Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/926215B2A71E11EF86A6236C762E951A.roa
File: 926215B2A71E11EF86A6236C762E951A.roa (raw, json)
Hash identifier: /u8Ky+3Br4e+ufBTT8Nn2Wy6I0QPxtVRJtOXg/YK7Vs=
Subject key identifier: 9F:5B:00:A2:19:02:74:98:77:59:AB:03:F0:A3:BC:6B:E5:85:15:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010F53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/926215B2A71E11EF86A6236C762E951A.roa
Signing time: Wed 20 Nov 2024 09:05:22 +0000
ROA not before: Wed 20 Nov 2024 09:05:18 +0000
ROA not after: Thu 05 Dec 2024 09:05:18 +0000
asID: 5065
IP address blocks: 154.94.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69459 (0x10f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 20 09:05:18 2024 GMT
Not After : Dec 5 09:05:18 2024 GMT
Subject: CN=673da652-fe57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:c4:90:c4:44:d7:83:ad:6d:70:a9:fd:9a:
1f:93:45:74:88:e1:a1:19:85:3c:ba:ab:9a:8d:1a:
21:a5:4b:ff:da:f7:5e:71:e9:a5:6d:70:29:a8:2b:
ae:55:fe:b1:42:bd:9d:9b:42:05:6c:bb:fe:d5:cb:
85:e9:6a:c0:59:3e:b6:f7:b6:f1:c1:31:db:f8:66:
a6:bd:38:a9:2b:75:0b:c5:7a:50:45:5a:15:a4:38:
9f:93:d9:c2:c6:5f:f3:87:b4:5e:46:09:af:ac:f9:
cd:be:5a:45:a0:af:40:a6:28:31:85:a5:68:40:63:
bc:1c:c5:88:54:e2:6c:b3:82:b0:19:35:dc:90:8f:
da:e5:18:3a:41:11:ff:af:90:46:40:d0:44:78:a8:
44:bc:3c:30:c7:fd:69:a2:4a:b0:95:aa:eb:b1:4c:
09:5c:96:16:0b:45:c9:3b:f1:f7:d6:3e:94:cb:d3:
c1:ee:0e:5e:02:eb:20:9b:00:02:8d:c1:85:a4:37:
d5:f5:56:4f:29:5e:fc:ad:b0:51:03:db:de:f0:01:
28:ff:e3:f9:d8:02:86:0c:69:e3:4b:42:10:08:fc:
cf:8c:a3:07:82:9a:c3:f9:95:02:19:44:10:13:42:
08:39:43:9b:b0:c1:4b:9d:5a:ac:1d:01:5e:8b:9a:
f3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5B:00:A2:19:02:74:98:77:59:AB:03:F0:A3:BC:6B:E5:85:15:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/926215B2A71E11EF86A6236C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.34.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:78:6f:65:e6:73:91:d5:12:1a:83:f4:4e:9c:63:a8:41:69:
c4:e7:64:21:8d:90:90:83:56:66:2e:d4:fd:b4:bc:47:97:e4:
c5:84:56:a7:98:d1:5a:a6:81:27:67:a2:ad:0d:f0:6a:04:a7:
49:69:a7:08:0f:35:bb:f6:c5:5f:1b:7b:82:e4:6b:3c:ce:f1:
5f:65:df:a1:b4:b2:be:a4:4f:34:ec:3a:5a:38:e8:fd:6a:75:
e7:89:8f:0d:22:14:7b:a2:e6:18:7f:05:38:fa:e9:98:5e:28:
52:5e:df:5d:98:3f:19:0c:e0:f6:50:7d:ed:c1:e3:8c:8f:f7:
93:9a:e6:5c:ad:ed:0f:8e:67:ce:17:8f:bd:66:ba:00:e6:12:
36:85:e3:0f:75:e0:15:6f:c1:d8:41:e0:a1:9f:2e:47:d4:a6:
2f:01:65:d5:38:4b:6e:e0:1a:0a:c1:1f:a0:54:81:ff:7f:7b:
10:ef:55:a2:d8:d8:20:f8:96:cd:e7:1d:0e:6d:01:1a:e5:48:
1a:20:0d:27:99:ef:b4:c9:12:ce:4d:24:c8:48:24:46:89:b3:
4c:09:76:c4:cb:87:5a:7e:77:15:b4:b9:99:27:42:16:dd:7f:
90:54:66:a6:2a:98:10:c5:68:8b:5e:68:d2:98:08:90:ec:53:
d3:a9:a6:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ9TMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIwMDkwNTE4WhcNMjQxMjA1MDkwNTE4WjAYMRYw
FAYDVQQDEw02NzNkYTY1Mi1mZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxJHEkMRE14OtbXCp/Zofk0V0iOGhGYU8uquajRohpUv/2vdecemlbXAp
qCuuVf6xQr2dm0IFbLv+1cuF6WrAWT6297bxwTHb+GamvTipK3ULxXpQRVoVpDif
k9nCxl/zh7ReRgmvrPnNvlpFoK9ApigxhaVoQGO8HMWIVOJss4KwGTXckI/a5Rg6
QRH/r5BGQNBEeKhEvDwwx/1pokqwlarrsUwJXJYWC0XJO/H31j6Uy9PB7g5eAusg
mwACjcGFpDfV9VZPKV78rbBRA9ve8AEo/+P52AKGDGnjS0IQCPzPjKMHgprD+ZUC
GUQQE0IIOUObsMFLnVqsHQFei5rzNwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ9b
AKIZAnSYd1mrA/CjvGvlhRUYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85MjYyMTVCMkE3MUUxMUVGODZBNjIzNkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml4iMA0GCSqGSIb3DQEB
CwUAA4IBAQDUeG9l5nOR1RIag/ROnGOoQWnE52QhjZCQg1ZmLtT9tLxHl+TFhFan
mNFapoEnZ6KtDfBqBKdJaacIDzW79sVfG3uC5Gs8zvFfZd+htLK+pE807DpaOOj9
anXniY8NIhR7ouYYfwU4+umYXihSXt9dmD8ZDOD2UH3tweOMj/eTmuZcre0PjmfO
F4+9ZroA5hI2heMPdeAVb8HYQeChny5H1KYvAWXVOEtu4BoKwR+gVIH/f3sQ71Wi
2Ngg+JbN5x0ObQEa5UgaIA0nme+0yRLOTSTISCRGibNMCXbEy4dafncVtLmZJ0IW
3X+QVGamKpgQxWiLXmjSmAiQ7FPTqaYM
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:09:53 2024 by rpki-client on console-ams.rpki-client.org