Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B2D181492DC11EFA82D0FA3762E951A.roa
File: 9B2D181492DC11EFA82D0FA3762E951A.roa (raw, json)
Hash identifier: W1nrW9PW48hSVFtMMrGwi6WUeBdHD3W9TNK4l24pzfg=
Subject key identifier: 52:9F:57:22:54:B2:14:60:A5:A9:0C:45:0C:A3:A9:4F:00:B0:17:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010224
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B2D181492DC11EFA82D0FA3762E951A.roa
Signing time: Fri 25 Oct 2024 14:22:47 +0000
ROA not before: Fri 25 Oct 2024 14:22:43 +0000
ROA not after: Sun 01 Dec 2024 14:22:43 +0000
asID: 44559
IP address blocks: 154.209.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66084 (0x10224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 25 14:22:43 2024 GMT
Not After : Dec 1 14:22:43 2024 GMT
Subject: CN=671ba9b6-46c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:ca:43:29:d4:da:fd:60:fd:40:04:2d:5a:
fd:2a:b1:f4:3e:66:95:61:d0:09:83:44:6d:24:20:
82:94:d0:4e:3f:4b:fe:2f:2f:fe:e8:29:49:01:4c:
2e:79:3f:5f:79:85:9e:ae:d0:7e:1f:0a:cb:dd:b7:
bc:7d:2d:80:1e:b7:d9:60:39:91:f7:ed:57:d6:28:
16:e5:31:fb:34:d4:d7:c7:83:84:2d:e7:01:1a:17:
ff:f0:b3:a9:c3:d6:75:25:0d:18:f5:57:46:eb:17:
fe:e5:04:94:80:da:bc:62:4d:be:73:d0:12:fc:2f:
03:1e:cc:a1:a2:f3:9c:90:8e:7c:4d:28:f7:53:50:
b0:c7:9a:fd:3b:16:93:1b:b2:80:61:f4:b4:42:e6:
cc:78:37:00:83:ff:a3:3f:01:23:e7:31:3e:5a:f9:
ed:b0:00:c6:e2:ef:10:b8:e6:18:a2:26:4e:a5:54:
4b:9e:44:78:3e:90:b9:cd:93:fc:42:4a:6d:df:c7:
97:53:49:d0:be:1c:cb:b4:8b:d1:ba:86:f4:a5:62:
74:c0:40:85:b6:29:27:a7:bd:78:60:62:52:b3:da:
0c:31:5c:db:01:eb:fd:08:77:58:f7:6f:d7:f5:95:
f5:1e:7c:3b:7d:0c:b8:7a:3d:a3:c1:b2:16:7a:97:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:57:22:54:B2:14:60:A5:A9:0C:45:0C:A3:A9:4F:00:B0:17:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B2D181492DC11EFA82D0FA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.150.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:60:50:74:bf:f1:3c:53:e4:6e:d4:e2:30:81:67:07:2d:72:
22:d3:e2:6b:98:72:3e:d8:f7:b2:d8:3c:90:97:7b:c6:80:20:
c3:53:1c:26:5d:11:3a:db:6e:e9:6f:35:81:48:88:2c:49:2e:
55:72:7e:c4:59:1d:e2:6c:e8:8a:80:4e:a5:f6:46:44:24:38:
33:83:78:db:8c:fd:db:6e:27:18:0c:93:a7:27:ee:7d:e2:95:
d3:cd:cf:a1:e5:5c:2b:a1:78:51:37:ee:63:08:ab:05:1c:56:
b2:ea:c3:b2:64:8c:e2:63:79:f7:6e:2c:2e:76:fe:82:00:96:
83:cb:bb:c5:88:72:f0:a4:26:70:4a:3b:64:35:d8:47:c1:77:
fa:c1:04:a8:28:40:5b:68:2c:20:91:a4:57:95:a7:77:96:6c:
c6:f1:5a:77:78:ba:e5:c4:13:0e:e8:de:f0:6d:8b:50:c5:5f:
8e:52:0c:28:36:51:9e:73:d7:3f:80:b8:95:8a:c3:d8:29:5e:
91:1f:52:00:1f:c2:21:2e:78:07:ff:16:76:f2:aa:06:d1:d9:
68:b3:b5:24:2c:73:57:5f:4d:ff:8f:a3:a7:71:27:09:04:83:
5f:35:58:6c:29:05:08:76:d4:fe:19:d9:78:97:ca:fa:98:f2:
50:57:e4:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQIkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMDI1MTQyMjQzWhcNMjQxMjAxMTQyMjQzWjAYMRYw
FAYDVQQDEw02NzFiYTliNi00NmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxVDKQynU2v1g/UAELVr9KrH0PmaVYdAJg0RtJCCClNBOP0v+Ly/+6ClJ
AUwueT9feYWertB+HwrL3be8fS2AHrfZYDmR9+1X1igW5TH7NNTXx4OELecBGhf/
8LOpw9Z1JQ0Y9VdG6xf+5QSUgNq8Yk2+c9AS/C8DHsyhovOckI58TSj3U1Cwx5r9
OxaTG7KAYfS0QubMeDcAg/+jPwEj5zE+WvntsADG4u8QuOYYoiZOpVRLnkR4PpC5
zZP8Qkpt38eXU0nQvhzLtIvRuob0pWJ0wECFtiknp714YGJSs9oMMVzbAev9CHdY
92/X9ZX1Hnw7fQy4ej2jwbIWepeKjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFKf
VyJUshRgpakMRQyjqU8AsBdaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85QjJEMTgxNDkyREMxMUVGQTgyRDBGQTM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtGWMA0GCSqGSIb3DQEB
CwUAA4IBAQAPYFB0v/E8U+Ru1OIwgWcHLXIi0+JrmHI+2Pey2DyQl3vGgCDDUxwm
XRE6227pbzWBSIgsSS5Vcn7EWR3ibOiKgE6l9kZEJDgzg3jbjP3bbicYDJOnJ+59
4pXTzc+h5VwroXhRN+5jCKsFHFay6sOyZIziY3n3biwudv6CAJaDy7vFiHLwpCZw
SjtkNdhHwXf6wQSoKEBbaCwgkaRXlad3lmzG8Vp3eLrlxBMO6N7wbYtQxV+OUgwo
NlGec9c/gLiVisPYKV6RH1IAH8IhLngH/xZ28qoG0dlos7UkLHNXX03/j6OncScJ
BINfNVhsKQUIdtT+Gdl4l8r6mPJQV+S5
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:20 2024 by rpki-client on console-ams.rpki-client.org