Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0775B3D423A011EF8E35B9FD7CDC24C2.roa
File: 0775B3D423A011EF8E35B9FD7CDC24C2.roa (raw, json)
Hash identifier: GzkmKlFd8qZPvK/DdcRUMMvGYu4cZoTOyNTL/iu2JIs=
Subject key identifier: A7:72:B1:7B:0F:A5:40:81:F8:F5:51:B9:39:99:12:2E:3C:4E:DF:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C065
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0775B3D423A011EF8E35B9FD7CDC24C2.roa
Signing time: Thu 06 Jun 2024 00:59:30 +0000
ROA not before: Thu 06 Jun 2024 00:00:26 +0000
ROA not after: Thu 11 Jul 2024 00:00:26 +0000
asID: 272854
IP address blocks: 154.194.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49253 (0xc065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 00:00:26 2024 GMT
Not After : Jul 11 00:00:26 2024 GMT
Subject: CN=666109f2-6631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:4e:b6:50:95:3e:8d:a6:12:80:e7:b7:b6:
fd:98:fe:d1:9a:cc:71:c8:17:b2:e8:4f:3e:14:a0:
6f:e9:4e:a5:6b:ec:ea:20:83:42:80:92:7e:bd:95:
b5:31:11:fe:01:fb:f2:f8:d5:09:cb:37:bf:8f:a7:
2a:c9:a4:32:c8:ff:2f:30:fe:73:30:20:c8:7e:bf:
0b:ec:ca:9c:98:33:6c:10:18:71:18:1a:fe:ed:89:
f3:1f:e7:40:78:1d:a3:be:0a:ce:89:fe:a3:60:fd:
ff:3e:2d:ae:29:57:d6:73:7d:76:3a:3f:ca:bc:88:
83:dc:0d:6c:d7:f8:12:cc:1f:29:60:45:9b:10:c1:
fa:76:1d:2f:0a:71:29:08:f3:dc:07:57:36:ea:f9:
98:52:eb:b9:f0:16:03:43:0e:7e:6f:44:73:6c:41:
50:f6:68:7e:a6:31:30:e5:a3:ee:e5:99:fa:b5:5a:
81:94:8e:50:36:fe:07:30:36:5d:b6:dd:dc:38:fc:
5c:50:bf:08:d2:92:b7:72:30:d5:dd:b6:8a:16:40:
ad:b4:35:ca:b5:4d:ce:77:fa:66:49:70:4b:bb:10:
df:41:8d:b4:62:02:2d:91:29:b9:08:af:79:e6:47:
bf:57:24:7f:01:5d:ca:10:69:61:ea:cb:93:7b:f7:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:B1:7B:0F:A5:40:81:F8:F5:51:B9:39:99:12:2E:3C:4E:DF:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0775B3D423A011EF8E35B9FD7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.14.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:b8:3c:eb:12:d2:6b:60:5f:09:75:7e:fa:1f:4d:28:75:94:
d5:9a:b2:d2:21:09:cd:f6:2f:6a:fa:b4:d6:15:b2:e1:b8:02:
e7:46:ef:c1:30:f7:0d:50:44:ed:6f:10:d1:b9:9a:fd:8c:65:
7f:23:26:f7:b4:bd:c7:c0:1e:7a:a1:fa:f1:57:4b:69:ff:9e:
3b:f6:38:69:4b:c6:6a:ed:80:74:dd:a1:f1:c9:7a:90:85:97:
53:f2:fd:fb:41:ee:fc:1c:19:35:9b:29:bd:5f:ca:2b:3f:54:
70:e0:49:ef:3e:71:88:28:86:03:ad:05:d0:3d:66:2f:ca:ef:
51:f4:b4:3c:55:e3:bb:1e:94:10:9c:65:98:53:7e:c4:21:53:
c0:e9:42:cc:3c:d3:79:85:eb:b3:60:0b:a1:55:df:28:92:80:
28:63:ee:3e:35:7a:0b:5d:27:ab:08:1c:e2:49:ec:50:a6:56:
53:72:5e:c9:75:2a:e1:51:bc:cb:bc:41:b2:83:8d:56:ba:dd:
84:96:34:d9:8e:21:e1:54:72:0f:b6:27:5e:cb:dc:e4:7f:49:
1c:2d:b1:3f:c5:69:1e:62:00:e9:8b:6a:1e:d8:bb:61:bc:ea:
c3:ef:83:6d:0b:b1:f0:3b:45:c9:69:46:38:1a:3f:9c:91:02:
b2:c3:5a:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMBlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNjA2MDAwMDI2WhcNMjQwNzExMDAwMDI2WjAYMRYw
FAYDVQQDEw02NjYxMDlmMi02NjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGBOtlCVPo2mEoDnt7b9mP7RmsxxyBey6E8+FKBv6U6la+zqIINCgJJ+
vZW1MRH+Afvy+NUJyze/j6cqyaQyyP8vMP5zMCDIfr8L7MqcmDNsEBhxGBr+7Ynz
H+dAeB2jvgrOif6jYP3/Pi2uKVfWc312Oj/KvIiD3A1s1/gSzB8pYEWbEMH6dh0v
CnEpCPPcB1c26vmYUuu58BYDQw5+b0RzbEFQ9mh+pjEw5aPu5Zn6tVqBlI5QNv4H
MDZdtt3cOPxcUL8I0pK3cjDV3baKFkCttDXKtU3Od/pmSXBLuxDfQY20YgItkSm5
CK955ke/VyR/AV3KEGlh6suTe/csLQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKdy
sXsPpUCB+PVRuTmZEi48Tt+LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNzc1QjNENDIzQTAxMUVGOEUzNUI5RkQ3Q0RDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIOMA0GCSqGSIb3DQEB
CwUAA4IBAQDRuDzrEtJrYF8JdX76H00odZTVmrLSIQnN9i9q+rTWFbLhuALnRu/B
MPcNUETtbxDRuZr9jGV/Iyb3tL3HwB56ofrxV0tp/5479jhpS8Zq7YB03aHxyXqQ
hZdT8v37Qe78HBk1mym9X8orP1Rw4EnvPnGIKIYDrQXQPWYvyu9R9LQ8VeO7HpQQ
nGWYU37EIVPA6ULMPNN5heuzYAuhVd8okoAoY+4+NXoLXSerCBziSexQplZTcl7J
dSrhUbzLvEGyg41Wut2EljTZjiHhVHIPtidey9zkf0kcLbE/xWkeYgDpi2oe2Lth
vOrD74NtC7HwO0XJaUY4Gj+ckQKyw1ou
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:29:00 2024 by rpki-client on console-fra.rpki-client.org