Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9092250E7B1F11EF918D0094762E951A.roa
File: 9092250E7B1F11EF918D0094762E951A.roa (raw, json)
Hash identifier: z3eKQ+AkK0pwWBia5QnckCCN1K3oQTVAj2lUiEy3mbg=
Subject key identifier: E9:4E:A9:B8:41:3C:84:31:E0:F7:3A:5D:83:C0:62:F7:2D:5F:EB:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F33C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9092250E7B1F11EF918D0094762E951A.roa
Signing time: Wed 25 Sep 2024 09:21:37 +0000
ROA not before: Wed 25 Sep 2024 09:21:33 +0000
ROA not after: Wed 18 Dec 2024 09:21:33 +0000
asID: 47890
IP address blocks: 154.214.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62268 (0xf33c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 25 09:21:33 2024 GMT
Not After : Dec 18 09:21:33 2024 GMT
Subject: CN=66f3d621-1f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:c3:17:6b:f1:0e:17:10:73:04:c0:27:ee:
4f:fc:2e:09:71:cd:71:91:96:f0:58:99:de:9e:35:
97:5a:b8:75:0e:28:4a:6e:fe:26:6c:ff:90:b7:cf:
87:18:60:2a:3b:cf:c6:c9:30:31:98:ad:19:9b:a1:
c0:1e:b4:27:e9:83:1a:e0:94:32:5b:b3:3a:6e:8e:
cc:3a:18:a7:1f:b2:4e:28:3f:a3:df:95:4a:f7:96:
21:a6:1c:48:ab:52:5f:71:31:9a:25:15:22:d2:48:
18:74:56:09:e3:21:e8:89:09:e8:9a:ba:cb:a5:c4:
7a:7b:55:63:46:44:bb:88:98:66:d9:80:c8:42:fc:
25:bc:3c:77:79:e2:e7:0b:fa:08:5b:b8:cd:4a:e7:
61:aa:4a:e7:f2:9b:e2:32:f4:90:bc:0f:a4:6c:1d:
44:da:14:24:d6:ac:b0:45:5f:bf:81:66:d8:29:66:
19:6e:9a:97:4e:2a:62:35:6d:ff:ef:90:6a:0d:fc:
69:04:94:7b:b9:84:8a:90:55:af:3e:67:09:88:7f:
38:4b:4d:d4:4a:09:5b:05:bf:21:6c:d2:df:bd:20:
d8:74:01:27:0e:7a:49:04:31:04:ee:df:6f:aa:03:
63:46:5b:4d:bd:83:22:27:c8:5a:f9:61:91:8f:2d:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:A9:B8:41:3C:84:31:E0:F7:3A:5D:83:C0:62:F7:2D:5F:EB:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9092250E7B1F11EF918D0094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.238.0/23
Signature Algorithm: sha256WithRSAEncryption
33:98:8b:0b:26:dc:be:27:c1:f1:bf:0f:58:a0:93:d5:cb:dd:
c9:4d:f0:32:70:51:20:85:8d:d1:4f:0f:c4:50:ad:fc:d0:5e:
c4:09:d2:f3:30:62:cd:39:c7:ab:7b:ec:85:61:9b:ed:d4:c8:
e1:8a:7d:71:e8:fc:84:ab:2d:13:77:ae:86:83:c8:09:82:3f:
99:cf:6c:e7:51:9e:f9:c9:f3:69:e1:44:3c:52:2d:d3:01:f2:
93:b6:8d:94:6f:19:17:07:a5:c1:b8:5e:4d:ce:83:e1:b4:de:
a2:7c:e5:44:ed:73:03:bf:04:ad:d4:b0:c0:ea:36:74:13:49:
1f:6b:f9:52:27:e7:8e:e2:37:a0:b6:b4:10:3c:4a:9a:43:5b:
e4:06:b3:9c:8d:3b:89:c3:59:df:83:c8:a6:94:b5:8e:ab:15:
1e:29:22:82:13:ec:c3:c7:3e:ba:8b:33:8d:4e:41:d5:c6:22:
77:04:0b:af:64:f9:bb:d4:77:30:ac:4f:d4:86:f2:26:1b:6b:
9b:94:4a:f6:af:51:55:62:4c:2c:d1:c8:28:af:60:83:60:2c:
ee:4a:b0:28:7f:96:44:94:09:c2:4a:ac:03:77:e6:8b:e5:15:
72:e1:5d:c5:69:f6:41:04:df:06:a9:7c:03:b8:ee:d8:61:12:
97:bf:0c:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPM8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTI1MDkyMTMzWhcNMjQxMjE4MDkyMTMzWjAYMRYw
FAYDVQQDEw02NmYzZDYyMS0xZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz8rDF2vxDhcQcwTAJ+5P/C4Jcc1xkZbwWJnenjWXWrh1DihKbv4mbP+Q
t8+HGGAqO8/GyTAxmK0Zm6HAHrQn6YMa4JQyW7M6bo7MOhinH7JOKD+j35VK95Yh
phxIq1JfcTGaJRUi0kgYdFYJ4yHoiQnomrrLpcR6e1VjRkS7iJhm2YDIQvwlvDx3
eeLnC/oIW7jNSudhqkrn8pviMvSQvA+kbB1E2hQk1qywRV+/gWbYKWYZbpqXTipi
NW3/75BqDfxpBJR7uYSKkFWvPmcJiH84S03USglbBb8hbNLfvSDYdAEnDnpJBDEE
7t9vqgNjRltNvYMiJ8ha+WGRjy2IjwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOlO
qbhBPIQx4Pc6XYPAYvctX+tQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MDkyMjUwRTdCMUYxMUVGOTE4RDAwOTQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtbuMA0GCSqGSIb3DQEB
CwUAA4IBAQAzmIsLJty+J8Hxvw9YoJPVy93JTfAycFEghY3RTw/EUK380F7ECdLz
MGLNOcere+yFYZvt1Mjhin1x6PyEqy0Td66Gg8gJgj+Zz2znUZ75yfNp4UQ8Ui3T
AfKTto2UbxkXB6XBuF5NzoPhtN6ifOVE7XMDvwSt1LDA6jZ0E0kfa/lSJ+eO4jeg
trQQPEqaQ1vkBrOcjTuJw1nfg8imlLWOqxUeKSKCE+zDxz66izONTkHVxiJ3BAuv
ZPm71HcwrE/UhvImG2ublEr2r1FVYkws0cgor2CDYCzuSrAof5ZElAnCSqwDd+aL
5RVy4V3FafZBBN8GqXwDuO7YYRKXvwyn
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:48 2024 by rpki-client on console-fra.rpki-client.org