Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8709799E734D11EFA47B74B0762E951A.roa
File: 8709799E734D11EFA47B74B0762E951A.roa (raw, json)
Hash identifier: S7v6Bv3KcXWC5lykBayhX+bdupkMnJ84avGUrLzTBVw=
Subject key identifier: F3:EC:07:CD:87:2A:95:65:19:AF:0D:77:DB:05:1A:48:3C:F5:05:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EEB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8709799E734D11EFA47B74B0762E951A.roa
Signing time: Sun 15 Sep 2024 10:30:29 +0000
ROA not before: Sun 15 Sep 2024 10:30:23 +0000
ROA not after: Wed 17 Sep 2025 10:30:23 +0000
asID: 142629
IP address blocks: 154.82.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Sep 2024 07:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61112 (0xeeb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 10:30:23 2024 GMT
Not After : Sep 17 10:30:23 2025 GMT
Subject: CN=66e6b745-7eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:9b:3a:43:3e:a8:38:ad:a7:e0:4a:c3:74:
96:94:d1:73:df:d8:b9:07:db:27:04:ed:17:b6:e5:
49:2d:19:ed:e4:57:c6:08:56:59:d4:e8:0c:8d:17:
bd:d2:89:26:8a:5c:45:de:ee:b9:90:d7:85:b1:37:
37:af:39:d6:de:a4:12:14:6f:93:e7:0b:a0:a9:ba:
41:5e:5f:50:b0:37:b9:90:5f:26:b6:65:4b:01:20:
49:3e:40:4b:0a:26:12:7c:46:6a:14:94:c9:50:8f:
84:80:d5:13:46:d4:30:68:5b:33:9e:e1:44:05:f6:
62:8a:d5:28:32:50:fd:e6:f3:11:de:d4:d6:20:ba:
b2:d1:dd:dd:c2:e5:f4:46:0f:50:0a:f3:d1:66:7f:
a4:d4:10:ec:ae:52:18:19:13:85:fa:a7:8b:be:0c:
12:6c:01:89:41:1e:91:af:6a:32:0e:9e:6e:0d:b1:
19:00:94:4a:e1:fc:5a:cf:d7:66:9d:5b:71:24:84:
98:ca:bc:98:77:c8:c6:9a:30:cd:6e:f5:a6:00:63:
2c:1e:6c:46:73:49:72:cb:36:7b:cf:69:f0:da:65:
1a:16:f5:d6:4a:4a:94:00:35:ec:33:cb:8a:40:3b:
43:b5:20:c3:eb:37:9e:48:38:d5:d6:f2:7c:08:b3:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EC:07:CD:87:2A:95:65:19:AF:0D:77:DB:05:1A:48:3C:F5:05:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8709799E734D11EFA47B74B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.133.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b7:a8:68:39:d9:dc:5f:89:45:38:f4:50:14:28:3a:91:e9:
aa:ba:7c:68:56:5d:81:3a:ea:27:7e:bd:0b:ec:26:4d:90:2f:
74:6a:b1:4d:14:40:7b:e7:17:8a:33:a7:d5:bb:dc:50:9f:83:
63:f4:ee:bf:25:bb:a1:b1:46:d5:5b:21:96:b5:c2:e3:ec:0e:
72:43:8f:8a:c4:a8:8c:f8:f9:b3:60:30:98:67:7f:8f:d5:9b:
2d:bc:fc:2d:5a:09:24:ce:03:c4:d9:5a:c1:33:fc:c2:60:48:
30:62:68:c5:f6:b7:66:2a:35:17:04:01:97:42:a6:dc:48:1f:
b2:ca:fd:5f:fa:fc:54:ce:b0:7e:52:c6:5b:80:f6:81:06:f3:
8d:db:b5:7a:de:98:8c:c3:d4:a7:3e:13:ae:51:68:2a:ca:a9:
fb:29:a3:bb:f4:09:b0:fd:29:99:e5:aa:d9:77:8e:b9:91:37:
90:dd:fb:9c:51:1a:3a:71:c6:24:40:75:5b:51:1a:90:33:a6:
a4:7f:7e:4f:11:69:bd:81:27:b8:29:38:3e:b4:4a:8e:dd:0d:
9b:b5:a5:7f:73:24:67:88:72:4a:b4:0c:1a:0f:6d:0a:28:5d:
45:87:68:83:b3:9d:df:99:26:13:7a:1f:cb:b2:3e:77:9c:c7:
be:a4:89:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO64MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE1MTAzMDIzWhcNMjUwOTE3MTAzMDIzWjAYMRYw
FAYDVQQDEw02NmU2Yjc0NS03ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAynqbOkM+qDitp+BKw3SWlNFz39i5B9snBO0XtuVJLRnt5FfGCFZZ1OgM
jRe90okmilxF3u65kNeFsTc3rznW3qQSFG+T5wugqbpBXl9QsDe5kF8mtmVLASBJ
PkBLCiYSfEZqFJTJUI+EgNUTRtQwaFsznuFEBfZiitUoMlD95vMR3tTWILqy0d3d
wuX0Rg9QCvPRZn+k1BDsrlIYGROF+qeLvgwSbAGJQR6Rr2oyDp5uDbEZAJRK4fxa
z9dmnVtxJISYyryYd8jGmjDNbvWmAGMsHmxGc0lyyzZ7z2nw2mUaFvXWSkqUADXs
M8uKQDtDtSDD6zeeSDjV1vJ8CLM1kwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPPs
B82HKpVlGa8Nd9sFGkg89QWiMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NzA5Nzk5RTczNEQxMUVGQTQ3Qjc0QjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlKFMA0GCSqGSIb3DQEB
CwUAA4IBAQAWt6hoOdncX4lFOPRQFCg6kemqunxoVl2BOuonfr0L7CZNkC90arFN
FEB75xeKM6fVu9xQn4Nj9O6/JbuhsUbVWyGWtcLj7A5yQ4+KxKiM+PmzYDCYZ3+P
1ZstvPwtWgkkzgPE2VrBM/zCYEgwYmjF9rdmKjUXBAGXQqbcSB+yyv1f+vxUzrB+
UsZbgPaBBvON27V63piMw9SnPhOuUWgqyqn7KaO79Amw/SmZ5arZd465kTeQ3fuc
URo6ccYkQHVbURqQM6akf35PEWm9gSe4KTg+tEqO3Q2btaV/cyRniHJKtAwaD20K
KF1Fh2iDs53fmSYTeh/Lsj53nMe+pInY
-----END CERTIFICATE-----
Generated at Wed Sep 18 08:46:43 2024 by rpki-client on console-fra.rpki-client.org