Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D227D176A4D211EFB015F083762E951A.roa
File: D227D176A4D211EFB015F083762E951A.roa (raw, json)
Hash identifier: EBgfxgqy7NzZ7KLqBf8PuWQE+uwrCt4/dDbFapSsyGI=
Subject key identifier: 2C:11:21:6E:9C:09:6C:A7:B6:07:0C:B1:A3:B8:1C:D4:58:8F:CB:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010ECC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D227D176A4D211EFB015F083762E951A.roa
Signing time: Sun 17 Nov 2024 10:58:05 +0000
ROA not before: Sun 17 Nov 2024 10:58:01 +0000
ROA not after: Wed 27 Nov 2024 10:58:01 +0000
asID: 137951
IP address blocks: 154.215.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69324 (0x10ecc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 10:58:01 2024 GMT
Not After : Nov 27 10:58:01 2024 GMT
Subject: CN=6739cc3d-d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:0d:30:1f:41:07:6e:3f:94:5e:d4:b0:60:
17:19:6d:e5:ee:a9:db:f6:85:be:c0:10:20:9d:c4:
b3:3d:29:ff:9b:dc:1b:a8:4e:22:e8:c0:2f:78:98:
5a:e7:eb:88:b1:79:42:1d:36:fc:ca:20:0b:26:25:
23:c4:99:22:65:7d:76:12:fe:74:b4:dc:85:68:51:
f8:b9:ef:67:e6:34:61:20:ea:21:2e:44:fb:82:37:
08:e9:ab:2e:bc:c6:91:18:89:1b:31:2f:4e:36:32:
66:d0:ed:c3:d9:f1:46:57:31:ff:16:d3:a4:7c:f9:
8e:2a:5c:d0:82:2d:2e:0a:6b:0f:bf:87:fd:e4:f6:
d0:37:e8:b2:59:c2:0a:87:d7:29:ad:7b:90:2c:51:
a3:dd:d4:4d:a9:b5:6e:5c:87:fe:7a:cb:5a:03:b2:
ff:f2:52:58:a6:12:87:92:20:b7:ac:73:3b:f2:98:
47:fd:a1:57:98:aa:f0:91:ee:5b:73:1f:5c:01:d0:
33:be:ab:15:9a:eb:03:23:30:32:a9:2c:90:4a:93:
b0:e8:c8:0e:dd:7a:e3:f6:58:b8:5a:1b:06:a6:41:
96:0d:06:3f:cb:33:ae:cc:64:be:d1:97:2b:5b:80:
c8:a4:b2:e0:5b:38:db:31:3f:61:df:89:16:17:ad:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:21:6E:9C:09:6C:A7:B6:07:0C:B1:A3:B8:1C:D4:58:8F:CB:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D227D176A4D211EFB015F083762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:47:aa:ef:38:2b:2e:95:3e:c0:6b:0b:dd:4e:a5:ba:fe:bb:
bc:04:f5:bf:3d:9c:78:8a:ac:3b:0f:6b:1a:90:f9:28:bd:9d:
6c:2a:f5:43:14:7c:7d:21:7b:a5:1f:4f:c3:a0:62:3d:67:38:
d9:da:e1:5b:17:07:14:b0:92:34:6f:54:b8:c9:96:0b:6e:d3:
02:19:82:1e:8a:8c:28:a8:92:fb:78:da:56:40:5a:99:28:06:
4d:3f:71:a7:10:a9:49:e9:cb:1f:52:35:fd:e4:ed:29:d2:e5:
f2:e0:f8:32:39:b7:f4:a6:f0:c4:91:94:00:d4:d9:8b:88:46:
15:a7:b8:67:33:59:3e:78:32:5a:f9:fe:3f:6b:59:df:51:2f:
48:82:ff:6c:04:9d:92:75:b3:74:e1:38:99:aa:ae:01:37:2a:
69:d1:d2:2d:26:1f:ab:c8:d3:02:ae:1a:fa:d5:4e:ba:05:8b:
74:ff:5c:dc:ac:34:17:74:2a:57:e9:cf:10:6e:fb:d7:ce:03:
4a:9a:4f:d5:32:99:a2:62:47:91:a4:80:c3:ac:0a:1a:db:08:
fc:e8:b1:f9:11:d2:40:b2:f3:ca:b5:7d:5a:d2:3d:d8:7f:f7:
31:ab:68:33:53:3a:fe:15:24:24:c0:5f:d0:36:95:13:06:d3:
ae:5b:00:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQ7MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTE3MTA1ODAxWhcNMjQxMTI3MTA1ODAxWjAYMRYw
FAYDVQQDEw02NzM5Y2MzZC1kNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApHYNMB9BB24/lF7UsGAXGW3l7qnb9oW+wBAgncSzPSn/m9wbqE4i6MAv
eJha5+uIsXlCHTb8yiALJiUjxJkiZX12Ev50tNyFaFH4ue9n5jRhIOohLkT7gjcI
6asuvMaRGIkbMS9ONjJm0O3D2fFGVzH/FtOkfPmOKlzQgi0uCmsPv4f95PbQN+iy
WcIKh9cprXuQLFGj3dRNqbVuXIf+estaA7L/8lJYphKHkiC3rHM78phH/aFXmKrw
ke5bcx9cAdAzvqsVmusDIzAyqSyQSpOw6MgO3Xrj9li4WhsGpkGWDQY/yzOuzGS+
0ZcrW4DIpLLgWzjbMT9h34kWF61A3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCwR
IW6cCWyntgcMsaO4HNRYj8s5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMjI3RDE3NkE0RDIxMUVGQjAxNUYwODM3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtcEMA0GCSqGSIb3DQEB
CwUAA4IBAQAtR6rvOCsulT7AawvdTqW6/ru8BPW/PZx4iqw7D2sakPkovZ1sKvVD
FHx9IXulH0/DoGI9ZzjZ2uFbFwcUsJI0b1S4yZYLbtMCGYIeiowoqJL7eNpWQFqZ
KAZNP3GnEKlJ6csfUjX95O0p0uXy4PgyObf0pvDEkZQA1NmLiEYVp7hnM1k+eDJa
+f4/a1nfUS9Igv9sBJ2SdbN04TiZqq4BNypp0dItJh+ryNMCrhr61U66BYt0/1zc
rDQXdCpX6c8QbvvXzgNKmk/VMpmiYkeRpIDDrAoa2wj86LH5EdJAsvPKtX1a0j3Y
f/cxq2gzUzr+FSQkwF/QNpUTBtOuWwAq
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:28 2024 by rpki-client on console-ams.rpki-client.org