Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB662F686A5D11EFAC2AD1BC762E951A.roa
File: CB662F686A5D11EFAC2AD1BC762E951A.roa (raw, json)
Hash identifier: lNj2Los0WNIDhCt7o++BDK9zTB/4pVTovmZ+MBlYCiQ=
Subject key identifier: A9:F9:4A:BC:E5:85:C8:D7:5C:CA:EC:34:0D:18:60:4B:AC:8C:9B:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: E9F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB662F686A5D11EFAC2AD1BC762E951A.roa
Signing time: Wed 04 Sep 2024 01:34:15 +0000
ROA not before: Wed 04 Sep 2024 01:34:12 +0000
ROA not after: Mon 30 Dec 2024 01:34:12 +0000
asID: 17561
IP address blocks: 154.207.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59889 (0xe9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 4 01:34:12 2024 GMT
Not After : Dec 30 01:34:12 2024 GMT
Subject: CN=66d7b917-6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:44:77:c4:39:c0:62:d3:60:64:98:4c:37:
93:0b:6a:52:6b:81:2d:f1:86:b0:ef:bd:48:09:2b:
cc:81:3b:8e:04:78:85:11:03:f4:47:e3:09:7d:0e:
92:1d:9e:66:9f:e1:b7:c3:e4:25:fd:d6:7d:4f:45:
5c:2b:e6:20:81:5d:a7:9a:d9:eb:d9:36:d6:ce:54:
1b:74:88:48:29:7e:12:ec:4a:b9:24:8a:89:8d:58:
10:80:cf:3b:0e:26:17:3b:4e:4d:4a:a4:0f:d3:f7:
20:46:9c:e1:77:0b:1f:c5:4b:cd:bd:8d:96:bd:51:
f4:64:ea:11:41:d8:64:4c:c2:80:22:6d:d1:af:5a:
7d:cb:dc:90:38:74:02:73:cf:07:b6:6a:a1:9a:44:
50:8e:b8:06:3f:c2:29:65:74:1f:58:72:fc:c1:ba:
eb:17:82:f4:82:38:58:63:b2:9d:f4:ca:bd:b2:34:
10:09:46:b1:94:a4:41:e7:2c:4e:43:e9:c4:3b:9b:
ac:f7:f7:16:9b:39:ee:8f:29:18:18:41:43:1f:c6:
c0:55:9d:fb:02:7c:9b:4c:75:3d:9b:b1:74:06:83:
62:b6:ea:7d:82:2d:a3:03:fe:37:30:ea:6b:79:62:
fb:91:fe:42:c1:d7:32:51:b9:33:21:2f:6f:e2:a1:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:4A:BC:E5:85:C8:D7:5C:CA:EC:34:0D:18:60:4B:AC:8C:9B:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB662F686A5D11EFAC2AD1BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.100.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:1c:c7:5d:4e:44:15:f2:00:b2:e5:4e:f6:42:09:0c:b1:23:
4c:53:f2:7a:5c:92:45:63:84:a7:d8:60:81:e8:62:ee:6d:8c:
2f:d9:e0:8f:50:03:63:be:cb:36:53:3d:35:3b:2c:e7:60:9e:
ae:ee:2c:07:43:88:be:fb:88:8a:e4:5c:14:3d:81:91:d0:d7:
7c:f3:93:4d:f2:e1:b6:2c:1f:a8:d2:6e:07:60:80:db:ad:94:
81:03:03:25:6c:e7:13:f6:9a:28:34:be:12:e8:99:bf:6b:7e:
ab:79:da:f8:dd:2e:74:54:4d:11:b2:9e:d1:4f:aa:48:1a:5b:
ef:3e:7b:22:9d:ae:de:fb:2b:0d:4f:c7:f3:25:d9:6f:80:dc:
b7:c1:70:1c:1a:bd:ea:8f:9e:e3:06:e8:6f:03:77:e1:cf:e7:
d5:89:28:85:0a:a9:0a:17:d7:41:d8:1a:8d:a4:db:c7:db:3b:
9e:dc:cc:95:b2:85:d7:d7:15:f7:95:b8:21:48:87:6f:6e:da:
63:da:ed:dd:bd:de:54:00:d3:3f:fd:70:4c:2e:14:89:e5:b9:
4b:a2:55:c7:f7:32:52:fb:21:e9:b2:ec:96:e5:f2:d9:ef:5a:
83:5d:55:9e:89:b7:5a:e1:ef:fb:bc:f0:86:d7:a1:5e:7c:ca:
2c:24:a0:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAOnxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTA0MDEzNDEyWhcNMjQxMjMwMDEzNDEyWjAYMRYw
FAYDVQQDEw02NmQ3YjkxNy02MzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1IdEd8Q5wGLTYGSYTDeTC2pSa4Et8Yaw771ICSvMgTuOBHiFEQP0R+MJ
fQ6SHZ5mn+G3w+Ql/dZ9T0VcK+YggV2nmtnr2TbWzlQbdIhIKX4S7Eq5JIqJjVgQ
gM87DiYXO05NSqQP0/cgRpzhdwsfxUvNvY2WvVH0ZOoRQdhkTMKAIm3Rr1p9y9yQ
OHQCc88HtmqhmkRQjrgGP8IpZXQfWHL8wbrrF4L0gjhYY7Kd9Mq9sjQQCUaxlKRB
5yxOQ+nEO5us9/cWmznujykYGEFDH8bAVZ37AnybTHU9m7F0BoNitup9gi2jA/43
MOpreWL7kf5CwdcyUbkzIS9v4qFRBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKn5
SrzlhcjXXMrsNA0YYEusjJsAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DQjY2MkY2ODZBNUQxMUVGQUMyQUQxQkM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms9kMA0GCSqGSIb3DQEB
CwUAA4IBAQCKHMddTkQV8gCy5U72QgkMsSNMU/J6XJJFY4Sn2GCB6GLubYwv2eCP
UANjvss2Uz01OyznYJ6u7iwHQ4i++4iK5FwUPYGR0Nd885NN8uG2LB+o0m4HYIDb
rZSBAwMlbOcT9pooNL4S6Jm/a36redr43S50VE0Rsp7RT6pIGlvvPnsina7e+ysN
T8fzJdlvgNy3wXAcGr3qj57jBuhvA3fhz+fViSiFCqkKF9dB2BqNpNvH2zue3MyV
soXX1xX3lbghSIdvbtpj2u3dvd5UANM//XBMLhSJ5blLolXH9zJS+yHpsuyW5fLZ
71qDXVWeibda4e/7vPCG16FefMosJKDv
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:25 2024 by rpki-client on console-fra.rpki-client.org