NGM2NmM5LWNmN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuy1z/MWU4lFbERSbQljKhXquSdMAafYtID7uwd0CinV8lQMr6HVaFytYp
BPhzTNYZcO9TJSDn7pcNQ21s7AmR4VHwYdeEftojyFaXyAhGljCmOAly7BZudmQg
GEz0+wDD3VzC9SGLdf7fDhNF1gb2j94LxVyWX/s2hOgMR2elPRkg2Nz99n5+uTkf
snthjnaDubq2TdBR6Vu9PbQbDtWnzL/ZivX0USmTKmcZNDB3zyCHyEc1GIsiGO0p
v3rdpr8pDmvTQG+IA0+eEbcd7AesPt2o7WYa8CmSYV5R4bolhvyqNFHjrm7LtW0Q
t8RTtNWFd+l51t7xQxFVvtPdfJorAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUengL
If7jPkJlJpI0SJvcrw5o3SwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzg1OUFGRjBBN0VCQzExRUU5QjYzMDE2NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaXB4wDQYJKoZIhvcNAQEL
BQADggEBAG50XEO2mJckdgwYfTxjQk8gydWKNipirGivHdthGAF1jzV82fDEZZfT
b/G9OAzhkXaHdBPi50iGPanAdN7yVP6+TJ8C8Vf74xPcO+61t1UqI6yFgnqX3Fzz
4u0wiusk0sqn/MSXx+ZDXL6IcbpZThBYwuwl66yohHawN3rp06yizwrl+4AQLYkt
EcjCOCgagF3KvvTUibWoNY8Y0qKZs0M735AofAGMaqQEfu5Ev7iZ//wo8wbK8jGB
cuachvEhZ/RBNlDnTSilTVrYa1XpRT/oCIKdJhY7DObFzUcLMwqSgmbEm3GpH4mE
GxE/SBGSuWhKj43DU0IJQERugi08GSk=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org