Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9B6BFA2736611EFB9C5A642762E951A.roa
File: E9B6BFA2736611EFB9C5A642762E951A.roa (raw, json)
Hash identifier: opxmrQnotyGntT4MY1XpcdyLwA4rXRQNmvj98ORqcUA=
Subject key identifier: 99:65:64:F7:8B:F1:24:0C:DE:F0:87:C1:49:D5:82:77:0C:6F:C6:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9B6BFA2736611EFB9C5A642762E951A.roa
Signing time: Sun 15 Sep 2024 13:32:12 +0000
ROA not before: Sun 15 Sep 2024 13:32:08 +0000
ROA not after: Sat 30 Nov 2024 13:32:08 +0000
asID: 136970
IP address blocks: 154.197.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61208 (0xef18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:32:08 2024 GMT
Not After : Nov 30 13:32:08 2024 GMT
Subject: CN=66e6e1dc-3f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:1e:0e:8b:40:a1:31:1f:0f:5d:6b:fe:35:
42:b9:82:2a:22:46:86:b3:c8:ff:7c:b6:6e:57:34:
66:58:7e:02:4b:b0:50:10:08:61:0d:6d:9d:3f:9c:
a2:54:4b:e7:df:54:cc:cc:34:3e:1c:e9:18:09:80:
a2:0b:9e:8c:2b:90:c4:c9:26:05:82:12:74:06:18:
8f:90:cc:8b:f5:ec:38:4a:6d:a9:12:c9:46:1b:68:
a1:25:f5:b3:db:97:f2:ed:d7:0a:94:32:de:e1:17:
29:a9:e3:91:92:51:be:b9:e9:e9:99:ab:97:5d:c6:
99:17:a4:03:32:b8:a5:6c:67:26:03:d5:03:39:07:
94:25:26:cd:26:e3:ed:f3:f8:28:53:19:1e:d4:b4:
f7:72:97:b8:53:b1:b9:24:98:6e:70:4a:b3:c7:b8:
d2:56:db:cf:ed:3e:ae:e4:17:06:29:f0:17:7a:cd:
de:d7:53:37:5b:57:a4:31:09:47:cd:3a:a4:cf:84:
83:a3:87:97:86:84:1b:25:1b:7f:1c:1f:0a:73:df:
d4:5d:a0:93:b8:68:b8:09:bb:0f:f8:5d:bd:bf:7b:
50:02:61:aa:c2:20:96:ef:f6:fa:49:65:de:22:6e:
63:20:54:83:ab:94:7c:08:b9:72:60:29:0e:08:0a:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:65:64:F7:8B:F1:24:0C:DE:F0:87:C1:49:D5:82:77:0C:6F:C6:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9B6BFA2736611EFB9C5A642762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.4.0/24
Signature Algorithm: sha256WithRSAEncryption
be:56:55:43:92:50:cc:e0:4b:8b:83:ab:e8:83:5a:5e:7f:68:
73:e2:71:9d:4b:c3:ca:64:f5:87:09:73:9f:16:22:c8:b5:d5:
3a:15:32:14:c8:4a:d7:da:7f:93:11:69:e4:f3:9e:e8:26:d8:
ab:1b:e2:06:99:73:c4:7c:fe:ac:bc:0f:f6:1c:9a:96:f9:98:
c1:ef:11:da:b8:1e:5e:c6:47:97:bd:d2:6f:01:f1:4a:a2:ad:
11:6c:a9:7f:0c:34:54:ee:96:9b:a3:53:7c:d1:36:54:6f:96:
d6:cc:eb:59:b9:f0:18:1c:c1:e5:d7:fa:dd:17:01:10:4e:5a:
74:78:da:d7:c9:0d:ba:51:af:39:0d:b5:13:51:56:95:75:b5:
83:8d:0b:11:88:40:24:8c:f4:7c:6a:7d:04:37:a1:37:5e:57:
b7:ad:b2:8b:39:6f:f5:6c:70:7c:a3:c9:05:b8:53:bf:21:40:
ed:10:26:53:c7:30:c5:7f:a0:88:df:a4:af:13:cc:17:9b:83:
b6:83:6f:a9:aa:d0:4c:18:36:e7:bc:b4:12:24:77:4f:8a:72:
07:00:48:8f:42:c3:1a:0a:94:ad:a8:41:4e:e5:2d:c8:8e:03:
4a:a9:c4:70:40:76:4d:ce:e4:5e:cc:50:70:d1:7c:86:fb:23:
bd:cb:11:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO8YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE1MTMzMjA4WhcNMjQxMTMwMTMzMjA4WjAYMRYw
FAYDVQQDEw02NmU2ZTFkYy0zZjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6u4eDotAoTEfD11r/jVCuYIqIkaGs8j/fLZuVzRmWH4CS7BQEAhhDW2d
P5yiVEvn31TMzDQ+HOkYCYCiC56MK5DEySYFghJ0BhiPkMyL9ew4Sm2pEslGG2ih
JfWz25fy7dcKlDLe4RcpqeORklG+uenpmauXXcaZF6QDMrilbGcmA9UDOQeUJSbN
JuPt8/goUxke1LT3cpe4U7G5JJhucEqzx7jSVtvP7T6u5BcGKfAXes3e11M3W1ek
MQlHzTqkz4SDo4eXhoQbJRt/HB8Kc9/UXaCTuGi4CbsP+F29v3tQAmGqwiCW7/b6
SWXeIm5jIFSDq5R8CLlyYCkOCApsvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJll
ZPeL8SQM3vCHwUnVgncMb8Y2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FOUI2QkZBMjczNjYxMUVGQjlDNUE2NDI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUEMA0GCSqGSIb3DQEB
CwUAA4IBAQC+VlVDklDM4EuLg6vog1pef2hz4nGdS8PKZPWHCXOfFiLItdU6FTIU
yErX2n+TEWnk857oJtirG+IGmXPEfP6svA/2HJqW+ZjB7xHauB5exkeXvdJvAfFK
oq0RbKl/DDRU7pabo1N80TZUb5bWzOtZufAYHMHl1/rdFwEQTlp0eNrXyQ26Ua85
DbUTUVaVdbWDjQsRiEAkjPR8an0EN6E3Xle3rbKLOW/1bHB8o8kFuFO/IUDtECZT
xzDFf6CI36SvE8wXm4O2g2+pqtBMGDbnvLQSJHdPinIHAEiPQsMaCpStqEFO5S3I
jgNKqcRwQHZNzuRezFBw0XyG+yO9yxFB
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:03:01 2024 by rpki-client on console-fra.rpki-client.org