Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A476F12A9BB11EF995CCB5A762E951A.roa
File: 9A476F12A9BB11EF995CCB5A762E951A.roa (raw, json)
Hash identifier: J0L1aPxHufEMjVBnvLoaTqsuo1gizIv47N1EeGJ1YzE=
Subject key identifier: 9F:C5:E0:8E:DA:39:A9:58:DA:E1:94:3A:F4:06:B8:83:4C:65:31:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0111AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A476F12A9BB11EF995CCB5A762E951A.roa
Signing time: Sat 23 Nov 2024 16:54:28 +0000
ROA not before: Sat 23 Nov 2024 16:54:25 +0000
ROA not after: Mon 09 Dec 2024 16:54:25 +0000
asID: 9304
IP address blocks: 154.206.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70058 (0x111aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 23 16:54:25 2024 GMT
Not After : Dec 9 16:54:25 2024 GMT
Subject: CN=674208c4-6f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fe:b0:39:e6:91:77:05:86:19:94:fe:48:3f:
ab:aa:cd:06:c1:71:43:64:95:65:fd:93:9f:ac:25:
50:cf:6e:eb:fb:0c:41:37:6e:ce:61:dd:db:55:2d:
95:14:77:8f:fb:71:76:2c:d4:1f:9c:db:fa:93:d7:
be:ed:0f:7a:99:12:72:3c:b5:b0:a1:03:6f:1a:4a:
cb:61:43:e1:9a:be:69:53:09:32:71:35:fd:00:29:
c7:37:56:82:07:d9:b5:a5:0b:b4:e0:26:3d:ef:5e:
d9:23:52:e4:5d:b1:fd:e6:7e:fa:df:23:86:57:09:
40:a1:67:22:2d:b9:75:6a:0c:92:7c:34:bf:34:f2:
8a:8a:65:13:bf:95:85:e0:01:96:5b:ea:61:02:d6:
56:7f:18:1c:57:50:05:f3:ba:69:98:1b:53:7d:e6:
6d:e9:0b:dd:96:0c:fd:be:22:5d:54:fe:4b:59:6f:
ac:2b:af:b3:8d:3b:90:ad:ff:0f:b0:f6:cf:a3:da:
3d:c8:8b:33:c7:b8:ad:f9:76:69:72:19:78:7d:3c:
af:8f:50:05:a2:0d:73:48:44:de:71:23:80:4d:94:
6b:ed:b7:70:3b:20:2b:56:84:ae:76:4b:6f:e6:05:
6d:02:65:af:29:6d:e4:e5:55:1a:87:e8:e5:d4:df:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C5:E0:8E:DA:39:A9:58:DA:E1:94:3A:F4:06:B8:83:4C:65:31:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A476F12A9BB11EF995CCB5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.47.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bc:88:21:43:2a:2b:d8:d0:ba:20:59:07:5b:d9:c6:e6:ca:
87:bd:58:4c:62:64:73:04:d6:d3:02:ab:eb:89:39:1c:42:d6:
c2:9b:ed:32:67:bd:06:88:f6:45:01:fd:09:33:5c:dc:e3:11:
97:f5:c0:4d:1a:67:1e:c7:8d:c1:00:52:55:16:12:30:82:68:
e8:58:9a:7d:e8:7b:59:2e:49:5e:b4:12:d6:00:fb:5e:fd:47:
b1:9c:44:ad:90:48:85:30:fd:5e:26:b7:bb:d5:5a:1a:6a:a7:
a6:39:39:56:cc:7b:c5:a2:94:93:a5:7f:c0:69:22:27:a8:13:
4c:29:f0:ca:d5:b8:8b:9d:cc:d6:d8:2c:5a:4c:6a:4f:dc:20:
1d:8c:bf:8d:4e:f5:06:cd:b6:23:3d:fc:15:5a:0a:67:05:af:
0e:8e:bc:27:6d:1a:e7:cf:24:e9:be:10:f9:d2:44:72:77:86:
06:7d:f9:6d:bd:06:b0:b1:1c:b1:e6:5d:1d:0b:e4:17:9b:e0:
3a:1e:27:ff:97:79:ea:bc:3e:b0:22:a8:46:99:9a:1e:4f:be:
ed:af:64:0d:0b:53:84:73:a2:72:55:9d:e3:9d:5f:30:73:e3:
e6:2c:60:75:e4:07:12:f3:05:49:fa:d0:9b:aa:c5:af:72:10:
d9:57:7c:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDARGqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTIzMTY1NDI1WhcNMjQxMjA5MTY1NDI1WjAYMRYw
FAYDVQQDEw02NzQyMDhjNC02ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA+/6wOeaRdwWGGZT+SD+rqs0GwXFDZJVl/ZOfrCVQz27r+wxBN27OYd3b
VS2VFHeP+3F2LNQfnNv6k9e+7Q96mRJyPLWwoQNvGkrLYUPhmr5pUwkycTX9ACnH
N1aCB9m1pQu04CY9717ZI1LkXbH95n763yOGVwlAoWciLbl1agySfDS/NPKKimUT
v5WF4AGWW+phAtZWfxgcV1AF87ppmBtTfeZt6Qvdlgz9viJdVP5LWW+sK6+zjTuQ
rf8PsPbPo9o9yIszx7it+XZpchl4fTyvj1AFog1zSETecSOATZRr7bdwOyArVoSu
dktv5gVtAmWvKW3k5VUah+jl1N++kQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ/F
4I7aOalY2uGUOvQGuINMZTGeMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QTQ3NkYxMkE5QkIxMUVGOTk1Q0NCNUE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4vMA0GCSqGSIb3DQEB
CwUAA4IBAQAlvIghQyor2NC6IFkHW9nG5sqHvVhMYmRzBNbTAqvriTkcQtbCm+0y
Z70GiPZFAf0JM1zc4xGX9cBNGmcex43BAFJVFhIwgmjoWJp96HtZLkletBLWAPte
/UexnEStkEiFMP1eJre71VoaaqemOTlWzHvFopSTpX/AaSInqBNMKfDK1biLnczW
2CxaTGpP3CAdjL+NTvUGzbYjPfwVWgpnBa8OjrwnbRrnzyTpvhD50kRyd4YGfflt
vQawsRyx5l0dC+QXm+A6Hif/l3nqvD6wIqhGmZoeT77tr2QNC1OEc6JyVZ3jnV8w
c+PmLGB15AcS8wVJ+tCbqsWvchDZV3xP
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:25 2024 by rpki-client on console-ams.rpki-client.org