Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B977909E717F11EEB696F5244AD9E6FC.roa
File: B977909E717F11EEB696F5244AD9E6FC.roa (raw, json)
Hash identifier: Nvlt5s9+5Ihyyfs8+e+wcsiQGv4+1MC+M3bcxthcCh0=
Subject key identifier: 33:55:47:8D:F3:25:D6:A8:0A:9A:06:E9:A7:AB:DB:9A:5F:69:5E:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 46A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B977909E717F11EEB696F5244AD9E6FC.roa
Signing time: Mon 23 Oct 2023 08:39:48 +0000
ROA not before: Mon 23 Oct 2023 08:39:45 +0000
ROA not after: Thu 17 Oct 2024 08:39:45 +0000
asID: 58879
IP address blocks: 154.91.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18085 (0x46a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 23 08:39:45 2023 GMT
Not After : Oct 17 08:39:45 2024 GMT
Subject: CN=65363154-37f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:a7:29:9e:23:74:99:eb:91:27:29:49:1b:
07:87:77:3b:7a:e9:08:2a:78:8d:c8:63:5f:16:fb:
40:ca:a9:d2:5c:c6:95:ec:b1:d9:01:aa:1f:99:a9:
a8:1f:7f:60:f7:75:71:3e:96:71:d2:44:13:7c:d3:
d1:be:99:9f:3b:86:ae:49:37:ef:06:86:5f:aa:81:
17:74:4d:be:f1:06:2f:b4:5f:43:0a:88:54:f4:b8:
7d:8e:21:53:66:3d:47:43:3d:b3:0a:59:10:ec:eb:
fa:ee:6b:8c:1f:80:e0:f3:1a:cd:c3:eb:ee:92:7c:
a5:42:ae:b9:0b:90:c7:08:98:b3:da:72:c2:f4:0f:
50:76:9b:91:b7:9e:7a:52:22:bd:e8:d1:90:95:aa:
88:80:6c:82:c4:2d:6d:03:2c:21:40:0c:dd:55:fe:
77:47:f4:68:e7:30:46:24:07:bf:0f:6d:06:8c:7c:
cb:3f:55:ae:50:e4:cb:fe:9b:dc:83:52:c5:ae:d4:
a9:ea:33:08:37:46:65:0d:57:7c:33:18:c6:85:0a:
6e:18:17:84:ed:42:e4:b1:ec:17:f6:3c:8d:af:52:
39:94:62:fc:e3:27:fb:51:c5:f2:56:02:29:b8:66:
9a:80:20:bd:67:ff:b0:ef:c5:e2:78:21:5e:d0:a4:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:47:8D:F3:25:D6:A8:0A:9A:06:E9:A7:AB:DB:9A:5F:69:5E:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B977909E717F11EEB696F5244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.34.0/24
Signature Algorithm: sha256WithRSAEncryption
84:92:49:d0:10:82:bd:19:f5:c8:3a:c7:bf:bd:f1:b9:82:a9:
9e:46:03:f5:be:90:bc:4b:38:5a:7c:48:0d:15:ad:0d:10:4c:
5f:ce:1b:eb:2c:b7:6d:49:0a:7f:7b:0c:a8:66:72:b0:83:5f:
96:40:f4:db:36:e2:c9:e2:ee:dc:63:85:fa:26:fd:c2:09:f0:
82:48:82:f0:fa:65:71:d0:39:ff:1b:a0:0b:a7:ea:27:a2:eb:
40:28:24:96:c0:f5:ab:ed:79:d8:9c:0d:0a:63:f5:e2:d7:c9:
76:9c:bb:36:22:86:56:e1:19:a6:3a:ea:04:15:3a:00:c3:50:
e3:35:47:89:ea:ea:c2:4d:eb:8e:b1:b4:04:e2:40:6b:33:37:
34:fa:56:52:8f:8c:f2:ff:bc:79:06:69:97:a1:40:23:12:dc:
b4:be:03:cb:78:6f:fc:ab:d8:e7:9f:92:0e:a0:6b:8d:45:cc:
7a:70:67:b1:37:41:60:44:c1:3d:29:25:2d:9f:66:45:f9:8c:
41:fe:4b:e0:8a:00:cc:eb:a4:8f:d6:3f:29:9e:dc:08:4b:77:
c6:14:60:d0:34:27:4a:60:96:42:72:29:7c:0f:6e:85:00:b8:
5f:f2:23:e6:77:87:2a:dc:13:98:ea:9e:ac:32:aa:88:37:5a:
60:53:1e:b0
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICRqUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEwMjMwODM5NDVaFw0yNDEwMTcwODM5NDVaMBgxFjAU
BgNVBAMTDTY1MzYzMTU0LTM3ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnDacpniN0meuRJylJGweHdzt66QgqeI3IY18W+0DKqdJcxpXssdkBqh+Z
qagff2D3dXE+lnHSRBN809G+mZ87hq5JN+8Ghl+qgRd0Tb7xBi+0X0MKiFT0uH2O
IVNmPUdDPbMKWRDs6/rua4wfgODzGs3D6+6SfKVCrrkLkMcImLPacsL0D1B2m5G3
nnpSIr3o0ZCVqoiAbILELW0DLCFADN1V/ndH9GjnMEYkB78PbQaMfMs/Va5Q5Mv+
m9yDUsWu1KnqMwg3RmUNV3wzGMaFCm4YF4TtQuSx7Bf2PI2vUjmUYvzjJ/tRxfJW
Aim4ZpqAIL1n/7DvxeJ4IV7QpPmlAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUM1VH
jfMl1qgKmgbpp6vbml9pXpMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0I5Nzc5MDlFNzE3RjExRUVCNjk2RjUyNDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaWyIwDQYJKoZIhvcNAQEL
BQADggEBAISSSdAQgr0Z9cg6x7+98bmCqZ5GA/W+kLxLOFp8SA0VrQ0QTF/OG+ss
t21JCn97DKhmcrCDX5ZA9Ns24sni7txjhfom/cIJ8IJIgvD6ZXHQOf8boAun6iei
60AoJJbA9avtedicDQpj9eLXyXacuzYihlbhGaY66gQVOgDDUOM1R4nq6sJN646x
tATiQGszNzT6VlKPjPL/vHkGaZehQCMS3LS+A8t4b/yr2Oefkg6ga41FzHpwZ7E3
QWBEwT0pJS2fZkX5jEH+S+CKAMzrpI/WPyme3AhLd8YUYNA0J0pglkJyKXwPboUA
uF/yI+Z3hyrcE5jqnqwyqog3WmBTHrA=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org