Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8266ECA74CF11EF8CF1BD55762E951A.roa
File: E8266ECA74CF11EF8CF1BD55762E951A.roa (raw, json)
Hash identifier: rf7lY/45ROUEvWsaxxlIjCyYb7V0qMsq2GjkhgZ9ZRs=
Subject key identifier: C1:15:BA:00:CD:A7:DC:9B:04:43:1C:E8:66:41:90:75:44:9A:F5:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F016
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8266ECA74CF11EF8CF1BD55762E951A.roa
Signing time: Tue 17 Sep 2024 08:36:17 +0000
ROA not before: Tue 17 Sep 2024 08:36:14 +0000
ROA not after: Sat 30 Nov 2024 08:36:14 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61462 (0xf016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 17 08:36:14 2024 GMT
Not After : Nov 30 08:36:14 2024 GMT
Subject: CN=66e93f81-2abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:f8:b8:a5:12:3b:ed:fe:af:34:8c:77:d8:
e4:ac:49:97:5c:b9:6d:84:9a:b7:d3:9b:79:db:f5:
e9:85:40:ca:a5:5d:75:09:96:3b:5e:57:48:66:dc:
b8:da:12:a1:98:25:7c:fd:b7:14:83:d2:88:3a:b7:
f7:6d:a8:3a:aa:92:5b:d1:dd:a8:09:2a:5e:a4:6b:
02:76:5b:03:5f:bd:0e:aa:55:6a:87:13:4d:b5:93:
9a:4d:2d:77:f5:4e:bc:a5:d7:58:e5:a9:ba:c1:fd:
ba:ac:9d:64:68:8b:9c:38:41:5f:30:6b:e7:32:6d:
39:7e:58:b4:80:76:81:ce:d2:88:2b:04:28:3a:47:
f6:24:1b:f4:51:88:d4:f6:b6:a9:d6:31:e9:03:b0:
54:68:1e:19:dc:ad:eb:63:2c:5e:d1:d2:10:ad:8f:
9d:ef:4a:62:57:14:a3:84:af:b0:fd:47:79:e0:64:
ff:14:58:34:ed:26:6a:0a:29:2f:4d:74:05:ea:1a:
96:8f:14:53:4d:a1:11:89:ea:22:21:45:30:cd:d4:
4c:fe:06:8a:22:ce:3b:52:b2:65:8b:00:6c:f0:b1:
9b:87:b0:7f:97:50:aa:54:2c:8e:9f:d2:64:8d:19:
e9:32:47:29:60:fc:e2:2f:9f:d1:f8:62:e3:8e:a4:
86:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:15:BA:00:CD:A7:DC:9B:04:43:1C:E8:66:41:90:75:44:9A:F5:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8266ECA74CF11EF8CF1BD55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8c:17:57:56:50:db:8d:55:d3:31:20:72:44:c9:d5:22:5b:
32:94:9f:e4:19:85:08:4f:02:91:a3:5f:af:6d:49:1c:b1:de:
44:6f:8c:03:ae:e9:1d:eb:83:33:6f:1e:00:a3:75:38:8a:0a:
ba:0e:50:2e:a7:82:7c:b9:69:1b:2a:1f:ee:0a:26:3b:a5:e2:
23:0a:bf:6d:0c:f6:8c:fb:95:8f:b6:e0:7d:a5:e2:a1:87:a3:
8f:9b:d3:c4:9e:6b:8f:cf:de:bf:85:b1:5e:f8:70:34:be:14:
4f:25:b0:aa:43:59:7b:fe:76:18:36:96:75:39:23:09:4a:82:
3b:b9:35:ea:08:61:6d:5f:13:a6:dc:20:65:3e:09:0b:a4:eb:
e4:03:03:38:34:6b:be:11:14:c9:71:48:6d:e3:1e:53:6f:b3:
0c:43:13:57:9a:bc:69:1c:84:19:89:89:d2:17:9b:6f:5e:03:
31:2d:9e:c8:18:61:4d:c4:f8:07:39:91:3f:63:f2:2e:ff:4a:
cf:10:b5:6f:0e:38:b6:6e:36:83:c3:a8:94:71:1a:9a:2d:7e:
8c:1e:1e:16:e1:ab:bf:52:aa:f8:20:f5:ba:99:4e:d0:52:0c:
99:e4:81:fd:d8:7e:65:df:08:e8:33:d6:81:0e:90:28:0e:08:
a3:98:80:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPAWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE3MDgzNjE0WhcNMjQxMTMwMDgzNjE0WjAYMRYw
FAYDVQQDEw02NmU5M2Y4MS0yYWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnYH4uKUSO+3+rzSMd9jkrEmXXLlthJq305t52/XphUDKpV11CZY7XldI
Zty42hKhmCV8/bcUg9KIOrf3bag6qpJb0d2oCSpepGsCdlsDX70OqlVqhxNNtZOa
TS139U68pddY5am6wf26rJ1kaIucOEFfMGvnMm05fli0gHaBztKIKwQoOkf2JBv0
UYjU9rap1jHpA7BUaB4Z3K3rYyxe0dIQrY+d70piVxSjhK+w/Ud54GT/FFg07SZq
CikvTXQF6hqWjxRTTaERieoiIUUwzdRM/gaKIs47UrJliwBs8LGbh7B/l1CqVCyO
n9JkjRnpMkcpYPziL5/R+GLjjqSG9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMEV
ugDNp9ybBEMc6GZBkHVEmvWvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FODI2NkVDQTc0Q0YxMUVGOENGMUJENTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlwWMA0GCSqGSIb3DQEB
CwUAA4IBAQAyjBdXVlDbjVXTMSByRMnVIlsylJ/kGYUITwKRo1+vbUkcsd5Eb4wD
rukd64Mzbx4Ao3U4igq6DlAup4J8uWkbKh/uCiY7peIjCr9tDPaM+5WPtuB9peKh
h6OPm9PEnmuPz96/hbFe+HA0vhRPJbCqQ1l7/nYYNpZ1OSMJSoI7uTXqCGFtXxOm
3CBlPgkLpOvkAwM4NGu+ERTJcUht4x5Tb7MMQxNXmrxpHIQZiYnSF5tvXgMxLZ7I
GGFNxPgHOZE/Y/Iu/0rPELVvDji2bjaDw6iUcRqaLX6MHh4W4au/Uqr4IPW6mU7Q
UgyZ5IH92H5l3wjoM9aBDpAoDgijmIDq
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:29 2024 by rpki-client on console-fra.rpki-client.org