Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/428DF60C0B5E11EFA705190B017001B1.roa
File: 428DF60C0B5E11EFA705190B017001B1.roa (raw, json)
Hash identifier: vMAv1rFOgNzSou34+HZ3yxGpLcXPVpvqSwykM/OEYsk=
Subject key identifier: C3:F8:8D:E1:42:A3:EF:12:AC:DA:E1:12:CE:77:06:D5:28:12:4D:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B502
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/428DF60C0B5E11EFA705190B017001B1.roa
Signing time: Mon 06 May 2024 04:08:14 +0000
ROA not before: Mon 06 May 2024 04:08:11 +0000
ROA not after: Tue 11 Jun 2024 04:08:11 +0000
asID: 328608
IP address blocks: 154.221.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 May 2024 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46338 (0xb502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 04:08:11 2024 GMT
Not After : Jun 11 04:08:11 2024 GMT
Subject: CN=663857ae-f41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:0c:63:a4:a1:f1:83:0a:52:2f:a5:37:90:
04:05:7f:0f:1f:eb:a8:ee:88:87:80:a6:f2:8c:31:
01:1d:02:13:75:d4:68:38:77:d0:fc:9b:db:86:ae:
62:71:55:0b:c8:02:d1:7d:c1:23:db:bc:49:de:43:
64:25:ca:d1:49:17:ea:c4:50:ca:10:7b:b8:88:d2:
db:55:1c:56:f6:7c:29:99:cb:84:54:60:b3:58:2f:
40:c2:bf:a9:97:f7:0b:88:cc:86:03:ef:80:45:4b:
45:27:5e:48:de:bd:62:d1:89:91:7b:07:cf:f7:81:
fd:1f:7c:aa:de:98:57:9a:8a:b7:f4:3d:84:34:f5:
9a:9d:c6:53:78:51:a2:49:a4:1c:e8:4a:9f:48:93:
ee:ec:ba:50:88:6b:30:d7:53:80:ab:b2:cb:be:35:
7a:76:ed:d2:9e:7a:f3:78:97:83:94:e4:c0:67:57:
71:d8:3c:4c:ff:fc:93:78:7f:15:4a:b1:45:59:40:
e4:e4:eb:86:39:ce:19:a4:e3:de:e6:7b:b8:16:7d:
bb:d5:2d:da:3a:ac:23:80:6c:4b:23:6f:d9:df:5a:
97:3f:43:8a:77:8d:54:5a:3d:12:b3:94:78:41:6c:
4b:81:b6:f9:91:15:7f:15:34:76:9c:4a:64:3b:6c:
3b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:8D:E1:42:A3:EF:12:AC:DA:E1:12:CE:77:06:D5:28:12:4D:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/428DF60C0B5E11EFA705190B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.128.0/18
Signature Algorithm: sha256WithRSAEncryption
73:d4:29:ee:2e:61:a4:14:48:7f:8f:b3:b5:d7:54:6c:a0:b2:
42:3a:74:7e:99:7b:85:f9:ef:78:95:11:34:f3:2d:02:31:ee:
91:6f:35:0d:65:62:8f:10:fd:de:d5:0b:09:bd:b9:41:39:47:
a9:74:7a:93:16:67:d2:5e:38:c8:0d:89:f4:92:4a:24:7b:69:
89:b1:b1:0d:6b:db:27:06:bf:8e:98:5b:59:c8:f1:a4:a1:cb:
a7:f1:7c:ad:70:c7:c1:83:19:a6:a0:6c:4a:e2:6f:6e:52:42:
0c:99:b7:1c:0b:de:7c:a7:06:17:b1:4b:68:99:34:53:1c:4c:
da:81:6a:d9:ee:d9:db:3e:b0:27:e4:45:d4:f2:0e:c1:f7:45:
fd:34:18:dc:2f:27:5b:97:dd:2e:77:6d:dd:5d:d8:ec:76:f8:
6a:a1:dc:7b:b5:b0:ea:89:b2:b8:31:1e:52:d6:14:49:a6:a7:
3a:40:02:16:1e:76:f4:f2:40:46:b6:55:7e:5d:75:37:86:25:
57:cc:65:f2:a7:94:e1:30:cb:12:c6:32:f5:d4:94:d2:80:27:
b7:0d:c0:85:dd:1a:f1:3f:cc:15:2b:8e:67:de:c7:b6:8b:f4:
cd:89:2f:a0:e6:52:21:db:80:12:4b:f0:d8:a8:f2:80:ff:3a:
bf:a6:8c:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALUCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDQwODExWhcNMjQwNjExMDQwODExWjAYMRYw
FAYDVQQDEw02NjM4NTdhZS1mNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyXoMY6Sh8YMKUi+lN5AEBX8PH+uo7oiHgKbyjDEBHQITddRoOHfQ/Jvb
hq5icVULyALRfcEj27xJ3kNkJcrRSRfqxFDKEHu4iNLbVRxW9nwpmcuEVGCzWC9A
wr+pl/cLiMyGA++ARUtFJ15I3r1i0YmRewfP94H9H3yq3phXmoq39D2ENPWancZT
eFGiSaQc6EqfSJPu7LpQiGsw11OAq7LLvjV6du3SnnrzeJeDlOTAZ1dx2DxM//yT
eH8VSrFFWUDk5OuGOc4ZpOPe5nu4Fn271S3aOqwjgGxLI2/Z31qXP0OKd41UWj0S
s5R4QWxLgbb5kRV/FTR2nEpkO2w7ewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMP4
jeFCo+8SrNrhEs53BtUoEk1LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80MjhERjYwQzBCNUUxMUVGQTcwNTE5MEIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmt2AMA0GCSqGSIb3DQEB
CwUAA4IBAQBz1CnuLmGkFEh/j7O111RsoLJCOnR+mXuF+e94lRE08y0CMe6RbzUN
ZWKPEP3e1QsJvblBOUepdHqTFmfSXjjIDYn0kkoke2mJsbENa9snBr+OmFtZyPGk
ocun8XytcMfBgxmmoGxK4m9uUkIMmbccC958pwYXsUtomTRTHEzagWrZ7tnbPrAn
5EXU8g7B90X9NBjcLydbl90ud23dXdjsdvhqodx7tbDqibK4MR5S1hRJpqc6QAIW
Hnb08kBGtlV+XXU3hiVXzGXyp5ThMMsSxjL11JTSgCe3DcCF3RrxP8wVK45n3se2
i/TNiS+g5lIh24ASS/DYqPKA/zq/powF
-----END CERTIFICATE-----
Generated at Mon May 13 03:36:43 2024 by rpki-client on console-ams.rpki-client.org