Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4CDE734A0DB11EF923BC35F762E951A.roa
File: E4CDE734A0DB11EF923BC35F762E951A.roa (raw, json)
Hash identifier: as44ekhxjQqUg1vXbLGGG/QN6PJCnH42szuKxawHdW4=
Subject key identifier: 86:F0:F4:C6:68:EA:09:7B:56:43:1B:26:D4:4A:E7:CE:03:2C:E8:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 010C38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4CDE734A0DB11EF923BC35F762E951A.roa
Signing time: Tue 12 Nov 2024 09:52:57 +0000
ROA not before: Tue 12 Nov 2024 09:52:53 +0000
ROA not after: Sat 07 Dec 2024 09:52:53 +0000
asID: 138915
IP address blocks: 154.223.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68664 (0x10c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 09:52:53 2024 GMT
Not After : Dec 7 09:52:53 2024 GMT
Subject: CN=67332579-b0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:2a:7a:97:d3:b3:11:73:bc:b0:21:5d:39:
a7:be:3c:fc:fc:3a:f1:43:ae:5b:ea:5a:aa:6c:9d:
2b:18:35:9b:a3:1b:53:c5:2a:66:ae:77:e2:12:dd:
26:f7:75:b4:04:74:d9:4d:bf:47:0f:3d:32:1d:fc:
a6:33:37:e1:02:de:bb:06:9a:e4:c0:fb:8e:b6:64:
8c:02:6e:19:f1:39:a2:28:b0:ad:ed:8a:c3:d8:34:
58:d2:e6:1d:c5:b3:5f:37:c0:18:2d:96:4f:1c:18:
e2:50:db:27:81:d2:4e:e4:04:be:91:43:92:0f:83:
72:a1:0c:ef:53:d7:b1:8a:b2:1f:62:a7:f5:09:87:
5c:04:37:80:93:fc:78:71:df:51:17:34:7c:b2:18:
a1:44:4e:2f:1e:51:59:89:a4:36:fa:90:ce:85:fd:
b0:15:74:56:d5:62:73:23:d4:4a:52:90:81:cc:8b:
00:93:01:ce:9a:64:85:30:24:d2:32:e3:fb:c4:c0:
0d:45:0f:97:95:0e:c9:dc:3d:4a:a4:37:74:83:3c:
20:d0:c1:77:c0:a8:a2:8f:43:6f:d0:1d:78:33:1e:
df:f4:6c:f0:4f:e7:5b:85:b4:cc:a9:cd:db:0e:68:
ad:d9:4e:23:51:6e:10:3a:8c:a5:8b:d4:89:4b:ff:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:F4:C6:68:EA:09:7B:56:43:1B:26:D4:4A:E7:CE:03:2C:E8:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4CDE734A0DB11EF923BC35F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.28.0/23
Signature Algorithm: sha256WithRSAEncryption
94:b9:2d:77:82:01:96:f0:6d:6e:1d:19:e0:eb:e4:84:b9:4e:
55:40:12:4d:0b:a5:83:3b:3a:29:0d:b7:c3:c1:b9:52:ff:23:
57:5e:de:fa:24:ee:68:78:d4:3a:57:ed:4d:f6:22:d8:9b:6e:
46:2a:4f:ff:a2:94:58:92:42:ef:29:e8:41:ef:bd:23:15:a0:
e2:3e:ed:78:00:64:3f:71:02:e6:ab:82:b7:67:e8:91:e8:04:
cd:9b:34:a9:90:d7:da:89:d4:30:f0:38:e2:93:89:01:52:99:
25:1b:43:15:51:28:4e:33:79:ef:95:93:57:fd:15:d7:7d:d7:
e0:03:b8:de:b4:55:27:f3:c0:26:51:45:ff:b6:93:84:ef:84:
e9:0e:54:21:20:d3:c3:a8:59:63:81:8d:14:fb:ba:47:6f:fd:
ee:d7:ff:e5:b0:ed:88:39:ab:39:1f:fe:a9:89:f6:95:37:02:
b6:cb:6e:8d:a1:8b:79:48:db:09:61:7f:33:af:fb:bb:40:36:
2e:96:3b:bd:78:cf:fb:3b:09:ff:01:5c:9e:53:1b:1c:ae:94:
b7:c9:b9:7b:dc:ee:1b:c8:98:db:74:c8:10:aa:71:7c:c9:f6:
9d:52:65:64:9c:25:e3:85:14:17:c3:79:af:b2:cf:42:34:cf:
02:fa:70:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQw4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTEyMDk1MjUzWhcNMjQxMjA3MDk1MjUzWjAYMRYw
FAYDVQQDEw02NzMzMjU3OS1iMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6pkqepfTsxFzvLAhXTmnvjz8/DrxQ65b6lqqbJ0rGDWboxtTxSpmrnfi
Et0m93W0BHTZTb9HDz0yHfymMzfhAt67BprkwPuOtmSMAm4Z8TmiKLCt7YrD2DRY
0uYdxbNfN8AYLZZPHBjiUNsngdJO5AS+kUOSD4NyoQzvU9exirIfYqf1CYdcBDeA
k/x4cd9RFzR8shihRE4vHlFZiaQ2+pDOhf2wFXRW1WJzI9RKUpCBzIsAkwHOmmSF
MCTSMuP7xMANRQ+XlQ7J3D1KpDd0gzwg0MF3wKiij0Nv0B14Mx7f9GzwT+dbhbTM
qc3bDmit2U4jUW4QOoyli9SJS/8oUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIbw
9MZo6gl7VkMbJtRK584DLOhcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNENERTczNEEwREIxMUVGOTIzQkMzNUY3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt8cMA0GCSqGSIb3DQEB
CwUAA4IBAQCUuS13ggGW8G1uHRng6+SEuU5VQBJNC6WDOzopDbfDwblS/yNXXt76
JO5oeNQ6V+1N9iLYm25GKk//opRYkkLvKehB770jFaDiPu14AGQ/cQLmq4K3Z+iR
6ATNmzSpkNfaidQw8Djik4kBUpklG0MVUShOM3nvlZNX/RXXfdfgA7jetFUn88Am
UUX/tpOE74TpDlQhINPDqFljgY0U+7pHb/3u1//lsO2IOas5H/6pifaVNwK2y26N
oYt5SNsJYX8zr/u7QDYulju9eM/7Own/AVyeUxscrpS3ybl73O4byJjbdMgQqnF8
yfadUmVknCXjhRQXw3mvss9CNM8C+nBX
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:34:43 2024 by rpki-client on console-ams.rpki-client.org