Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E275BA609C1D11EFBD69BB88762E951A.roa
File: E275BA609C1D11EFBD69BB88762E951A.roa (raw, json)
Hash identifier: DrM3omCL8PNSZ1E8pSCfz15IqC/2gjbnvp4fxEZwNaY=
Subject key identifier: E1:74:D6:EE:8B:39:2F:2D:D5:90:95:B4:3F:FB:2A:59:21:CC:74:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01087A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E275BA609C1D11EFBD69BB88762E951A.roa
Signing time: Wed 06 Nov 2024 09:02:44 +0000
ROA not before: Wed 06 Nov 2024 09:02:40 +0000
ROA not after: Thu 09 Jan 2025 09:02:40 +0000
asID: 25818
IP address blocks: 154.91.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67706 (0x1087a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 09:02:40 2024 GMT
Not After : Jan 9 09:02:40 2025 GMT
Subject: CN=672b30b4-057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:2c:07:4c:10:89:61:96:3b:f7:6f:50:5e:
cd:fb:0c:19:0a:05:a4:9c:ec:3d:a9:07:51:e1:21:
27:0b:9b:0d:fa:bb:01:08:a2:16:fc:05:fb:a7:0b:
b7:98:3f:5b:40:54:85:d4:f2:98:9d:31:48:82:0d:
2e:65:48:53:30:55:91:57:ca:95:e5:67:8e:65:f3:
1c:ee:0e:80:6e:13:ac:14:98:55:a3:b1:d1:f6:1a:
46:7e:58:c8:9c:b6:1f:e2:15:77:cf:23:c2:99:cb:
93:2f:08:6d:86:f0:74:a8:e1:16:55:af:dd:44:e2:
70:fa:11:0c:fc:e8:0e:ab:2e:bc:93:e6:0c:ec:86:
6f:68:5b:35:ed:5f:df:7f:2f:4a:19:c0:5b:b6:f6:
d4:98:31:85:af:e7:87:d5:f5:cb:21:47:a2:4f:af:
e5:1e:d5:82:eb:96:ea:9e:f4:af:f9:3a:8d:62:d5:
b9:14:d8:c3:ab:b3:cd:20:32:07:f9:32:f6:a3:7b:
b2:b7:07:95:81:1f:be:58:48:29:8b:8d:9d:79:4d:
f9:7f:b1:fc:58:3d:88:a6:f8:10:63:c2:43:8d:73:
47:34:4a:86:c7:46:6c:40:c5:47:76:57:5c:a2:88:
3d:de:b9:a7:57:67:a4:e8:11:7b:a9:4a:ab:67:c6:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:D6:EE:8B:39:2F:2D:D5:90:95:B4:3F:FB:2A:59:21:CC:74:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E275BA609C1D11EFBD69BB88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
23:85:64:e2:9f:be:af:cd:66:ee:f3:24:e2:ab:ba:59:03:4c:
e2:54:96:c3:b5:c2:3d:52:61:f9:fe:c0:e5:31:f2:b7:05:16:
41:ea:16:98:2e:42:0c:93:cc:d1:b2:1e:54:28:f5:08:b3:af:
99:66:c8:79:fa:d3:f7:59:2f:00:66:cb:46:69:db:29:19:c3:
32:2b:bb:ba:e6:da:e0:ff:ba:6d:4f:f9:3b:73:e5:3b:21:3f:
57:a9:ff:16:0e:32:7c:2c:07:98:f3:a6:b3:71:f4:c3:e0:09:
d9:20:d6:b3:6f:3b:be:5c:9b:97:c1:20:ff:ef:71:9c:5e:71:
46:33:37:8e:2c:ea:b3:ab:ee:24:92:a5:58:11:e5:ba:9c:88:
5f:fb:0d:97:9d:21:a7:d0:29:47:b8:8c:a3:b7:77:77:6e:fc:
6a:ef:f8:b2:68:25:a3:b4:79:57:ff:d0:40:44:8c:a2:ba:04:
5e:d9:d2:17:e0:5d:75:e0:06:81:5b:d0:7d:a7:9a:ad:89:cb:
82:73:a0:01:71:83:98:c7:ba:83:a8:b5:26:43:2a:84:b1:c2:
3a:e3:65:d1:e6:5c:6a:07:13:86:20:70:55:32:c2:45:2e:9f:
60:cc:90:4f:c6:7b:b2:ff:03:ba:73:3e:9e:58:48:99:90:61:
e9:c8:61:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQh6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA2MDkwMjQwWhcNMjUwMTA5MDkwMjQwWjAYMRYw
FAYDVQQDEw02NzJiMzBiNC0wNTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy3MsB0wQiWGWO/dvUF7N+wwZCgWknOw9qQdR4SEnC5sN+rsBCKIW/AX7
pwu3mD9bQFSF1PKYnTFIgg0uZUhTMFWRV8qV5WeOZfMc7g6AbhOsFJhVo7HR9hpG
fljInLYf4hV3zyPCmcuTLwhthvB0qOEWVa/dROJw+hEM/OgOqy68k+YM7IZvaFs1
7V/ffy9KGcBbtvbUmDGFr+eH1fXLIUeiT6/lHtWC65bqnvSv+TqNYtW5FNjDq7PN
IDIH+TL2o3uytweVgR++WEgpi42deU35f7H8WD2IpvgQY8JDjXNHNEqGx0ZsQMVH
dldcoog93rmnV2ek6BF7qUqrZ8Y/VwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOF0
1u6LOS8t1ZCVtD/7KlkhzHQgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMjc1QkE2MDlDMUQxMUVGQkQ2OUJCODg3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlvMMA0GCSqGSIb3DQEB
CwUAA4IBAQAjhWTin76vzWbu8yTiq7pZA0ziVJbDtcI9UmH5/sDlMfK3BRZB6haY
LkIMk8zRsh5UKPUIs6+ZZsh5+tP3WS8AZstGadspGcMyK7u65trg/7ptT/k7c+U7
IT9Xqf8WDjJ8LAeY86azcfTD4AnZINazbzu+XJuXwSD/73GcXnFGMzeOLOqzq+4k
kqVYEeW6nIhf+w2XnSGn0ClHuIyjt3d3bvxq7/iyaCWjtHlX/9BARIyiugRe2dIX
4F114AaBW9B9p5qticuCc6ABcYOYx7qDqLUmQyqEscI642XR5lxqBxOGIHBVMsJF
Lp9gzJBPxnuy/wO6cz6eWEiZkGHpyGHp
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:43 2024 by rpki-client on console-ams.rpki-client.org