Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F92F36149B6E11EF998B9FB5762E951A.roa
File: F92F36149B6E11EF998B9FB5762E951A.roa (raw, json)
Hash identifier: I9m083fnB5lLiQ5Z24SsXCP6kPaP/hRXwhnbcmph+jU=
Subject key identifier: BD:0A:0B:F0:28:F9:23:62:47:D3:6A:72:FE:3C:B2:8D:75:80:C4:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01079F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F92F36149B6E11EF998B9FB5762E951A.roa
Signing time: Tue 05 Nov 2024 12:10:40 +0000
ROA not before: Tue 05 Nov 2024 12:10:36 +0000
ROA not after: Mon 13 Jan 2025 12:10:36 +0000
asID: 22773
IP address blocks: 154.85.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67487 (0x1079f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 12:10:36 2024 GMT
Not After : Jan 13 12:10:36 2025 GMT
Subject: CN=672a0b40-0ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:55:ec:b7:28:a3:ec:9c:f2:4e:4d:d3:be:
bb:6b:df:70:32:66:28:b0:9b:3d:a8:d5:30:57:43:
0c:3b:05:cd:bb:86:b6:5d:97:44:7e:ff:31:c3:c7:
f9:17:27:d6:6a:3a:df:19:6d:89:3c:f8:ed:16:76:
5b:d2:18:83:fd:43:0c:5c:91:5b:09:2a:c6:be:b5:
e7:39:d1:1a:a1:a7:b8:36:f7:9f:bf:3c:62:30:fa:
82:41:21:04:83:76:45:bf:17:87:db:65:a9:ff:eb:
5d:37:b6:b8:5f:73:c9:e9:8f:aa:ec:4a:79:c2:b6:
38:ab:02:0f:48:06:87:11:6b:c8:37:f3:42:11:b4:
9b:f3:f0:03:6a:ac:ae:e2:83:56:9e:51:2f:ae:21:
91:04:f1:e9:4b:c3:ed:dd:21:4b:0d:f0:c6:a8:7c:
3e:b5:17:f0:fb:35:69:e6:06:d0:9c:bf:c5:b8:71:
b4:56:49:17:73:99:63:d4:2d:83:33:df:3e:10:5a:
31:79:fe:35:86:33:37:ca:07:da:1b:59:05:63:a7:
47:57:98:42:a0:22:65:93:d9:86:56:a9:33:cb:ea:
28:d3:58:06:af:12:62:7a:2e:db:f8:66:37:38:d0:
69:cf:5b:3c:e3:1a:86:1d:3b:c4:b5:ff:db:26:4b:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:0B:F0:28:F9:23:62:47:D3:6A:72:FE:3C:B2:8D:75:80:C4:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F92F36149B6E11EF998B9FB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
43:0b:ad:15:91:c3:ab:d3:8b:de:a6:ab:70:9d:f5:e8:76:42:
c4:ec:65:7a:bb:c4:8c:7f:c5:85:51:0f:54:85:a7:85:72:e0:
97:a9:a8:eb:0e:4e:67:0d:86:eb:d2:b9:ad:2d:17:e9:a8:16:
1e:0b:78:07:f1:a6:6a:bb:cb:1f:0a:93:23:ed:bb:08:fd:d5:
e8:ab:4d:11:4f:b0:7a:8c:d9:7f:6a:d4:4c:d4:96:07:e0:7c:
4b:03:1a:d9:87:7d:fd:63:56:dc:e6:21:cb:3e:d5:94:ee:a1:
02:db:77:17:39:6d:a5:46:33:73:6a:ff:db:3b:0f:1e:66:85:
44:9f:50:df:75:3a:ee:02:d6:5a:c5:75:9f:e2:3f:03:b3:cd:
f1:61:89:7c:5b:eb:f1:bd:46:97:b4:27:ae:62:14:a5:6e:22:
3e:5a:24:5a:62:c7:fe:95:47:0c:f7:27:c5:9f:af:33:e8:13:
2e:ea:22:d5:d8:8c:a9:79:ea:12:e4:4e:48:58:72:b4:7c:aa:
ce:27:f0:22:d8:36:2e:71:ca:6c:93:5d:f5:31:31:8d:e6:89:
aa:f8:70:d9:a0:f8:3b:60:26:d4:85:4a:a7:da:36:e5:e5:a6:
c5:cc:c4:89:4d:a6:a2:04:21:6e:d4:3d:0f:fb:f1:5e:96:2e:
99:d4:df:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAQefMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQxMTA1MTIxMDM2WhcNMjUwMTEzMTIxMDM2WjAYMRYw
FAYDVQQDEw02NzJhMGI0MC0wY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu6ZV7Lcoo+yc8k5N0767a99wMmYosJs9qNUwV0MMOwXNu4a2XZdEfv8x
w8f5FyfWajrfGW2JPPjtFnZb0hiD/UMMXJFbCSrGvrXnOdEaoae4NvefvzxiMPqC
QSEEg3ZFvxeH22Wp/+tdN7a4X3PJ6Y+q7Ep5wrY4qwIPSAaHEWvIN/NCEbSb8/AD
aqyu4oNWnlEvriGRBPHpS8Pt3SFLDfDGqHw+tRfw+zVp5gbQnL/FuHG0VkkXc5lj
1C2DM98+EFoxef41hjM3ygfaG1kFY6dHV5hCoCJlk9mGVqkzy+oo01gGrxJiei7b
+GY3ONBpz1s84xqGHTvEtf/bJkuWLwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL0K
C/Ao+SNiR9Nqcv48so11gMTEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTJGMzYxNDlCNkUxMUVGOTk4QjlGQjU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlVsMA0GCSqGSIb3DQEB
CwUAA4IBAQBDC60VkcOr04vepqtwnfXodkLE7GV6u8SMf8WFUQ9UhaeFcuCXqajr
Dk5nDYbr0rmtLRfpqBYeC3gH8aZqu8sfCpMj7bsI/dXoq00RT7B6jNl/atRM1JYH
4HxLAxrZh339Y1bc5iHLPtWU7qEC23cXOW2lRjNzav/bOw8eZoVEn1DfdTruAtZa
xXWf4j8Ds83xYYl8W+vxvUaXtCeuYhSlbiI+WiRaYsf+lUcM9yfFn68z6BMu6iLV
2IypeeoS5E5IWHK0fKrOJ/Ai2DYuccpsk131MTGN5omq+HDZoPg7YCbUhUqn2jbl
5abFzMSJTaaiBCFu1D0P+/Feli6Z1N/n
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:31 2024 by rpki-client on console-fra.rpki-client.org