Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/D93E38CC846D11EFB9E4AEA1762E951A.roa
File: D93E38CC846D11EFB9E4AEA1762E951A.roa (raw, json)
Hash identifier: l368pZGbrsHe3aKYVyLgSeJ6hE8hbIVXQuNLEe/h0d0=
Subject key identifier: 89:F3:AC:FF:04:02:6D:E9:81:AF:84:42:8C:E1:90:1E:3F:62:C6:79
Certificate issuer: /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial: 0816
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/D93E38CC846D11EFB9E4AEA1762E951A.roa
Signing time: Mon 07 Oct 2024 05:34:40 +0000
ROA not before: Mon 07 Oct 2024 05:34:37 +0000
ROA not after: Sun 07 Oct 2029 05:34:37 +0000
asID: 327804
IP address blocks: 154.68.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070 (0x816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Validity
Not Before: Oct 7 05:34:37 2024 GMT
Not After : Oct 7 05:34:37 2029 GMT
Subject: CN=670372f0-66bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:cd:7a:b6:a3:19:05:74:4a:b4:8a:52:79:
10:89:41:d8:61:cb:1c:6d:d2:f7:55:c0:47:e6:9b:
10:54:05:0f:05:50:b4:dc:6c:a9:7b:17:5f:4f:6a:
49:7b:ef:0d:46:b1:ea:e5:ef:4c:90:1b:29:d2:84:
9d:f4:09:74:8c:b3:b1:18:65:a1:93:80:94:c5:9e:
2c:69:68:02:e8:81:17:3c:e6:3e:4f:54:29:c8:c9:
c4:58:21:21:f7:b6:f4:cf:9b:fd:9d:a6:dd:e1:fe:
39:d7:3e:05:68:79:e0:a2:eb:77:6a:a8:5a:f0:1d:
3b:3e:95:e4:0f:51:9d:d7:19:4d:e4:49:56:92:5a:
82:6a:d6:ac:78:b9:00:3c:60:5b:fc:52:47:4b:16:
d1:26:76:ce:0c:a0:86:7b:a8:25:b1:62:0a:20:9c:
ba:fa:8c:5b:cb:8d:bd:8a:94:f5:8b:a5:7f:37:c8:
d6:bd:2f:62:e1:af:f7:11:df:ed:3c:58:3a:98:59:
a0:7c:be:c0:5e:c3:2d:29:9e:01:50:bc:71:e9:ab:
f2:28:3e:c8:63:fa:24:e1:5c:f9:c0:b7:45:96:e7:
a7:7b:a1:de:4d:59:1f:84:d4:b7:d2:ff:93:d3:5f:
63:f3:b7:7b:52:33:25:1d:f4:9b:3f:bf:a8:1c:69:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:AC:FF:04:02:6D:E9:81:AF:84:42:8C:E1:90:1E:3F:62:C6:79
X509v3 Authority Key Identifier:
keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/D93E38CC846D11EFB9E4AEA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.68.164.0/22
Signature Algorithm: sha256WithRSAEncryption
91:76:ca:13:ca:95:bf:9d:a8:63:61:32:f8:e0:0a:03:54:34:
8e:95:f7:ae:20:92:01:bf:86:b2:61:0a:f1:51:ee:1b:fc:6f:
ef:6c:af:86:80:57:8d:03:85:a4:9e:ba:4a:52:81:3a:bf:5a:
83:c1:47:7f:c3:92:a4:dc:a7:9a:e5:e6:26:57:9c:a4:9e:e2:
da:33:16:d0:99:2b:64:44:03:56:15:77:f1:ae:72:24:83:b1:
bd:b8:26:00:25:e5:09:18:fc:d4:20:cd:fd:bc:1a:db:d2:de:
5f:82:25:38:25:4b:d4:75:17:09:9b:00:b6:94:5e:d2:3a:d9:
d3:87:2a:80:16:00:33:79:60:6f:f8:75:dd:43:c1:9b:2c:26:
ed:98:63:38:1e:42:93:45:ce:da:29:68:c6:4e:e3:2e:ca:3a:
cc:05:e3:f3:8a:b0:7a:b9:ab:d8:05:5a:97:0f:71:df:e9:35:
22:13:19:c2:f6:f7:68:de:70:af:b3:15:df:c8:4f:24:61:9e:
0e:bd:b8:06:8a:b2:7f:66:04:1a:fd:ac:27:a3:94:5e:b5:b0:
dc:7c:af:d3:f1:67:2d:17:5d:4e:7a:56:c7:a2:9c:f7:62:e8:
45:d6:86:59:78:9b:74:ad:7e:e7:84:1e:e5:4a:3a:b9:34:6b:
5d:17:2f:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0yNDEwMDcwNTM0MzdaFw0yOTEwMDcwNTM0MzdaMBgxFjAU
BgNVBAMTDTY3MDM3MmYwLTY2YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsqM16tqMZBXRKtIpSeRCJQdhhyxxt0vdVwEfmmxBUBQ8FULTcbKl7F19P
akl77w1Gserl70yQGynShJ30CXSMs7EYZaGTgJTFnixpaALogRc85j5PVCnIycRY
ISH3tvTPm/2dpt3h/jnXPgVoeeCi63dqqFrwHTs+leQPUZ3XGU3kSVaSWoJq1qx4
uQA8YFv8UkdLFtEmds4MoIZ7qCWxYgognLr6jFvLjb2KlPWLpX83yNa9L2Lhr/cR
3+08WDqYWaB8vsBewy0pngFQvHHpq/IoPshj+iThXPnAt0WW56d7od5NWR+E1LfS
/5PTX2Pzt3tSMyUd9Js/v6gcaehVAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUifOs
/wQCbemBr4RCjOGQHj9ixnkwHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4
QUVBMjI4L0Q5M0UzOENDODQ2RDExRUZCOUU0QUVBMTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKaRKQwDQYJKoZIhvcNAQEL
BQADggEBAJF2yhPKlb+dqGNhMvjgCgNUNI6V964gkgG/hrJhCvFR7hv8b+9sr4aA
V40DhaSeukpSgTq/WoPBR3/DkqTcp5rl5iZXnKSe4tozFtCZK2REA1YVd/GuciSD
sb24JgAl5QkY/NQgzf28GtvS3l+CJTglS9R1FwmbALaUXtI62dOHKoAWADN5YG/4
dd1DwZssJu2YYzgeQpNFztopaMZO4y7KOswF4/OKsHq5q9gFWpcPcd/pNSITGcL2
92jecK+zFd/ITyRhng69uAaKsn9mBBr9rCejlF61sNx8r9PxZy0XXU56VseinPdi
6EXWhll4m3StfueEHuVKOrk0a10XL3M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:26 2024 by rpki-client on console-ams.rpki-client.org