Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3F37524A5711EFBFF76155762E951A.roa
File: 8B3F37524A5711EFBFF76155762E951A.roa (raw, json)
Hash identifier: okluPoa2b8SPuPTu/nn4EvaLJVyHyRXs2IVLCKMDXMU=
Subject key identifier: B7:71:BD:27:98:56:C6:C3:14:68:D8:7A:8D:14:BB:F2:EA:BD:C9:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D6C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3F37524A5711EFBFF76155762E951A.roa
Signing time: Thu 25 Jul 2024 07:28:53 +0000
ROA not before: Thu 25 Jul 2024 07:28:50 +0000
ROA not after: Fri 11 Jul 2025 07:28:50 +0000
asID: 136933
IP address blocks: 154.91.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54982 (0xd6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 07:28:50 2024 GMT
Not After : Jul 11 07:28:50 2025 GMT
Subject: CN=66a1feb5-584c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:8a:66:fe:f0:a0:7c:a5:50:79:ca:13:9e:
4f:30:af:fc:0b:88:92:9a:6d:b0:28:81:fb:b7:14:
f8:04:d9:80:a2:08:f5:35:a3:9b:4f:18:eb:bc:81:
c6:13:88:a9:15:6e:07:3d:10:50:da:25:db:de:44:
b1:29:10:33:30:a2:0e:e1:e5:1c:f5:d8:4c:75:eb:
27:9d:a6:c8:4a:54:cd:b4:0a:63:c4:fc:dd:ec:e3:
cd:57:1b:f1:cf:db:9d:0c:08:57:fd:a6:67:e7:74:
63:5c:7e:70:0f:bf:92:95:e8:9e:56:99:8c:a4:5a:
76:89:b4:eb:80:5d:b4:c4:64:bb:55:3e:4f:62:07:
3c:06:b0:9d:d8:a3:97:a4:2a:a8:a4:9a:93:75:23:
37:76:7d:6b:65:78:7a:cb:2a:88:f9:70:a9:01:70:
44:45:4d:92:bd:38:d7:27:d3:d6:2b:ca:6c:0d:0a:
b2:26:a5:ca:00:6f:7a:80:ea:4e:89:a5:2d:c7:66:
b7:22:44:5f:df:3f:16:a7:09:b8:35:21:e9:c1:eb:
fd:9d:ee:a2:e1:dd:4e:e8:76:60:4a:c9:01:e1:eb:
30:f0:eb:93:79:cc:46:67:39:13:a5:52:f5:e0:31:
57:f3:e3:f7:89:b5:f1:5f:b3:fe:b2:b8:c7:f9:b7:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:71:BD:27:98:56:C6:C3:14:68:D8:7A:8D:14:BB:F2:EA:BD:C9:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B3F37524A5711EFBFF76155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.192.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b8:65:07:32:ea:7d:01:a0:8d:94:93:18:6a:15:1b:7f:42:
af:0e:3b:94:a5:7c:14:2e:74:df:a0:c0:15:2a:ee:88:aa:b0:
38:18:e1:28:a2:13:73:ff:ce:d9:5c:55:27:b8:4f:3a:b2:ed:
39:15:be:18:ab:53:6a:4f:c0:c3:26:d9:0f:17:2f:7b:47:d0:
36:11:ba:97:7f:e8:36:55:c6:7e:37:a5:5b:2a:32:c9:b8:e8:
34:1b:5c:c5:34:c8:ae:33:4c:6e:15:e1:db:f1:06:5c:ff:f4:
61:95:04:3d:d3:c8:c8:f1:e1:3c:0e:77:64:75:ba:5b:a4:62:
d3:3d:30:ec:18:a3:0d:29:a7:6d:e3:83:1e:23:7a:c5:87:29:
b3:d8:72:07:b0:ed:b5:db:68:65:f9:7b:49:29:c9:d9:14:28:
91:6c:8d:bc:9a:5a:4d:58:ab:87:a9:e2:df:de:cd:94:dc:9f:
83:2b:e3:3a:ee:f8:2f:44:f6:bb:fe:6c:3e:21:9f:02:05:2e:
78:de:15:65:93:74:24:33:db:54:95:51:ae:c1:1a:71:4e:01:
64:7d:ea:02:9c:60:c0:78:38:96:b6:d6:4b:7d:06:07:93:b9:
8f:ff:11:46:0e:40:07:8b:55:af:70:de:34:3c:03:ff:81:4a:
6a:0f:c6:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANbGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzI1MDcyODUwWhcNMjUwNzExMDcyODUwWjAYMRYw
FAYDVQQDEw02NmExZmViNS01ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0QGKZv7woHylUHnKE55PMK/8C4iSmm2wKIH7txT4BNmAogj1NaObTxjr
vIHGE4ipFW4HPRBQ2iXb3kSxKRAzMKIO4eUc9dhMdesnnabISlTNtApjxPzd7OPN
Vxvxz9udDAhX/aZn53RjXH5wD7+SleieVpmMpFp2ibTrgF20xGS7VT5PYgc8BrCd
2KOXpCqopJqTdSM3dn1rZXh6yyqI+XCpAXBERU2SvTjXJ9PWK8psDQqyJqXKAG96
gOpOiaUtx2a3IkRf3z8Wpwm4NSHpwev9ne6i4d1O6HZgSskB4esw8OuTecxGZzkT
pVL14DFX8+P3ibXxX7P+srjH+bfqwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLdx
vSeYVsbDFGjYeo0Uu/LqvckJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QjNGMzc1MjRBNTcxMUVGQkZGNzYxNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlvAMA0GCSqGSIb3DQEB
CwUAA4IBAQARuGUHMup9AaCNlJMYahUbf0KvDjuUpXwULnTfoMAVKu6IqrA4GOEo
ohNz/87ZXFUnuE86su05Fb4Yq1NqT8DDJtkPFy97R9A2EbqXf+g2VcZ+N6VbKjLJ
uOg0G1zFNMiuM0xuFeHb8QZc//RhlQQ908jI8eE8DndkdbpbpGLTPTDsGKMNKadt
44MeI3rFhymz2HIHsO2122hl+XtJKcnZFCiRbI28mlpNWKuHqeLf3s2U3J+DK+M6
7vgvRPa7/mw+IZ8CBS543hVlk3QkM9tUlVGuwRpxTgFkfeoCnGDAeDiWttZLfQYH
k7mP/xFGDkAHi1WvcN40PAP/gUpqD8br
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:22 2024 by rpki-client on console-ams.rpki-client.org