Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/894E5F6A983411EF9932F957762E951A.roa
File: 894E5F6A983411EF9932F957762E951A.roa (raw, json)
Hash identifier: bhqOz+ll/vx62G27EtN/H36QfZTHcblYz77+//pa5No=
Subject key identifier: 83:BA:06:E5:CA:4D:71:CE:28:DE:9C:FC:B2:E7:19:3E:E3:10:81:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0104C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/894E5F6A983411EF9932F957762E951A.roa
Signing time: Fri 01 Nov 2024 09:34:48 +0000
ROA not before: Fri 01 Nov 2024 09:34:45 +0000
ROA not after: Sun 01 Dec 2024 09:34:45 +0000
asID: 54600
IP address blocks: 154.202.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66753 (0x104c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 09:34:45 2024 GMT
Not After : Dec 1 09:34:45 2024 GMT
Subject: CN=6724a0b8-01a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:04:bc:43:9b:6d:b2:77:2d:a9:b8:8d:05:
49:bd:98:2b:09:4a:9a:e4:86:a7:9c:db:67:56:ef:
a9:68:b3:5f:08:4c:e5:ab:99:9c:f1:d7:b3:7e:9b:
61:89:26:30:f7:11:cb:79:c5:52:38:d6:e0:63:5a:
14:af:c9:ef:9f:60:38:e2:34:85:c9:5c:b5:44:d6:
6b:20:62:ef:96:96:f0:e4:43:51:84:64:35:d0:45:
a8:a7:f7:b8:f9:13:d7:f7:f4:51:d4:59:d1:1a:de:
55:98:5f:26:49:d8:2f:97:82:e0:69:c8:af:d2:7a:
9a:fe:2b:a2:3e:e5:b2:d0:23:ac:8c:94:51:09:aa:
65:83:88:78:f9:ae:cd:6e:80:45:d9:6e:bb:4b:78:
74:0e:52:a4:96:07:f2:7b:64:79:75:3a:27:a4:6a:
8f:77:83:a4:81:d1:35:eb:38:e5:8f:f8:11:e1:4d:
7b:d3:bf:92:0e:54:60:3a:74:e4:dc:c9:f7:71:f2:
0e:c2:83:8b:dd:51:dc:87:86:1c:2c:52:cb:2b:30:
7f:f4:c6:eb:7b:b6:25:66:47:85:32:78:5d:ff:98:
db:f0:cc:bc:b4:b2:c3:f0:0f:99:75:3e:c4:c2:52:
14:d6:35:6e:b9:90:45:37:3b:91:42:d2:ec:c8:71:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:06:E5:CA:4D:71:CE:28:DE:9C:FC:B2:E7:19:3E:E3:10:81:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/894E5F6A983411EF9932F957762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
31:9f:79:f1:50:4d:b8:db:ae:03:65:54:0d:db:64:68:88:2a:
7b:b0:4c:bd:36:63:d9:3c:74:97:92:4a:64:95:08:74:b6:7a:
ee:a8:38:05:9b:12:f7:e2:94:8e:7b:3f:40:ef:28:68:68:98:
19:b8:fc:40:21:13:62:e5:08:34:94:26:ea:86:9c:f0:78:af:
6b:70:78:f1:68:c9:cf:43:11:cf:41:bf:d9:c4:49:cc:5f:fa:
8a:74:6d:58:6a:f9:94:93:c5:5d:90:96:00:07:b9:51:3f:ae:
f9:95:88:a8:ed:a7:63:e8:d1:4d:7d:c4:ce:88:68:86:d1:9b:
8c:8f:1e:42:c3:c3:50:0b:96:20:5f:60:c6:5d:8b:2e:18:28:
65:7d:b1:e1:c4:94:a2:c4:72:12:11:29:03:ee:d6:26:2a:a8:
4c:f9:bb:e7:ec:9d:88:5f:d3:12:11:e3:f5:c2:bd:d8:02:f0:
3e:93:05:73:bc:b2:17:ba:8f:94:31:d6:28:39:4e:93:06:2f:
f4:8f:8c:41:05:da:35:d8:b6:ed:56:96:cc:d3:ea:a9:4e:e1:
45:c8:8a:6b:a4:b2:df:1b:ec:db:c6:33:07:5f:df:ce:59:d2:
d6:29:51:13:e0:db:32:65:9c:0e:d2:69:b0:3a:34:44:90:be:
b0:8d:1c:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQTBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTAxMDkzNDQ1WhcNMjQxMjAxMDkzNDQ1WjAYMRYw
FAYDVQQDEw02NzI0YTBiOC0wMWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlkIEvEObbbJ3Lam4jQVJvZgrCUqa5IannNtnVu+paLNfCEzlq5mc8dez
fpthiSYw9xHLecVSONbgY1oUr8nvn2A44jSFyVy1RNZrIGLvlpbw5ENRhGQ10EWo
p/e4+RPX9/RR1FnRGt5VmF8mSdgvl4Lgaciv0nqa/iuiPuWy0COsjJRRCaplg4h4
+a7NboBF2W67S3h0DlKklgfye2R5dTonpGqPd4OkgdE16zjlj/gR4U1707+SDlRg
OnTk3Mn3cfIOwoOL3VHch4YcLFLLKzB/9Mbre7YlZkeFMnhd/5jb8My8tLLD8A+Z
dT7EwlIU1jVuuZBFNzuRQtLsyHGVXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIO6
BuXKTXHOKN6c/LLnGT7jEIGRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTRFNUY2QTk4MzQxMUVGOTkzMkY5NTc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsrwMA0GCSqGSIb3DQEB
CwUAA4IBAQAxn3nxUE24264DZVQN22RoiCp7sEy9NmPZPHSXkkpklQh0tnruqDgF
mxL34pSOez9A7yhoaJgZuPxAIRNi5Qg0lCbqhpzweK9rcHjxaMnPQxHPQb/ZxEnM
X/qKdG1YavmUk8VdkJYAB7lRP675lYio7adj6NFNfcTOiGiG0ZuMjx5Cw8NQC5Yg
X2DGXYsuGChlfbHhxJSixHISESkD7tYmKqhM+bvn7J2IX9MSEeP1wr3YAvA+kwVz
vLIXuo+UMdYoOU6TBi/0j4xBBdo12LbtVpbM0+qpTuFFyIprpLLfG+zbxjMHX9/O
WdLWKVET4NsyZZwO0mmwOjREkL6wjRxw
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org