Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1DCD2A06AA211EF92D20777762E951A.roa
File: B1DCD2A06AA211EF92D20777762E951A.roa (raw, json)
Hash identifier: YXb9QQq2hwf9wdlOrr7IuaIiWQsz7Wr6vqzOExQyx+g=
Subject key identifier: B4:1A:64:00:39:64:14:07:9A:8D:30:46:65:3A:65:AA:B9:44:67:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EA3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1DCD2A06AA211EF92D20777762E951A.roa
Signing time: Wed 04 Sep 2024 09:47:27 +0000
ROA not before: Wed 04 Sep 2024 09:47:24 +0000
ROA not after: Thu 24 Apr 2025 09:47:24 +0000
asID: 63888
IP address blocks: 154.207.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59965 (0xea3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 09:47:24 2024 GMT
Not After : Apr 24 09:47:24 2025 GMT
Subject: CN=66d82caf-42e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:ac:b7:28:22:a6:6a:2b:1d:f5:e1:ff:7a:
80:ac:08:6a:00:54:1b:1f:01:34:71:ce:bc:7c:1e:
04:ca:9e:7a:ee:29:13:fc:b4:13:dc:c1:53:af:06:
11:92:16:88:00:38:07:fd:e5:15:32:1f:e1:eb:cd:
71:6b:04:44:f4:93:71:ad:c4:03:b7:36:84:ad:ac:
8a:64:7a:c9:cd:e0:5d:92:29:c5:a8:d3:9c:0b:6a:
0d:bb:c3:3c:c9:19:3f:76:42:c2:e6:9e:52:44:20:
f0:7a:9e:a0:ea:d9:da:58:3c:e8:32:27:cf:30:06:
e5:bc:a0:73:cb:1d:df:82:63:32:74:ea:3a:fd:6f:
1c:c3:0b:0f:8d:aa:3f:fd:cf:1e:4f:32:49:a0:ea:
34:74:b7:12:68:3e:8a:32:fd:e4:d5:f8:d1:3a:3b:
ef:c1:d9:6e:17:91:16:d6:e0:f5:4c:91:20:10:3c:
3c:2a:4f:bf:02:88:77:cb:b3:fe:5a:3c:a6:6e:c8:
0a:c5:b7:3c:07:ce:fb:f0:d3:50:bb:8c:2b:01:b7:
82:22:cf:e9:fd:97:e5:55:6c:1b:7e:eb:90:8b:1a:
7a:e4:af:fe:0f:70:f0:2d:9f:41:7a:86:96:33:cb:
05:87:10:f4:ef:94:b5:da:75:e6:61:7f:87:a5:d1:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:64:00:39:64:14:07:9A:8D:30:46:65:3A:65:AA:B9:44:67:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1DCD2A06AA211EF92D20777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.226.0/23
Signature Algorithm: sha256WithRSAEncryption
94:a6:4f:96:95:2a:ba:34:3e:bc:c8:03:f7:8c:1d:fa:39:cd:
dd:26:f4:a1:76:e0:45:64:f8:ce:6f:47:09:68:16:01:fd:c3:
b8:df:ec:5d:6e:13:a8:f6:39:b9:99:c6:34:b6:23:b3:1d:47:
e5:36:2e:b2:3d:80:92:7b:a6:cc:ae:b3:db:9c:cf:43:e8:4d:
9b:dc:3e:c0:35:b6:20:c4:d5:f3:4c:d9:33:70:58:fe:12:34:
9c:cb:19:c5:39:c5:64:7a:fc:36:9d:c5:3c:e5:d9:e4:a5:f9:
6b:7b:38:4c:8c:b6:c1:b8:bd:c5:00:db:a6:22:86:96:24:59:
f7:4a:6e:5d:05:ce:05:51:fc:2f:e9:66:56:db:aa:ed:e1:9c:
c9:e4:75:98:40:75:21:1e:ca:fc:55:42:5c:97:33:c1:ed:9d:
21:78:08:62:e1:3c:9b:4b:18:54:f0:e1:be:08:ee:3e:23:45:
d8:8b:4d:4b:c0:b2:30:dc:8c:ca:86:8d:b4:f9:45:ff:bd:f4:
08:f1:f0:f8:9a:97:f1:2e:79:3d:43:2f:a3:81:8a:19:69:77:
a9:0b:93:77:42:34:c8:2b:1a:f9:ad:4e:8d:ce:df:22:af:40:
17:5d:c0:ff:07:e5:4f:fd:7c:b7:84:a9:2f:c7:ab:c3:54:9f:
6b:df:1e:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOo9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTA0MDk0NzI0WhcNMjUwNDI0MDk0NzI0WjAYMRYw
FAYDVQQDEw02NmQ4MmNhZi00MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy8SstygipmorHfXh/3qArAhqAFQbHwE0cc68fB4Eyp567ikT/LQT3MFT
rwYRkhaIADgH/eUVMh/h681xawRE9JNxrcQDtzaErayKZHrJzeBdkinFqNOcC2oN
u8M8yRk/dkLC5p5SRCDwep6g6tnaWDzoMifPMAblvKBzyx3fgmMydOo6/W8cwwsP
jao//c8eTzJJoOo0dLcSaD6KMv3k1fjROjvvwdluF5EW1uD1TJEgEDw8Kk+/Aoh3
y7P+WjymbsgKxbc8B8778NNQu4wrAbeCIs/p/ZflVWwbfuuQixp65K/+D3DwLZ9B
eoaWM8sFhxD075S12nXmYX+HpdHdrQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLQa
ZAA5ZBQHmo0wRmU6Zaq5RGelMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMURDRDJBMDZBQTIxMUVGOTJEMjA3Nzc3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms/iMA0GCSqGSIb3DQEB
CwUAA4IBAQCUpk+WlSq6ND68yAP3jB36Oc3dJvShduBFZPjOb0cJaBYB/cO43+xd
bhOo9jm5mcY0tiOzHUflNi6yPYCSe6bMrrPbnM9D6E2b3D7ANbYgxNXzTNkzcFj+
EjScyxnFOcVkevw2ncU85dnkpflrezhMjLbBuL3FANumIoaWJFn3Sm5dBc4FUfwv
6WZW26rt4ZzJ5HWYQHUhHsr8VUJclzPB7Z0heAhi4TybSxhU8OG+CO4+I0XYi01L
wLIw3IzKho20+UX/vfQI8fD4mpfxLnk9Qy+jgYoZaXepC5N3QjTIKxr5rU6Nzt8i
r0AXXcD/B+VP/Xy3hKkvx6vDVJ9r3x40
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:21 2024 by rpki-client on console-fra.rpki-client.org