Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9995AAF4912211EF973B7A4B762E951A.roa
File: 9995AAF4912211EF973B7A4B762E951A.roa (raw, json)
Hash identifier: 7j1J512W5OwgntPe4HyAwtBY5kKtR9TMaym6S0IoFpI=
Subject key identifier: 2A:06:A1:51:BF:49:D3:81:10:67:34:E6:92:19:76:EF:BB:4E:BF:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01010A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9995AAF4912211EF973B7A4B762E951A.roa
Signing time: Wed 23 Oct 2024 09:38:46 +0000
ROA not before: Wed 23 Oct 2024 09:38:43 +0000
ROA not after: Fri 29 Nov 2024 09:38:43 +0000
asID: 203020
IP address blocks: 154.223.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65802 (0x1010a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 09:38:43 2024 GMT
Not After : Nov 29 09:38:43 2024 GMT
Subject: CN=6718c426-d529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:67:47:c3:7e:8c:e8:aa:d7:1c:51:77:8e:
f8:ac:06:db:87:88:4c:53:9f:dd:ed:5f:b1:36:92:
3e:3b:c6:75:37:d5:7f:ad:3e:24:de:d6:5f:60:d1:
f4:22:a0:34:40:91:d1:fd:5c:70:2d:4a:fc:bf:78:
b3:11:00:a6:52:dc:ba:8d:97:49:43:82:5c:41:d1:
14:29:d6:4c:12:fa:08:c0:45:52:ab:3a:80:8d:6d:
18:f7:df:cc:69:da:1f:0a:b3:87:81:3c:bf:ba:86:
ad:f3:c6:49:ed:88:e8:3d:18:88:fb:06:fb:3c:f1:
99:44:8f:a8:0f:8e:b1:cc:af:a7:07:ef:cf:1b:6c:
dc:b3:18:5a:e9:72:8f:0b:3d:17:fe:37:a8:6f:ff:
6f:4d:9e:3a:60:91:a4:ca:40:07:89:64:de:aa:20:
e5:6b:30:9f:08:86:17:16:25:00:19:66:f5:64:aa:
3f:e6:4c:ec:52:b7:55:53:48:18:df:9f:53:d7:b4:
54:87:4e:ec:76:21:60:80:d0:0e:32:e9:0d:b2:36:
87:14:5c:fa:0f:62:59:fc:14:92:7e:0c:2d:c5:f1:
aa:a1:3c:f0:b8:5a:5f:c1:71:89:bf:73:35:0e:45:
88:0a:7c:50:86:33:c7:8c:21:1a:da:5f:00:f5:57:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:06:A1:51:BF:49:D3:81:10:67:34:E6:92:19:76:EF:BB:4E:BF:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9995AAF4912211EF973B7A4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cc:6c:03:8c:31:ae:90:af:4d:9c:a9:11:4b:c6:bc:5e:ee:
41:2d:c5:46:63:63:b5:bc:16:27:c2:45:b3:01:4a:b7:03:ae:
37:ba:eb:ec:e6:44:17:37:5e:2e:45:1e:d3:17:6b:25:53:d8:
7d:e6:49:4b:d6:9c:b4:ab:ed:7f:27:66:14:6b:56:63:98:f3:
13:11:00:79:d0:f7:b9:c3:83:e7:fe:20:e1:e9:e5:01:83:4d:
44:58:d9:4b:b8:f1:3e:49:05:de:ea:c4:c1:14:33:9f:2f:5d:
02:86:68:c2:29:b1:00:0c:2d:6e:c5:78:3b:42:47:b8:ae:df:
f6:e2:8f:f3:ce:5c:42:b7:dc:47:3e:96:3b:c2:33:87:19:e2:
14:20:e5:08:0b:7c:68:03:4b:f8:f8:fd:b0:2a:1e:9f:ea:19:
79:36:c8:78:19:68:23:de:df:fb:5b:dd:6c:4b:dc:d6:59:9e:
64:f5:37:36:2f:6a:2f:ca:cd:0b:bb:8f:43:60:2d:80:a2:ae:
4d:39:e8:aa:b4:d4:80:c5:7f:c3:d0:28:24:e2:b0:54:14:68:
bf:37:e5:a6:e9:58:83:2c:0e:e4:e8:81:d9:58:c4:1c:9e:58:
69:76:c2:52:7f:55:e6:10:92:98:53:85:92:3e:f1:62:ad:06:
4d:bd:db:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQEKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDIzMDkzODQzWhcNMjQxMTI5MDkzODQzWjAYMRYw
FAYDVQQDEw02NzE4YzQyNi1kNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuDNnR8N+jOiq1xxRd474rAbbh4hMU5/d7V+xNpI+O8Z1N9V/rT4k3tZf
YNH0IqA0QJHR/VxwLUr8v3izEQCmUty6jZdJQ4JcQdEUKdZMEvoIwEVSqzqAjW0Y
99/MadofCrOHgTy/uoat88ZJ7YjoPRiI+wb7PPGZRI+oD46xzK+nB+/PG2zcsxha
6XKPCz0X/jeob/9vTZ46YJGkykAHiWTeqiDlazCfCIYXFiUAGWb1ZKo/5kzsUrdV
U0gY359T17RUh07sdiFggNAOMukNsjaHFFz6D2JZ/BSSfgwtxfGqoTzwuFpfwXGJ
v3M1DkWICnxQhjPHjCEa2l8A9Ve2qQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCoG
oVG/SdOBEGc05pIZdu+7Tr87MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85OTk1QUFGNDkxMjIxMUVGOTczQjdBNEI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt+JMA0GCSqGSIb3DQEB
CwUAA4IBAQA+zGwDjDGukK9NnKkRS8a8Xu5BLcVGY2O1vBYnwkWzAUq3A643uuvs
5kQXN14uRR7TF2slU9h95klL1py0q+1/J2YUa1ZjmPMTEQB50Pe5w4Pn/iDh6eUB
g01EWNlLuPE+SQXe6sTBFDOfL10ChmjCKbEADC1uxXg7Qke4rt/24o/zzlxCt9xH
PpY7wjOHGeIUIOUIC3xoA0v4+P2wKh6f6hl5Nsh4GWgj3t/7W91sS9zWWZ5k9Tc2
L2ovys0Lu49DYC2Aoq5NOeiqtNSAxX/D0Cgk4rBUFGi/N+Wm6ViDLA7k6IHZWMQc
nlhpdsJSf1XmEJKYU4WSPvFirQZNvdvp
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:17 2024 by rpki-client on console-fra.rpki-client.org