Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9492EB0A0D811EFABFEA84A762E951A.roa
File: A9492EB0A0D811EFABFEA84A762E951A.roa (raw, json)
Hash identifier: Xa6zziuJ772tTDSMECvwVxkAbZS7UO3Gf3Hei0Vn7Tg=
Subject key identifier: 28:16:41:13:6F:A8:A0:34:C0:77:0A:DC:A7:A4:D6:4A:B0:27:67:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9492EB0A0D811EFABFEA84A762E951A.roa
Signing time: Tue 12 Nov 2024 09:29:49 +0000
ROA not before: Tue 12 Nov 2024 09:29:45 +0000
ROA not after: Sat 07 Dec 2024 09:29:45 +0000
asID: 138915
IP address blocks: 154.223.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68628 (0x10c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:29:45 2024 GMT
Not After : Dec 7 09:29:45 2024 GMT
Subject: CN=6733200c-dce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:05:4f:42:0f:87:ec:5d:61:41:b0:2e:67:
99:ab:52:37:82:9e:42:72:37:54:93:81:3f:70:70:
87:cc:dd:81:4a:bf:ae:95:e7:b3:58:ab:4b:56:7b:
c9:bb:99:2a:a2:2f:91:7f:e6:e4:8d:7a:a2:22:57:
47:f4:4f:e9:40:d6:d4:97:86:9b:60:78:13:3a:b3:
7e:ba:bc:e8:e9:96:f1:8e:85:55:58:82:64:bb:68:
24:58:b7:d2:eb:16:23:51:32:9b:cd:7a:c1:84:06:
d2:d2:54:2b:d0:13:03:17:1b:5e:0e:13:87:2d:c3:
74:0d:d5:90:33:48:1e:95:c8:5f:ea:c9:f9:10:a3:
81:6f:2a:de:90:61:0f:ee:3e:ca:5c:f8:c7:02:78:
a9:33:98:ec:e1:fa:11:8b:8d:d2:f2:98:85:67:a5:
4c:61:0b:4d:2e:f5:74:64:28:4e:dc:7a:b6:43:1a:
67:3b:f7:4f:23:9b:38:51:bd:70:f6:3b:eb:26:d3:
cf:e4:c3:19:4c:4b:b9:b7:86:95:ef:02:42:38:00:
65:80:10:15:62:75:b3:1d:67:2c:2e:98:86:9a:a2:
61:dc:da:71:aa:d3:90:a0:b8:3b:4f:ed:ca:2d:59:
9a:e1:ae:e4:64:88:83:02:d3:d9:50:10:6d:b4:aa:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:41:13:6F:A8:A0:34:C0:77:0A:DC:A7:A4:D6:4A:B0:27:67:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9492EB0A0D811EFABFEA84A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.42.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:07:94:0f:36:39:c2:a2:b4:d5:d9:29:e0:66:15:a0:a1:73:
83:98:8d:d3:6e:3f:bf:47:15:e5:a4:2f:4c:44:be:83:52:cf:
ff:7e:41:49:60:d5:f3:1d:5c:3e:6b:a0:7a:9b:6d:66:cb:e2:
0a:8d:fb:16:1b:46:e9:79:d7:10:59:85:63:f2:9c:c4:96:11:
be:37:0f:7c:f2:15:f5:a3:e1:1f:12:71:34:2e:18:d3:76:9a:
32:93:cc:93:df:86:cb:ee:41:67:6a:5f:69:d4:b7:12:7b:d5:
09:bd:79:95:89:28:13:b5:11:94:f0:72:ce:79:18:f1:d3:f1:
54:53:ae:5b:e9:c4:93:7b:76:d1:f8:b8:08:3a:e8:2a:bb:ca:
a2:7b:de:3c:d2:b5:01:df:6f:55:bf:49:15:a0:6c:79:78:5b:
89:7b:be:dc:b8:06:c1:52:bb:c8:8c:ad:65:98:c4:d5:e7:75:
fa:2d:9b:a2:ee:a2:15:45:47:59:5d:ca:2a:63:fa:72:93:01:
35:60:bc:50:bc:bf:70:75:eb:b9:b1:51:9d:12:08:ce:cb:e8:
80:a9:b5:cd:35:17:db:18:78:78:0b:0e:ae:af:43:c9:3d:be:
f9:bb:67:9e:e5:bb:bb:a4:1b:4c:fb:4f:8f:fc:01:a3:dc:70:
aa:b6:4c:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQwUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEyMDkyOTQ1WhcNMjQxMjA3MDkyOTQ1WjAYMRYw
FAYDVQQDEw02NzMzMjAwYy1kY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwhYFT0IPh+xdYUGwLmeZq1I3gp5CcjdUk4E/cHCHzN2BSr+uleezWKtL
VnvJu5kqoi+Rf+bkjXqiIldH9E/pQNbUl4abYHgTOrN+urzo6ZbxjoVVWIJku2gk
WLfS6xYjUTKbzXrBhAbS0lQr0BMDFxteDhOHLcN0DdWQM0gelchf6sn5EKOBbyre
kGEP7j7KXPjHAnipM5js4foRi43S8piFZ6VMYQtNLvV0ZChO3Hq2QxpnO/dPI5s4
Ub1w9jvrJtPP5MMZTEu5t4aV7wJCOABlgBAVYnWzHWcsLpiGmqJh3NpxqtOQoLg7
T+3KLVma4a7kZIiDAtPZUBBttKos1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCgW
QRNvqKA0wHcK3Kek1kqwJ2dgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTQ5MkVCMEEwRDgxMUVGQUJGRUE4NEE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt8qMA0GCSqGSIb3DQEB
CwUAA4IBAQC3B5QPNjnCorTV2SngZhWgoXODmI3Tbj+/RxXlpC9MRL6DUs//fkFJ
YNXzHVw+a6B6m21my+IKjfsWG0bpedcQWYVj8pzElhG+Nw988hX1o+EfEnE0LhjT
dpoyk8yT34bL7kFnal9p1LcSe9UJvXmViSgTtRGU8HLOeRjx0/FUU65b6cSTe3bR
+LgIOugqu8qie9480rUB329Vv0kVoGx5eFuJe77cuAbBUrvIjK1lmMTV53X6LZui
7qIVRUdZXcoqY/pykwE1YLxQvL9wdeu5sVGdEgjOy+iAqbXNNRfbGHh4Cw6ur0PJ
Pb75u2ee5bu7pBtM+0+P/AGj3HCqtkzf
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:28 2024 by rpki-client on console-ams.rpki-client.org