Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9386BD34912111EFAFC8F344762E951A.roa
File: 9386BD34912111EFAFC8F344762E951A.roa (raw, json)
Hash identifier: Pf6tfPzki9UH7d3bzLF40uf7Nw5dO6hA5KlhXzxx/48=
Subject key identifier: 39:FE:42:29:0C:29:39:A3:A7:55:D8:E5:9E:F0:2A:2D:02:82:A7:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010106
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9386BD34912111EFAFC8F344762E951A.roa
Signing time: Wed 23 Oct 2024 09:31:27 +0000
ROA not before: Wed 23 Oct 2024 09:31:23 +0000
ROA not after: Fri 29 Nov 2024 09:31:23 +0000
asID: 203020
IP address blocks: 154.223.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65798 (0x10106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:31:23 2024 GMT
Not After : Nov 29 09:31:23 2024 GMT
Subject: CN=6718c26f-91a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:d0:61:98:42:74:b3:8e:ee:12:00:81:8a:
6c:ac:65:95:c4:8b:8f:e1:23:b4:1f:ba:a5:7b:23:
83:ec:d8:c0:df:c3:80:89:6d:be:73:71:8f:61:0b:
09:7d:3d:70:a0:b9:5c:f6:f5:6d:47:03:16:76:90:
9c:d5:b5:c9:f6:be:b8:2d:2c:78:5a:ee:f4:5d:a7:
7f:d3:24:db:37:11:ad:2f:0a:88:6c:58:93:c4:f9:
26:64:b3:ee:c3:97:aa:ac:ad:24:88:f6:27:9e:a2:
1a:ad:6d:81:11:30:ba:e5:34:2a:c3:93:08:d6:fa:
0f:e3:35:41:55:7f:6f:54:84:c6:37:72:c8:5c:06:
28:70:e3:7f:79:df:00:c4:d0:6b:46:97:34:af:8c:
64:22:85:9f:0a:58:c2:80:cd:9d:ac:53:b9:2f:94:
0e:19:9a:2c:6b:45:38:66:e2:3b:38:42:46:5a:fc:
98:b8:d6:b3:5f:fb:e1:84:17:33:d2:e8:03:dc:c3:
7d:51:46:11:c5:97:4c:09:bb:62:e4:93:ce:36:53:
31:9b:49:81:a9:b7:39:b1:81:4f:19:cb:e4:7d:3c:
04:8d:a7:26:7c:29:28:bb:ea:ba:45:c9:c4:12:f5:
ec:46:92:bc:79:81:87:23:bc:d4:6b:1d:17:3e:90:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:42:29:0C:29:39:A3:A7:55:D8:E5:9E:F0:2A:2D:02:82:A7:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9386BD34912111EFAFC8F344762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:1d:0a:5d:78:34:f6:f0:ba:ee:4d:1a:6d:ae:16:ed:7d:14:
4f:17:7a:81:32:42:19:9b:18:58:48:e6:2d:a6:35:a1:26:cf:
58:c9:74:0f:d5:2d:79:a0:3d:e5:3b:05:0d:0f:25:4d:ca:79:
32:9e:a3:07:8c:7a:31:d9:fd:ad:16:27:78:f4:e6:62:6e:c5:
4b:a2:7f:46:37:74:6d:94:17:48:80:14:27:90:cf:83:fc:81:
63:71:05:ab:e4:85:8a:d3:5a:76:45:16:f7:af:a9:42:c3:4f:
8a:f8:e4:ea:d0:9c:16:df:3d:f0:27:f4:07:7c:f1:eb:e3:e6:
98:63:21:c2:90:3a:b3:c9:f7:3f:54:69:9e:11:27:96:51:3b:
61:e1:3c:31:26:05:1c:16:fb:64:d8:ff:5b:e5:d0:4f:e7:1e:
f8:e6:8e:90:9d:29:98:17:c5:aa:a0:8f:95:19:64:27:9e:09:
a7:56:b1:49:db:2f:98:1d:9f:39:bd:03:a9:41:de:fc:af:07:
ea:64:32:d2:d5:d6:b3:fc:54:26:8d:f7:88:fa:b2:06:e0:b8:
5f:8d:0d:97:df:db:cc:e0:cb:2f:de:96:cc:6d:d0:10:ac:4b:
55:03:98:18:e8:94:44:08:b4:cd:86:51:e4:98:b5:fc:db:c3:
2e:3a:72:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQEGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIzMDkzMTIzWhcNMjQxMTI5MDkzMTIzWjAYMRYw
FAYDVQQDEw02NzE4YzI2Zi05MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzKDQYZhCdLOO7hIAgYpsrGWVxIuP4SO0H7qleyOD7NjA38OAiW2+c3GP
YQsJfT1woLlc9vVtRwMWdpCc1bXJ9r64LSx4Wu70Xad/0yTbNxGtLwqIbFiTxPkm
ZLPuw5eqrK0kiPYnnqIarW2BETC65TQqw5MI1voP4zVBVX9vVITGN3LIXAYocON/
ed8AxNBrRpc0r4xkIoWfCljCgM2drFO5L5QOGZosa0U4ZuI7OEJGWvyYuNazX/vh
hBcz0ugD3MN9UUYRxZdMCbti5JPONlMxm0mBqbc5sYFPGcvkfTwEjacmfCkou+q6
RcnEEvXsRpK8eYGHI7zUax0XPpDbOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDn+
QikMKTmjp1XY5Z7wKi0Cgqd0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Mzg2QkQzNDkxMjExMUVGQUZDOEYzNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmt+gMA0GCSqGSIb3DQEB
CwUAA4IBAQC0HQpdeDT28LruTRptrhbtfRRPF3qBMkIZmxhYSOYtpjWhJs9YyXQP
1S15oD3lOwUNDyVNynkynqMHjHox2f2tFid49OZibsVLon9GN3RtlBdIgBQnkM+D
/IFjcQWr5IWK01p2RRb3r6lCw0+K+OTq0JwW3z3wJ/QHfPHr4+aYYyHCkDqzyfc/
VGmeESeWUTth4TwxJgUcFvtk2P9b5dBP5x745o6QnSmYF8WqoI+VGWQnngmnVrFJ
2y+YHZ85vQOpQd78rwfqZDLS1daz/FQmjfeI+rIG4LhfjQ2X39vM4Msv3pbMbdAQ
rEtVA5gY6JRECLTNhlHkmLX828MuOnJB
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:15 2024 by rpki-client on console-ams.rpki-client.org