Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7A47B84A44F11EFA4C48DBF762E951A.roa
File: B7A47B84A44F11EFA4C48DBF762E951A.roa (raw, json)
Hash identifier: PYl76EF8FY/d8xFABJnQ8gkY1sv8rNdZFjjiPvY1MaQ=
Subject key identifier: 43:68:75:27:30:80:11:66:24:7B:2B:BE:93:04:1C:EE:18:1A:B2:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010E15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7A47B84A44F11EFA4C48DBF762E951A.roa
Signing time: Sat 16 Nov 2024 19:19:36 +0000
ROA not before: Sat 16 Nov 2024 19:19:31 +0000
ROA not after: Mon 25 Nov 2024 19:19:31 +0000
asID: 9009
IP address blocks: 154.95.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69141 (0x10e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 16 19:19:31 2024 GMT
Not After : Nov 25 19:19:31 2024 GMT
Subject: CN=6738f048-9833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:5c:db:57:54:47:4b:35:5d:44:10:38:7b:
92:cb:de:69:a1:06:79:ff:63:15:6e:45:18:dd:70:
d7:90:64:47:91:72:b1:9e:07:09:b9:9e:f1:b8:5a:
99:1f:03:a1:24:0c:4b:88:50:f9:2b:3b:35:bd:e5:
ca:37:fa:61:5b:07:8d:ce:e5:be:ad:d9:2e:66:7a:
1e:78:85:8f:d8:59:34:23:72:b0:5d:8c:4a:75:f0:
46:2e:7c:37:e7:04:56:2b:f1:a2:12:12:b8:f1:ca:
30:d1:1a:5d:61:e9:3e:cf:8d:70:2e:98:de:1d:80:
b2:58:b8:6a:5f:d5:17:fe:23:69:0d:42:94:16:02:
3e:60:38:2e:08:af:54:70:01:d5:80:19:4b:77:f9:
7d:ac:4e:d0:f6:54:27:3a:67:93:8c:a0:c4:44:2e:
2f:be:71:77:f5:d2:2b:50:6b:df:c0:45:aa:74:cf:
c1:aa:df:3a:b7:4a:dd:9a:77:88:09:e1:dc:c8:4c:
f6:a4:7e:f5:49:4f:14:78:65:0b:fd:e6:d7:f7:3d:
35:66:8e:b2:d5:ee:f3:de:24:08:d6:cd:9d:d2:ad:
64:37:40:04:89:4c:f0:d6:71:3d:04:46:2d:0e:d9:
28:bf:b0:ce:d0:66:69:01:b7:53:8c:18:34:76:aa:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:75:27:30:80:11:66:24:7B:2B:BE:93:04:1C:EE:18:1A:B2:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7A47B84A44F11EFA4C48DBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:b9:1e:04:dc:e2:ba:d0:2b:2b:86:ee:74:68:ab:d7:7a:d7:
dc:d5:29:1a:8c:c5:e6:01:5e:e9:a1:fb:c0:15:97:7a:91:33:
4f:52:df:58:c2:b9:90:5e:b4:a9:db:08:03:51:32:ee:8f:b7:
a2:a5:24:6c:be:43:25:4d:53:b3:dc:d1:d5:62:9e:f1:5c:14:
6b:2e:56:ca:47:04:14:cb:01:3c:73:42:1d:ec:4b:ba:21:2d:
85:a4:15:88:11:b3:47:d7:59:55:35:74:30:86:74:a5:72:8d:
93:86:23:d7:38:5f:a6:c3:48:53:4e:07:fd:c9:4d:a2:ad:eb:
db:15:92:1f:61:49:e0:c3:3f:d9:82:4d:8f:8a:aa:11:fc:cb:
c9:2d:4c:01:1b:6d:88:7b:8e:9a:ea:89:6e:93:8d:cc:a1:59:
24:8d:3d:f5:c3:da:2e:48:a2:fd:b6:8a:11:09:f6:fe:67:31:
0a:f2:0a:3d:6e:9a:bc:af:d6:a0:e6:0a:75:03:1f:ec:f7:53:
73:99:19:37:ed:2b:bb:5f:05:57:a5:0d:c0:ee:08:bc:da:37:
23:ef:dd:76:a2:b6:dd:8b:61:67:7d:70:37:65:c2:1e:2e:70:
00:af:db:78:bc:c7:31:b6:e2:8f:5b:eb:c6:c9:e9:44:65:78:
9c:9b:f6:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ4VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE2MTkxOTMxWhcNMjQxMTI1MTkxOTMxWjAYMRYw
FAYDVQQDEw02NzM4ZjA0OC05ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1txc21dUR0s1XUQQOHuSy95poQZ5/2MVbkUY3XDXkGRHkXKxngcJuZ7x
uFqZHwOhJAxLiFD5Kzs1veXKN/phWweNzuW+rdkuZnoeeIWP2Fk0I3KwXYxKdfBG
Lnw35wRWK/GiEhK48cow0RpdYek+z41wLpjeHYCyWLhqX9UX/iNpDUKUFgI+YDgu
CK9UcAHVgBlLd/l9rE7Q9lQnOmeTjKDERC4vvnF39dIrUGvfwEWqdM/Bqt86t0rd
mneICeHcyEz2pH71SU8UeGUL/ebX9z01Zo6y1e7z3iQI1s2d0q1kN0AEiUzw1nE9
BEYtDtkov7DO0GZpAbdTjBg0dqr1NwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFENo
dScwgBFmJHsrvpMEHO4YGrJUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CN0E0N0I4NEE0NEYxMUVGQTRDNDhEQkY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml8mMA0GCSqGSIb3DQEB
CwUAA4IBAQB8uR4E3OK60Csrhu50aKvXetfc1SkajMXmAV7pofvAFZd6kTNPUt9Y
wrmQXrSp2wgDUTLuj7eipSRsvkMlTVOz3NHVYp7xXBRrLlbKRwQUywE8c0Id7Eu6
IS2FpBWIEbNH11lVNXQwhnSlco2ThiPXOF+mw0hTTgf9yU2irevbFZIfYUngwz/Z
gk2PiqoR/MvJLUwBG22Ie46a6oluk43MoVkkjT31w9ouSKL9tooRCfb+ZzEK8go9
bpq8r9ag5gp1Ax/s91NzmRk37Su7XwVXpQ3A7gi82jcj7912orbdi2FnfXA3ZcIe
LnAAr9t4vMcxtuKPW+vGyelEZXicm/bP
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:02 2024 by rpki-client on console-ams.rpki-client.org