Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1A6C76E74C111EF920B497D762E951A.roa
File: A1A6C76E74C111EF920B497D762E951A.roa (raw, json)
Hash identifier: mScAfZS+IBJ6Rb1H/4sJWmrV6eZCN6mBQt83O6GFVL4=
Subject key identifier: 19:0C:09:63:9F:F3:FF:C6:B5:9E:5A:44:9A:8E:9F:42:1B:C1:5F:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EFA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1A6C76E74C111EF920B497D762E951A.roa
Signing time: Tue 17 Sep 2024 06:54:06 +0000
ROA not before: Tue 17 Sep 2024 06:54:03 +0000
ROA not after: Wed 17 Sep 2025 06:54:03 +0000
asID: 142629
IP address blocks: 154.82.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61350 (0xefa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 06:54:03 2024 GMT
Not After : Sep 17 06:54:03 2025 GMT
Subject: CN=66e9278e-0978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:5e:6e:ee:20:28:3d:ea:26:c6:ae:ed:12:
24:4b:fa:c0:4a:84:a2:00:82:e5:3e:cf:bb:85:90:
51:18:26:7c:78:df:cf:f7:7e:e2:d3:d4:31:17:a4:
78:96:87:6b:94:e9:a4:bb:01:c4:d3:4f:d6:5e:ea:
a5:36:61:b3:44:39:14:c4:83:28:cf:8c:eb:b0:47:
ae:16:9f:2d:bc:b4:70:0a:c4:28:32:03:c9:86:06:
be:6f:73:fb:41:64:36:6b:e9:f6:ae:47:c6:da:65:
f1:1a:2a:00:bc:16:32:2d:59:b1:55:02:20:c8:fe:
ed:44:cd:92:56:6b:0b:bf:97:11:fa:87:cd:29:ad:
0c:a6:99:9c:1c:d3:46:83:e2:18:07:17:cf:52:1a:
88:de:2d:a0:85:51:0c:58:56:a2:1f:b0:82:0e:04:
d6:eb:c1:7f:61:80:86:89:00:a3:67:1e:1e:6a:bf:
6c:da:10:a7:ec:5b:3a:81:a5:d9:9c:8d:75:75:05:
4f:18:b5:b9:c8:97:5a:47:ca:67:48:41:bf:c3:da:
fe:f0:f8:09:2d:f2:c5:bd:e7:9e:85:48:7b:ee:58:
c6:bd:d1:2c:94:9d:af:b2:d3:2d:86:0b:37:28:de:
9a:55:ef:63:15:3a:e3:d7:3c:fa:b0:8a:04:7a:79:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:09:63:9F:F3:FF:C6:B5:9E:5A:44:9A:8E:9F:42:1B:C1:5F:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1A6C76E74C111EF920B497D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.133.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:31:44:12:2d:62:fe:ec:d1:52:8d:16:a1:5e:7e:fe:94:64:
05:a5:90:82:fb:f4:7d:55:6d:f9:8d:f7:eb:63:e3:2a:30:73:
05:98:23:26:38:23:e7:15:e3:c6:f7:c1:3d:90:3f:f3:4c:5f:
8d:af:cf:5c:cb:6b:9e:af:1c:de:3d:7f:51:bb:ea:53:74:54:
85:b7:ef:15:ff:5f:e0:a5:d4:1c:ec:b8:ba:59:7f:1c:a3:04:
e1:f1:fe:86:a7:01:8d:77:6e:0a:4e:7f:92:2a:82:8e:c2:4b:
62:4d:8d:e9:d9:33:9d:4b:54:c8:39:f6:1a:4d:d0:de:db:a9:
69:c9:64:46:a7:65:24:c5:60:2c:01:de:ea:0c:09:b3:6d:fd:
8f:91:fb:57:71:be:d8:6d:d2:ee:06:12:9d:71:c5:eb:af:d5:
7d:48:57:91:14:e5:59:31:04:35:74:91:82:13:aa:9e:44:f6:
a7:e3:11:b9:7a:7f:3e:b1:c4:74:3a:0b:58:cd:47:33:f9:15:
5f:10:59:2a:34:c1:61:99:0f:0d:d8:49:21:95:10:54:74:50:
7c:23:ce:53:8c:2e:dc:90:45:b4:4b:7b:db:ab:b1:fa:b9:dc:
24:be:8a:60:69:3d:13:74:fa:40:67:6f:6d:4e:1c:11:32:a1:
47:02:08:a1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO+mMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDY1NDAzWhcNMjUwOTE3MDY1NDAzWjAYMRYw
FAYDVQQDEw02NmU5Mjc4ZS0wOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0AZebu4gKD3qJsau7RIkS/rASoSiAILlPs+7hZBRGCZ8eN/P937i09Qx
F6R4lodrlOmkuwHE00/WXuqlNmGzRDkUxIMoz4zrsEeuFp8tvLRwCsQoMgPJhga+
b3P7QWQ2a+n2rkfG2mXxGioAvBYyLVmxVQIgyP7tRM2SVmsLv5cR+ofNKa0Mppmc
HNNGg+IYBxfPUhqI3i2ghVEMWFaiH7CCDgTW68F/YYCGiQCjZx4ear9s2hCn7Fs6
gaXZnI11dQVPGLW5yJdaR8pnSEG/w9r+8PgJLfLFveeehUh77ljGvdEslJ2vstMt
hgs3KN6aVe9jFTrj1zz6sIoEenmZwwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBkM
CWOf8//GtZ5aRJqOn0IbwV8lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMUE2Qzc2RTc0QzExMUVGOTIwQjQ5N0Q3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlKFMA0GCSqGSIb3DQEB
CwUAA4IBAQDIMUQSLWL+7NFSjRahXn7+lGQFpZCC+/R9VW35jffrY+MqMHMFmCMm
OCPnFePG98E9kD/zTF+Nr89cy2uerxzePX9Ru+pTdFSFt+8V/1/gpdQc7Li6WX8c
owTh8f6GpwGNd24KTn+SKoKOwktiTY3p2TOdS1TIOfYaTdDe26lpyWRGp2UkxWAs
Ad7qDAmzbf2PkftXcb7YbdLuBhKdccXrr9V9SFeRFOVZMQQ1dJGCE6qeRPan4xG5
en8+scR0OgtYzUcz+RVfEFkqNMFhmQ8N2EkhlRBUdFB8I85TjC7ckEW0S3vbq7H6
udwkvopgaT0TdPpAZ29tThwRMqFHAgih
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:26 2024 by rpki-client on console-ams.rpki-client.org