Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2634B1C9B8111EFB4A1C8AB762E951A.roa
File: C2634B1C9B8111EFB4A1C8AB762E951A.roa (raw, json)
Hash identifier: TzKnhKRwcjps5INc4Lnyh8guwCpoBxDnvrAtguCvJUM=
Subject key identifier: A7:5A:AD:A0:CB:AE:7D:77:5F:E9:2C:81:FE:5D:B5:1A:0F:32:13:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0107F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2634B1C9B8111EFB4A1C8AB762E951A.roa
Signing time: Tue 05 Nov 2024 14:25:09 +0000
ROA not before: Tue 05 Nov 2024 14:25:02 +0000
ROA not after: Mon 20 Jan 2025 14:25:02 +0000
asID: 135097
IP address blocks: 154.92.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67569 (0x107f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 14:25:02 2024 GMT
Not After : Jan 20 14:25:02 2025 GMT
Subject: CN=672a2ac5-0c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:bc:07:bc:21:d7:8b:20:35:0e:41:1d:94:
10:b7:8a:7d:4e:9e:fc:cf:aa:87:90:41:e9:6e:be:
bd:00:d7:b7:36:6d:ce:ec:4e:e9:ae:32:e9:74:47:
ca:38:e4:8c:9f:d4:63:9a:b5:1f:e8:7f:a6:2d:07:
77:11:80:59:8a:63:db:2f:ce:12:60:f9:be:25:60:
68:18:5d:b0:32:b5:28:9f:05:b8:02:ca:5e:be:e1:
b7:2b:20:d0:18:36:e1:49:39:3e:0b:97:05:28:c0:
92:08:89:d8:75:f7:07:35:ea:54:8f:94:cc:22:4d:
0e:f4:66:99:94:e9:9b:6a:23:68:5e:c1:b6:76:f9:
04:c4:49:84:4b:c4:3e:5f:c3:5e:47:85:5e:e6:d8:
af:92:37:0b:c0:39:9d:20:cc:8c:a7:8a:92:03:06:
45:d9:78:97:32:39:79:03:47:dc:bf:e0:9f:cd:d4:
fa:a3:d6:41:9f:44:3d:37:da:eb:4a:ef:07:68:2d:
a6:b2:6f:e6:43:73:cb:14:96:93:56:01:38:97:c2:
40:bc:74:fe:99:29:91:ac:da:8b:a0:b5:94:64:50:
43:d0:90:58:c7:fe:c5:bd:00:38:b0:c1:41:2a:89:
21:f4:59:29:1d:68:3a:e4:90:bc:28:89:9c:13:0b:
62:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:AD:A0:CB:AE:7D:77:5F:E9:2C:81:FE:5D:B5:1A:0F:32:13:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C2634B1C9B8111EFB4A1C8AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:a9:42:43:3f:2f:a3:26:03:de:8c:11:1a:56:d9:a5:75:b4:
9e:df:5b:c6:10:6b:4c:1d:65:0a:e0:0e:16:d6:1c:6f:bf:fb:
7d:95:b8:08:27:75:01:28:33:25:92:13:33:10:f2:55:e6:90:
fd:3e:65:4f:6d:1f:56:f9:05:12:5c:5b:80:b9:06:00:7e:08:
30:43:7c:cf:28:2e:58:6a:16:aa:7c:57:5a:25:01:c1:75:c2:
52:9d:30:e7:15:27:78:89:06:01:89:bf:6f:4b:0b:b7:78:48:
32:58:d0:9c:41:59:a4:0c:b5:c8:e3:8e:4d:4b:c6:c8:41:92:
94:ca:ba:61:aa:d9:6e:d9:24:eb:d9:31:cc:b2:f3:88:92:d3:
98:e1:1a:91:23:01:24:58:7a:2c:e1:1d:61:06:e4:72:2f:62:
c7:a1:4f:09:98:f8:7a:fd:aa:b4:25:78:ad:98:57:1c:34:39:
36:04:9f:c4:10:5a:8a:c1:56:09:2d:75:eb:f9:1f:9f:a2:46:
88:de:66:2e:3a:98:b9:02:45:74:6d:ea:c9:85:ab:4c:26:a3:
cd:c8:66:27:f0:5e:02:04:ca:46:0a:ef:c0:68:2d:a7:4e:84:
e6:27:d7:f8:5a:f7:0e:06:e8:fd:36:b3:3b:2f:83:dd:87:5a:
15:7a:42:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQfxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTQyNTAyWhcNMjUwMTIwMTQyNTAyWjAYMRYw
FAYDVQQDEw02NzJhMmFjNS0wYzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsya8B7wh14sgNQ5BHZQQt4p9Tp78z6qHkEHpbr69ANe3Nm3O7E7prjLp
dEfKOOSMn9RjmrUf6H+mLQd3EYBZimPbL84SYPm+JWBoGF2wMrUonwW4AspevuG3
KyDQGDbhSTk+C5cFKMCSCInYdfcHNepUj5TMIk0O9GaZlOmbaiNoXsG2dvkExEmE
S8Q+X8NeR4Ve5tivkjcLwDmdIMyMp4qSAwZF2XiXMjl5A0fcv+CfzdT6o9ZBn0Q9
N9rrSu8HaC2msm/mQ3PLFJaTVgE4l8JAvHT+mSmRrNqLoLWUZFBD0JBYx/7FvQA4
sMFBKokh9FkpHWg65JC8KImcEwtiRwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKda
raDLrn13X+ksgf5dtRoPMhNpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMjYzNEIxQzlCODExMUVGQjRBMUM4QUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlxgMA0GCSqGSIb3DQEB
CwUAA4IBAQBcqUJDPy+jJgPejBEaVtmldbSe31vGEGtMHWUK4A4W1hxvv/t9lbgI
J3UBKDMlkhMzEPJV5pD9PmVPbR9W+QUSXFuAuQYAfggwQ3zPKC5YahaqfFdaJQHB
dcJSnTDnFSd4iQYBib9vSwu3eEgyWNCcQVmkDLXI445NS8bIQZKUyrphqtlu2STr
2THMsvOIktOY4RqRIwEkWHos4R1hBuRyL2LHoU8JmPh6/aq0JXitmFccNDk2BJ/E
EFqKwVYJLXXr+R+fokaI3mYuOpi5AkV0berJhatMJqPNyGYn8F4CBMpGCu/AaC2n
ToTmJ9f4WvcOBuj9NrM7L4Pdh1oVekKl
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:26 2024 by rpki-client on console-ams.rpki-client.org