Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E668664A0C911EFBB0B846C762E951A.roa
File: 9E668664A0C911EFBB0B846C762E951A.roa (raw, json)
Hash identifier: izOK9JMfrZ/knpzP+xrMRMbvF967qZ0l1tfzDUbewrg=
Subject key identifier: 02:A8:A4:2C:91:4C:CF:C0:57:0F:30:D0:36:E8:62:E4:DF:CC:E2:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010BF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E668664A0C911EFBB0B846C762E951A.roa
Signing time: Tue 12 Nov 2024 07:42:08 +0000
ROA not before: Tue 12 Nov 2024 07:42:04 +0000
ROA not after: Sat 14 Dec 2024 07:42:04 +0000
asID: 14315
IP address blocks: 154.92.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68594 (0x10bf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 07:42:04 2024 GMT
Not After : Dec 14 07:42:04 2024 GMT
Subject: CN=673306d0-262c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:61:77:88:f4:9b:1a:d5:68:b5:2b:12:5d:
46:b4:8d:7f:35:c3:17:73:40:50:e4:9d:c2:f3:ad:
6a:c2:0e:01:08:39:de:21:10:b2:ba:3f:4e:ea:db:
cd:dc:34:64:ee:3e:17:f4:43:8b:ce:5d:55:25:8d:
e0:f8:f7:b3:f3:a8:2b:07:86:57:ea:74:8b:71:b8:
03:e5:ae:42:26:45:2b:40:95:c2:d0:91:c7:76:2a:
02:da:fd:91:0f:87:38:cc:b1:dc:73:19:75:ca:fb:
31:b9:99:af:d1:5f:e8:fd:8a:07:e3:7c:30:a0:f4:
aa:c3:cc:a3:0f:56:e0:77:67:6c:56:a9:ad:d1:af:
e7:9d:ee:99:7a:84:9d:85:c7:2a:97:71:24:ec:53:
1f:4d:19:0f:42:c1:c2:f2:92:27:c4:87:fa:f7:40:
ce:54:70:0d:41:76:08:2a:57:88:a4:f6:3e:a4:98:
6a:ed:e8:90:d4:82:ef:4b:ad:af:9f:72:da:8e:f8:
80:f7:87:9b:12:1e:b7:af:72:dc:08:f0:d6:b5:06:
70:43:54:a7:1b:70:20:ac:26:f6:1a:5b:47:01:5f:
7b:23:6c:11:4f:43:b0:dd:ce:e9:26:aa:34:34:b2:
43:d0:da:80:cd:36:20:8f:03:f8:57:86:ee:f7:99:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:A4:2C:91:4C:CF:C0:57:0F:30:D0:36:E8:62:E4:DF:CC:E2:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E668664A0C911EFBB0B846C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1d:d0:10:55:1d:dc:70:ae:a4:3e:2d:e6:42:3b:a9:09:71:
ef:4a:b7:dd:e3:07:9b:b5:e0:99:79:51:47:e4:f4:60:7c:ca:
19:50:eb:23:40:80:bc:2b:9a:26:70:88:37:7f:f5:b7:3e:a5:
ca:46:e2:69:90:e7:59:59:09:0f:ad:07:ba:ef:87:5e:67:8c:
2a:5b:e9:9f:66:ab:6c:35:bc:45:52:57:2a:df:b8:aa:f7:6c:
2f:02:02:ea:13:19:9c:a3:a3:d6:58:ee:e1:ed:08:a1:b9:c9:
4a:91:6a:36:fa:07:30:0f:b9:15:1e:9f:70:30:03:94:e6:b5:
2e:4a:17:43:65:78:24:9e:4b:80:fe:ec:05:a6:be:49:83:30:
f6:d0:fe:99:b3:91:f1:f1:95:c4:d8:18:02:ef:20:46:ed:8d:
58:3f:3b:d4:9c:6e:ce:cb:79:cd:87:15:76:10:44:9a:e9:f8:
aa:2d:d9:59:bd:3b:eb:ed:56:56:b4:77:79:31:fe:7d:01:66:
3f:26:02:be:dc:47:61:85:95:7a:7d:fd:f3:d6:d8:52:c2:1a:
08:f6:6d:b2:7a:57:6d:54:da:aa:5a:2d:bc:7c:49:aa:e2:2e:
c1:52:ad:f0:a2:99:04:83:66:b4:d8:86:58:76:06:48:2b:90:
3d:ea:44:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQvyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEyMDc0MjA0WhcNMjQxMjE0MDc0MjA0WjAYMRYw
FAYDVQQDEw02NzMzMDZkMC0yNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyDRhd4j0mxrVaLUrEl1GtI1/NcMXc0BQ5J3C861qwg4BCDneIRCyuj9O
6tvN3DRk7j4X9EOLzl1VJY3g+Pez86grB4ZX6nSLcbgD5a5CJkUrQJXC0JHHdioC
2v2RD4c4zLHccxl1yvsxuZmv0V/o/YoH43wwoPSqw8yjD1bgd2dsVqmt0a/nne6Z
eoSdhccql3Ek7FMfTRkPQsHC8pInxIf690DOVHANQXYIKleIpPY+pJhq7eiQ1ILv
S62vn3LajviA94ebEh63r3LcCPDWtQZwQ1SnG3AgrCb2GltHAV97I2wRT0Ow3c7p
Jqo0NLJD0NqAzTYgjwP4V4bu95mpnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAKo
pCyRTM/AVw8w0DboYuTfzOIXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTY2ODY2NEEwQzkxMUVGQkIwQjg0NkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwBMA0GCSqGSIb3DQEB
CwUAA4IBAQA8HdAQVR3ccK6kPi3mQjupCXHvSrfd4webteCZeVFH5PRgfMoZUOsj
QIC8K5omcIg3f/W3PqXKRuJpkOdZWQkPrQe674deZ4wqW+mfZqtsNbxFUlcq37iq
92wvAgLqExmco6PWWO7h7QihuclKkWo2+gcwD7kVHp9wMAOU5rUuShdDZXgknkuA
/uwFpr5JgzD20P6Zs5Hx8ZXE2BgC7yBG7Y1YPzvUnG7Oy3nNhxV2EESa6fiqLdlZ
vTvr7VZWtHd5Mf59AWY/JgK+3EdhhZV6ff3z1thSwhoI9m2yeldtVNqqWi28fEmq
4i7BUq3wopkEg2a02IZYdgZIK5A96kTe
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:26 2024 by rpki-client on console-ams.rpki-client.org