Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9500C94C74D011EF8EE3045A762E951A.roa
File: 9500C94C74D011EF8EE3045A762E951A.roa (raw, json)
Hash identifier: gLyGCGqS10SjdHVDrQv7D8PKWPF73fHMMTAzqj2TmDU=
Subject key identifier: A2:57:54:33:0C:58:7F:23:21:2F:CB:3A:6B:6B:8A:D9:0C:23:07:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F01E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9500C94C74D011EF8EE3045A762E951A.roa
Signing time: Tue 17 Sep 2024 08:41:07 +0000
ROA not before: Tue 17 Sep 2024 08:41:04 +0000
ROA not after: Sat 30 Nov 2024 08:41:04 +0000
asID: 142403
IP address blocks: 154.92.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61470 (0xf01e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:41:04 2024 GMT
Not After : Nov 30 08:41:04 2024 GMT
Subject: CN=66e940a3-e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:e8:9f:97:09:8d:b9:f5:9d:13:11:9d:68:
7a:db:a9:5d:25:63:6a:32:21:a6:33:ae:bc:b6:25:
b2:e9:bb:6f:16:d4:f6:61:78:a3:3c:63:c6:19:2d:
39:2b:fe:7b:83:ac:b5:d1:c7:e9:05:ce:db:01:e1:
3a:2a:12:31:30:c1:56:73:80:27:8f:8e:19:c2:d8:
88:c4:07:99:2a:2a:14:f3:b8:d7:f3:fc:d6:3f:b6:
e3:e7:3c:01:38:69:92:99:5a:7b:1b:1d:82:4b:e0:
d0:7a:d1:29:0b:27:10:09:49:02:1e:34:de:30:c7:
0e:02:d7:86:21:75:1d:95:db:25:08:5e:8d:0e:60:
59:e7:87:c3:25:24:86:fc:46:86:f6:3b:13:34:2d:
a3:f0:63:38:cc:6f:90:90:a5:2f:95:e4:d1:e2:a8:
0a:ed:f4:6a:e7:8e:8b:75:4d:f5:30:f3:97:fa:fd:
fe:98:13:fb:e5:01:45:32:65:37:ca:06:8a:a4:15:
ef:37:2f:f3:d8:e3:3a:c7:45:7a:3f:65:0d:b4:e8:
4d:58:37:ac:48:6f:c7:43:0f:10:f0:03:46:e2:17:
0b:57:03:4b:29:15:94:c8:fb:6b:61:28:39:52:98:
54:d9:db:b6:7f:b0:16:4c:1b:05:dd:03:43:c2:b4:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:54:33:0C:58:7F:23:21:2F:CB:3A:6B:6B:8A:D9:0C:23:07:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9500C94C74D011EF8EE3045A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.17.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0f:ef:c0:b5:78:e1:4b:f3:4b:f8:51:d4:a2:ee:01:e7:97:
56:2a:a8:98:06:5a:1a:98:46:c4:c0:e6:4f:3c:82:c1:f7:2c:
a4:21:c0:ce:90:f5:97:87:6f:da:5e:96:a1:e5:d2:19:f4:9a:
1e:a2:85:01:83:ab:cd:65:7a:92:d9:fb:91:a2:7e:d2:f8:08:
c8:90:7b:17:36:25:09:dc:0f:8b:c9:eb:5e:5c:88:fe:b2:46:
42:ac:e5:90:c6:d3:4e:b8:55:af:17:3d:b7:c2:74:f9:db:0d:
7a:83:10:37:35:67:4f:7e:b8:13:1f:be:a7:fa:af:bb:35:d0:
df:43:4c:76:c7:e8:33:37:af:59:94:b1:7e:9f:a3:c0:3f:de:
f5:20:04:00:65:73:b0:6a:24:c2:14:3d:c8:f7:2e:57:00:f1:
f3:df:a2:bc:16:ee:24:7a:6e:90:26:43:5c:9d:55:8d:6e:9b:
52:b8:ea:df:f7:04:fa:b7:a9:a7:54:04:fa:e9:91:76:f0:83:
be:82:a2:2a:0b:2b:13:d5:54:d8:23:7f:51:39:b5:03:60:62:
4d:7a:dd:08:0f:2e:08:63:06:cb:49:80:71:c8:4b:f6:e8:74:
b1:0c:1e:6f:52:2d:9f:a9:4a:16:61:3b:ff:d0:6e:c9:9d:9e:
e7:ca:28:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPAeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDg0MTA0WhcNMjQxMTMwMDg0MTA0WjAYMRYw
FAYDVQQDEw02NmU5NDBhMy1lNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0nnon5cJjbn1nRMRnWh626ldJWNqMiGmM668tiWy6btvFtT2YXijPGPG
GS05K/57g6y10cfpBc7bAeE6KhIxMMFWc4Anj44ZwtiIxAeZKioU87jX8/zWP7bj
5zwBOGmSmVp7Gx2CS+DQetEpCycQCUkCHjTeMMcOAteGIXUdldslCF6NDmBZ54fD
JSSG/EaG9jsTNC2j8GM4zG+QkKUvleTR4qgK7fRq546LdU31MPOX+v3+mBP75QFF
MmU3ygaKpBXvNy/z2OM6x0V6P2UNtOhNWDesSG/HQw8Q8ANG4hcLVwNLKRWUyPtr
YSg5UphU2du2f7AWTBsF3QNDwrQjLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKJX
VDMMWH8jIS/LOmtritkMIwc4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85NTAwQzk0Qzc0RDAxMUVGOEVFMzA0NUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwRMA0GCSqGSIb3DQEB
CwUAA4IBAQBWD+/AtXjhS/NL+FHUou4B55dWKqiYBloamEbEwOZPPILB9yykIcDO
kPWXh2/aXpah5dIZ9JoeooUBg6vNZXqS2fuRon7S+AjIkHsXNiUJ3A+LyeteXIj+
skZCrOWQxtNOuFWvFz23wnT52w16gxA3NWdPfrgTH76n+q+7NdDfQ0x2x+gzN69Z
lLF+n6PAP971IAQAZXOwaiTCFD3I9y5XAPHz36K8Fu4kem6QJkNcnVWNbptSuOrf
9wT6t6mnVAT66ZF28IO+gqIqCysT1VTYI39RObUDYGJNet0IDy4IYwbLSYBxyEv2
6HSxDB5vUi2fqUoWYTv/0G7JnZ7nyihV
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:16 2024 by rpki-client on console-fra.rpki-client.org