Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D86E28C014311EFA291692F017001B1.roa
File: 9D86E28C014311EFA291692F017001B1.roa (raw, json)
Hash identifier: YgX2rXpRSBgq5ou7gDey5bvVABRUtXJwT4I//gyRvF0=
Subject key identifier: D7:15:58:64:F5:2B:7B:E3:9A:60:2D:A6:0A:5B:A9:87:68:34:90:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D86E28C014311EFA291692F017001B1.roa
Signing time: Tue 23 Apr 2024 07:32:19 +0000
ROA not before: Tue 23 Apr 2024 07:32:15 +0000
ROA not after: Sat 11 May 2024 07:32:15 +0000
asID: 9009
IP address blocks: 154.194.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44779 (0xaeeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:32:15 2024 GMT
Not After : May 11 07:32:15 2024 GMT
Subject: CN=66276403-7cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:1b:6b:82:de:f1:79:d5:38:d1:18:a7:04:
95:9f:ab:e9:3c:64:5c:b6:c5:65:cf:a5:e6:20:7d:
af:28:c0:d4:65:05:52:96:ba:51:50:79:59:97:8a:
32:b5:45:f7:0c:2c:a6:15:93:6f:3d:4f:c7:4a:37:
e2:9d:1d:42:ef:bb:89:2b:f7:02:ca:bd:7d:4a:58:
e0:ff:70:c4:ce:b9:d9:91:e9:43:75:8c:25:7b:84:
e8:8e:7a:3b:97:d5:f9:c6:3f:f1:4c:95:0e:ce:01:
ec:19:20:95:98:a7:5c:41:43:84:d4:20:44:82:74:
31:e6:af:b5:32:79:70:a5:86:3d:07:5a:67:32:50:
1f:86:ec:55:eb:f3:ee:21:64:21:31:bb:f8:e0:74:
57:78:80:d9:52:62:2e:71:d2:05:d1:4f:c1:53:86:
a0:a1:14:4d:5f:b2:ad:05:ad:e5:9b:17:8c:e6:7c:
f3:96:f7:88:1c:34:8c:86:c3:38:fd:22:18:7e:41:
6e:7b:4f:17:7b:ac:d0:56:ba:38:d7:ec:c8:43:fb:
b7:fe:57:3e:0b:44:76:39:c7:a7:c0:15:14:ce:a7:
c3:b0:9f:49:20:df:5e:8a:ed:40:30:08:87:5e:97:
bb:3d:39:e2:e3:bd:8d:51:c8:96:ef:03:f8:9c:a7:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:15:58:64:F5:2B:7B:E3:9A:60:2D:A6:0A:5B:A9:87:68:34:90:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D86E28C014311EFA291692F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:21:b6:b7:37:09:11:82:2e:2c:c9:fd:b3:7a:04:08:9f:15:
a3:e0:d7:16:e3:96:91:6c:df:f9:af:42:5b:61:ae:3b:d0:96:
c8:81:63:f7:78:40:16:03:b2:41:a9:43:e9:27:fc:78:ba:97:
08:2d:ea:6f:1d:0b:b3:7d:00:ec:0f:c0:56:46:70:8b:d9:78:
cf:50:ad:53:03:9c:1e:67:a1:a5:07:9e:22:be:d7:c4:dc:76:
4a:54:4a:be:7a:e1:ab:65:0c:65:c6:de:0d:9e:35:1f:1b:2b:
cc:8b:4f:e9:51:2d:68:a1:d6:12:b7:ec:af:17:05:6e:f7:bd:
e8:3f:70:ac:05:99:26:21:f1:75:56:ce:34:3c:7b:8e:9c:62:
f4:d5:1d:28:6c:06:ef:21:af:c3:bf:7c:2e:5a:54:6e:d5:d5:
cc:24:cb:56:50:30:ce:1e:9a:96:43:03:bd:b4:93:9e:3e:7e:
34:5f:74:d5:c1:de:52:1a:3e:f5:4e:04:0f:5d:63:ca:9d:7f:
10:71:b4:8a:c9:73:fb:b7:74:a5:e0:2f:46:49:72:5b:12:a4:
27:d2:54:65:b4:40:fb:7c:2c:9b:05:6b:f6:d1:88:5d:72:40:
9e:d5:30:5c:86:f1:a6:47:27:35:34:a0:60:74:66:fc:b3:9d:
50:db:0f:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK7rMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDIzMDczMjE1WhcNMjQwNTExMDczMjE1WjAYMRYw
FAYDVQQDEw02NjI3NjQwMy03Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1Kgba4Le8XnVONEYpwSVn6vpPGRctsVlz6XmIH2vKMDUZQVSlrpRUHlZ
l4oytUX3DCymFZNvPU/HSjfinR1C77uJK/cCyr19Sljg/3DEzrnZkelDdYwle4To
jno7l9X5xj/xTJUOzgHsGSCVmKdcQUOE1CBEgnQx5q+1MnlwpYY9B1pnMlAfhuxV
6/PuIWQhMbv44HRXeIDZUmIucdIF0U/BU4agoRRNX7KtBa3lmxeM5nzzlveIHDSM
hsM4/SIYfkFue08Xe6zQVro41+zIQ/u3/lc+C0R2OcenwBUUzqfDsJ9JIN9eiu1A
MAiHXpe7PTni472NUciW7wP4nKfZCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNcV
WGT1K3vjmmAtpgpbqYdoNJBRMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RDg2RTI4QzAxNDMxMUVGQTI5MTY5MkYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIKMA0GCSqGSIb3DQEB
CwUAA4IBAQC3Iba3NwkRgi4syf2zegQInxWj4NcW45aRbN/5r0JbYa470JbIgWP3
eEAWA7JBqUPpJ/x4upcILepvHQuzfQDsD8BWRnCL2XjPUK1TA5weZ6GlB54ivtfE
3HZKVEq+euGrZQxlxt4NnjUfGyvMi0/pUS1oodYSt+yvFwVu973oP3CsBZkmIfF1
Vs40PHuOnGL01R0obAbvIa/Dv3wuWlRu1dXMJMtWUDDOHpqWQwO9tJOePn40X3TV
wd5SGj71TgQPXWPKnX8QcbSKyXP7t3Sl4C9GSXJbEqQn0lRltED7fCybBWv20Yhd
ckCe1TBchvGmRyc1NKBgdGb8s51Q2w/6
-----END CERTIFICATE-----
Generated at Tue May 7 03:09:52 2024 by rpki-client on console-ams.rpki-client.org