Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A28B872A9C311EF99CE548D762E951A.roa
File: 8A28B872A9C311EF99CE548D762E951A.roa (raw, json)
Hash identifier: ppi1IYNpefMl1usJxFAtKGFfNgbeDp4Z67y81BmBlb0=
Subject key identifier: 29:20:6F:1D:E3:5E:70:5E:F0:C7:2E:FD:CC:32:AE:35:40:21:8C:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A28B872A9C311EF99CE548D762E951A.roa
Signing time: Sat 23 Nov 2024 17:51:17 +0000
ROA not before: Sat 23 Nov 2024 17:51:14 +0000
ROA not after: Mon 09 Dec 2024 17:51:14 +0000
asID: 5065
IP address blocks: 154.206.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70094 (0x111ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 17:51:14 2024 GMT
Not After : Dec 9 17:51:14 2024 GMT
Subject: CN=67421615-3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:e0:d8:b1:8f:e8:66:1b:96:e5:99:14:77:
1a:a1:00:7c:84:6d:25:4c:84:fe:0d:7b:8d:10:ba:
71:24:50:a8:26:e2:47:e1:78:f5:06:18:50:ab:55:
65:20:13:f2:ff:4a:b4:43:58:7b:6f:97:f8:74:aa:
0c:3c:59:64:26:8d:71:9a:41:20:09:84:1f:6d:7c:
24:42:de:ab:3e:4c:ff:a6:0c:45:c4:5c:b9:0c:df:
05:14:a3:99:df:e4:ac:02:b1:01:64:ab:a5:bb:e0:
59:7a:f9:8f:03:cc:6c:cc:37:72:36:bf:d2:a4:13:
88:3f:f0:e0:e6:33:f9:80:4a:d5:4a:9b:30:28:8f:
97:18:dc:b8:8a:cc:99:f0:24:37:a5:94:07:80:0c:
74:c2:84:97:da:60:1a:ab:dd:48:08:6e:0d:57:b2:
7b:40:36:9a:10:93:62:10:19:45:e0:44:ff:e3:d4:
9d:bf:2e:79:cb:e2:d0:90:82:b9:14:3e:0e:43:62:
e9:f2:c6:d4:5b:31:32:ab:0d:48:28:2a:8e:70:37:
65:df:d2:f9:29:42:1b:8b:31:cf:9f:3e:95:2f:79:
73:7e:34:7e:d5:1f:75:a4:90:a6:f8:cc:9e:c9:70:
fa:92:83:a8:03:f2:30:9b:ad:72:da:9b:c7:51:16:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:20:6F:1D:E3:5E:70:5E:F0:C7:2E:FD:CC:32:AE:35:40:21:8C:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A28B872A9C311EF99CE548D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2a:66:11:55:b4:ca:2b:bf:d0:8e:94:42:26:02:bb:cd:63:
d0:7c:1d:d2:6d:5c:d6:bc:ce:de:fb:bf:14:22:11:06:35:fa:
73:8d:26:7b:78:cc:97:f6:61:cc:73:a0:42:24:55:d2:4f:a5:
37:2d:3d:48:cc:38:c2:c4:f7:b8:1f:1f:ab:ab:16:be:35:91:
0a:42:e2:89:7f:9f:ad:0f:f2:e9:6a:bc:10:de:1b:a0:1d:db:
3d:f6:a6:ee:52:de:d6:96:0b:cb:9d:2b:0c:65:0b:0a:fd:26:
21:4b:0a:18:54:b4:ef:c5:b3:8b:5a:6c:7c:1b:7a:fe:b0:55:
70:60:ef:92:5f:10:30:af:da:38:b9:f8:f1:a3:e8:f7:52:62:
c3:4c:f7:6b:bc:52:52:5c:8c:32:f3:f8:08:18:68:fc:19:cd:
a5:db:1b:a1:bb:0f:f7:67:7a:53:9e:47:5b:4c:9d:87:97:90:
36:87:12:3d:fe:a3:bf:55:c5:06:cd:33:11:ac:e4:af:3c:9a:
5d:23:9f:1f:96:d9:e8:d6:29:e7:ac:f9:c7:2c:14:74:38:f7:
1d:da:c3:d5:ee:81:37:72:47:56:07:dd:e9:2e:26:99:12:3f:
b6:f0:f1:44:d5:21:dd:39:ae:61:b8:b1:50:7b:94:29:e3:cb:
5c:08:d3:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARHOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTc1MTE0WhcNMjQxMjA5MTc1MTE0WjAYMRYw
FAYDVQQDEw02NzQyMTYxNS0zZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWng2LGP6GYbluWZFHcaoQB8hG0lTIT+DXuNELpxJFCoJuJH4Xj1BhhQ
q1VlIBPy/0q0Q1h7b5f4dKoMPFlkJo1xmkEgCYQfbXwkQt6rPkz/pgxFxFy5DN8F
FKOZ3+SsArEBZKulu+BZevmPA8xszDdyNr/SpBOIP/Dg5jP5gErVSpswKI+XGNy4
isyZ8CQ3pZQHgAx0woSX2mAaq91ICG4NV7J7QDaaEJNiEBlF4ET/49Sdvy55y+LQ
kIK5FD4OQ2Lp8sbUWzEyqw1IKCqOcDdl39L5KUIbizHPnz6VL3lzfjR+1R91pJCm
+MyeyXD6koOoA/Iwm61y2pvHURaI2wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCkg
bx3jXnBe8Mcu/cwyrjVAIYzDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTI4Qjg3MkE5QzMxMUVGOTlDRTU0OEQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4lMA0GCSqGSIb3DQEB
CwUAA4IBAQAqKmYRVbTKK7/QjpRCJgK7zWPQfB3SbVzWvM7e+78UIhEGNfpzjSZ7
eMyX9mHMc6BCJFXST6U3LT1IzDjCxPe4Hx+rqxa+NZEKQuKJf5+tD/LparwQ3hug
Hds99qbuUt7WlgvLnSsMZQsK/SYhSwoYVLTvxbOLWmx8G3r+sFVwYO+SXxAwr9o4
ufjxo+j3UmLDTPdrvFJSXIwy8/gIGGj8Gc2l2xuhuw/3Z3pTnkdbTJ2Hl5A2hxI9
/qO/VcUGzTMRrOSvPJpdI58fltno1innrPnHLBR0OPcd2sPV7oE3ckdWB93pLiaZ
Ej+28PFE1SHdOa5huLFQe5Qp48tcCNPr
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:22 2024 by rpki-client on console-ams.rpki-client.org