Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FBF2F5247E111EF8869AF9B762E951A.roa
File: 9FBF2F5247E111EF8869AF9B762E951A.roa (raw, json)
Hash identifier: D5hAVkSwQwgX0qa1SLtv91Oys3OOA7PXC4Jsi7PNHHM=
Subject key identifier: FE:23:43:1B:F0:2B:EC:36:63:88:8D:EC:B7:59:36:24:0B:D3:83:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D48C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FBF2F5247E111EF8869AF9B762E951A.roa
Signing time: Mon 22 Jul 2024 04:19:44 +0000
ROA not before: Mon 22 Jul 2024 04:19:41 +0000
ROA not after: Mon 24 Feb 2025 04:19:41 +0000
asID: 996
IP address blocks: 154.205.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54412 (0xd48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 04:19:41 2024 GMT
Not After : Feb 24 04:19:41 2025 GMT
Subject: CN=669ddde0-cb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:80:64:aa:f4:fd:92:da:90:7a:6f:fa:89:
53:fa:22:ba:99:af:e3:a6:4a:b2:51:7c:9f:e9:00:
ea:ee:02:e0:2f:2a:ad:72:97:26:8f:56:65:35:16:
cd:36:02:cd:09:4c:76:03:16:a1:90:d8:1e:8f:7c:
ce:2f:d4:b0:42:6c:f7:82:c6:1a:83:35:28:9a:89:
60:72:c9:6d:13:d5:e7:89:04:f6:d7:34:71:98:67:
e0:7a:6b:35:1b:93:fb:3f:5a:60:4f:71:d1:10:38:
e1:90:4d:d1:64:7a:59:be:9e:aa:4b:92:ac:bf:db:
fa:18:28:d4:6e:e8:42:96:d3:9a:c3:03:ff:a7:5d:
82:f2:66:14:1c:30:66:84:c1:e5:3a:f3:9d:4c:2d:
5b:2c:30:a9:3f:d5:12:a0:f3:45:1f:8a:92:b4:33:
b0:af:41:27:f2:ad:77:1a:2b:99:b2:55:5d:19:b0:
bc:cd:5c:3b:0a:f9:1d:01:2b:04:81:ed:7f:77:c4:
48:b5:65:92:ec:99:b5:55:c5:89:6e:c5:69:d2:0f:
24:e8:1f:6f:12:d0:70:41:bc:0f:58:2c:7c:81:c6:
b3:1b:39:26:6c:c8:f6:4e:42:9c:4d:c1:44:ec:24:
fb:67:c3:6f:cc:22:f6:6c:67:0a:06:db:5d:3f:2e:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:43:1B:F0:2B:EC:36:63:88:8D:EC:B7:59:36:24:0B:D3:83:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FBF2F5247E111EF8869AF9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.184.0/23
Signature Algorithm: sha256WithRSAEncryption
93:1f:78:fb:80:41:4c:b5:0d:69:33:4c:d7:48:41:32:9c:b9:
27:b1:d6:dd:e8:61:8c:48:77:67:2e:e4:e5:ad:e2:9b:26:dc:
73:6f:6e:ba:5c:8e:be:0a:14:73:be:d0:45:ed:ef:45:c5:fa:
2e:bd:ee:7a:16:f1:e4:7d:7a:a8:f9:a0:bc:1c:1e:5a:8a:00:
18:57:57:81:62:32:d9:c9:f4:e7:44:2a:4a:1b:57:eb:c8:65:
90:4a:4c:d8:d3:7a:62:7d:60:57:57:09:00:18:ce:ed:4c:40:
7a:8e:36:a8:69:d9:89:55:0f:d7:00:40:a4:a9:60:cf:d0:a7:
eb:e1:59:64:27:29:4b:6f:4e:49:eb:de:75:20:6c:37:63:55:
20:cc:73:72:c2:84:d7:4a:1e:b2:3b:3e:4d:02:02:b6:aa:dd:
3a:cb:61:61:03:a3:bf:7e:32:98:02:8c:7b:ab:e9:93:33:47:
aa:0c:01:cb:30:86:0a:c5:84:b2:c4:cf:8b:e8:2d:bc:5f:aa:
60:a8:dc:c7:1d:27:b4:da:4b:4e:4a:8f:58:97:34:01:39:25:
8f:64:c4:b7:1b:6a:72:5c:39:9a:d3:f5:fc:fa:78:1e:0a:9c:
f4:54:b2:bf:f8:84:84:7f:09:c3:f2:00:fa:de:73:c7:02:c8:
57:51:27:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANSMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzIyMDQxOTQxWhcNMjUwMjI0MDQxOTQxWjAYMRYw
FAYDVQQDEw02NjlkZGRlMC1jYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz7yAZKr0/ZLakHpv+olT+iK6ma/jpkqyUXyf6QDq7gLgLyqtcpcmj1Zl
NRbNNgLNCUx2AxahkNgej3zOL9SwQmz3gsYagzUomolgcsltE9XniQT21zRxmGfg
ems1G5P7P1pgT3HREDjhkE3RZHpZvp6qS5Ksv9v6GCjUbuhCltOawwP/p12C8mYU
HDBmhMHlOvOdTC1bLDCpP9USoPNFH4qStDOwr0En8q13GiuZslVdGbC8zVw7Cvkd
ASsEge1/d8RItWWS7Jm1VcWJbsVp0g8k6B9vEtBwQbwPWCx8gcazGzkmbMj2TkKc
TcFE7CT7Z8NvzCL2bGcKBttdPy6WpQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP4j
QxvwK+w2Y4iN7LdZNiQL04M3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RkJGMkY1MjQ3RTExMUVGODg2OUFGOUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms24MA0GCSqGSIb3DQEB
CwUAA4IBAQCTH3j7gEFMtQ1pM0zXSEEynLknsdbd6GGMSHdnLuTlreKbJtxzb266
XI6+ChRzvtBF7e9Fxfouve56FvHkfXqo+aC8HB5aigAYV1eBYjLZyfTnRCpKG1fr
yGWQSkzY03pifWBXVwkAGM7tTEB6jjaoadmJVQ/XAECkqWDP0Kfr4VlkJylLb05J
6951IGw3Y1UgzHNywoTXSh6yOz5NAgK2qt06y2FhA6O/fjKYAox7q+mTM0eqDAHL
MIYKxYSyxM+L6C28X6pgqNzHHSe02ktOSo9YlzQBOSWPZMS3G2pyXDma0/X8+nge
Cpz0VLK/+ISEfwnD8gD63nPHAshXUSdY
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:18 2024 by rpki-client on console-fra.rpki-client.org