Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A955E8892B111EF869E2099762E951A.roa
File: 8A955E8892B111EF869E2099762E951A.roa (raw, json)
Hash identifier: JmDgEfC+WYkeJwAl+uHJXTyjXqpAZYDC+qCfKV2bMAo=
Subject key identifier: 06:2F:F0:09:1E:DF:0B:2D:E7:E3:B6:B9:43:23:30:D8:1D:E2:BE:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0101D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A955E8892B111EF869E2099762E951A.roa
Signing time: Fri 25 Oct 2024 09:14:30 +0000
ROA not before: Fri 25 Oct 2024 09:14:27 +0000
ROA not after: Wed 27 Nov 2024 09:14:27 +0000
asID: 395793
IP address blocks: 154.200.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66002 (0x101d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 09:14:27 2024 GMT
Not After : Nov 27 09:14:27 2024 GMT
Subject: CN=671b6176-4332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:28:f6:79:45:93:82:df:06:c7:8f:66:79:
f8:0b:9e:d2:4c:66:bf:7f:10:7f:a1:d1:aa:71:e2:
90:09:a2:e1:3c:76:8a:d5:ff:f4:fe:02:04:40:96:
ed:b3:f2:55:81:fe:43:87:83:2f:ee:53:fa:12:33:
bb:57:9c:58:a5:5c:2c:f6:b2:2d:de:3f:0d:90:a8:
68:e2:40:c6:5e:ed:a9:b5:61:d4:9a:62:80:6d:db:
6f:41:50:a9:87:ce:e9:ca:73:67:3f:24:11:b0:49:
64:c2:a7:54:b5:2e:89:1e:b1:e1:ec:11:38:51:af:
44:53:55:4b:03:d7:02:3c:0b:b5:34:04:45:2a:86:
9b:7e:9f:77:b9:93:bd:47:32:99:cb:63:42:0c:70:
e6:6f:5f:2a:5a:4f:32:d7:8f:41:2d:14:a2:fc:bb:
43:57:16:a5:d2:44:d5:2f:19:20:47:7c:2a:38:e2:
79:3d:2e:c4:7a:44:13:40:b9:a3:8a:29:00:cf:c2:
76:42:73:48:1d:c5:86:93:dd:93:5d:0b:59:d2:b6:
07:dc:27:0c:5a:97:d3:2e:32:fe:d0:1d:56:3d:17:
8b:c1:58:3a:54:af:3c:cb:89:d6:19:a2:b2:4e:61:
c3:a1:6e:dc:76:b4:96:37:2f:a2:c1:11:31:cc:7f:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2F:F0:09:1E:DF:0B:2D:E7:E3:B6:B9:43:23:30:D8:1D:E2:BE:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A955E8892B111EF869E2099762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:2e:22:c2:4a:4b:a5:03:1b:9c:66:3e:04:0b:da:54:ac:79:
dd:38:9e:b1:cc:44:e6:29:90:98:1a:d2:25:3d:c1:a4:0c:9d:
57:96:7c:f2:4b:db:00:d5:9b:d4:56:9a:bc:da:b6:b9:f4:81:
d7:fe:c4:3b:d7:1a:a6:74:e3:fe:1f:23:6f:56:6b:97:0d:a5:
83:da:77:96:f2:25:3a:2f:34:0a:c8:c4:50:63:66:87:50:8f:
8d:e3:70:30:17:33:91:fb:ea:16:c4:70:6c:65:6f:bd:41:71:
f9:75:19:3f:53:d6:ab:d5:44:bf:fb:94:db:a5:1e:3d:9d:8d:
af:e3:03:52:31:e2:c8:5f:eb:ce:a6:c1:c8:c1:2f:3b:2e:44:
3b:8a:9b:2d:61:d0:ed:d5:d9:b4:db:66:01:ee:c0:55:fb:48:
6b:e7:7c:25:e0:a9:aa:74:db:c2:97:ed:64:94:8c:aa:cc:8c:
cc:ca:63:bd:7e:24:a6:55:ed:a4:90:71:5c:23:72:c8:9c:25:
4e:5d:89:2e:c7:e3:96:a0:26:46:f4:91:8b:c4:ae:83:e7:fd:
5e:2c:85:2d:44:4c:9c:df:7f:53:85:55:d7:83:cd:aa:1e:47:
33:54:3f:c5:80:d3:c3:a1:31:7f:39:91:3e:59:4e:2b:6e:9a:
8b:ae:54:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQHSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MDkxNDI3WhcNMjQxMTI3MDkxNDI3WjAYMRYw
FAYDVQQDEw02NzFiNjE3Ni00MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz7Eo9nlFk4LfBsePZnn4C57STGa/fxB/odGqceKQCaLhPHaK1f/0/gIE
QJbts/JVgf5Dh4Mv7lP6EjO7V5xYpVws9rIt3j8NkKho4kDGXu2ptWHUmmKAbdtv
QVCph87pynNnPyQRsElkwqdUtS6JHrHh7BE4Ua9EU1VLA9cCPAu1NARFKoabfp93
uZO9RzKZy2NCDHDmb18qWk8y149BLRSi/LtDVxal0kTVLxkgR3wqOOJ5PS7EekQT
QLmjiikAz8J2QnNIHcWGk92TXQtZ0rYH3CcMWpfTLjL+0B1WPReLwVg6VK88y4nW
GaKyTmHDoW7cdrSWNy+iwRExzH945wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAYv
8Ake3wst5+O2uUMjMNgd4r6QMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QTk1NUU4ODkyQjExMUVGODY5RTIwOTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsg4MA0GCSqGSIb3DQEB
CwUAA4IBAQCdLiLCSkulAxucZj4EC9pUrHndOJ6xzETmKZCYGtIlPcGkDJ1Xlnzy
S9sA1ZvUVpq82ra59IHX/sQ71xqmdOP+HyNvVmuXDaWD2neW8iU6LzQKyMRQY2aH
UI+N43AwFzOR++oWxHBsZW+9QXH5dRk/U9ar1US/+5TbpR49nY2v4wNSMeLIX+vO
psHIwS87LkQ7ipstYdDt1dm022YB7sBV+0hr53wl4KmqdNvCl+1klIyqzIzMymO9
fiSmVe2kkHFcI3LInCVOXYkux+OWoCZG9JGLxK6D5/1eLIUtREyc339ThVXXg82q
HkczVD/FgNPDoTF/OZE+WU4rbpqLrlSz
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:12 2024 by rpki-client on console-ams.rpki-client.org