Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44F5BC8C577B11EE833515314AD9E6FC.roa
File: 44F5BC8C577B11EE833515314AD9E6FC.roa (raw, json)
Hash identifier: ou4BV9o8ZhIYbqanFpo7NIJdRLZ3Y3aJH8tztwluwd4=
Subject key identifier: 24:A6:87:68:DD:7A:30:81:BE:00:2B:95:A2:07:0D:08:4E:C4:92:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3EBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44F5BC8C577B11EE833515314AD9E6FC.roa
Signing time: Wed 20 Sep 2023 06:02:24 +0000
ROA not before: Wed 20 Sep 2023 06:02:21 +0000
ROA not after: Thu 25 Jul 2024 06:02:21 +0000
asID: 151610
IP address blocks: 154.194.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16060 (0x3ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 20 06:02:21 2023 GMT
Not After : Jul 25 06:02:21 2024 GMT
Subject: CN=650a8af0-0166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:b1:2a:79:d9:71:18:e7:5a:6a:3e:d4:df:
0e:9e:cf:01:d0:7e:53:a6:11:c0:cf:6b:f7:84:1e:
34:da:ec:b3:50:ca:17:27:48:66:c6:93:6e:92:f5:
f9:6b:37:8b:cd:6f:7b:fb:84:41:ef:7a:ee:93:44:
db:54:6d:e8:f5:b2:bf:79:ca:e5:18:53:9e:d2:b0:
f9:16:bd:9a:80:40:7f:af:cb:6c:7f:9f:24:2a:dc:
e2:e8:48:9a:93:45:52:86:c8:3e:00:29:ce:32:3b:
05:ac:f3:06:d2:43:17:9d:d7:eb:fe:3a:97:9a:4c:
d1:8d:b0:9d:62:b5:e2:1c:5b:49:0f:d2:0c:2a:bc:
f1:81:76:29:2a:be:84:53:cb:e4:59:35:1f:8b:ac:
3c:39:37:15:c6:58:a4:4b:39:d5:74:6d:52:6c:11:
a6:6c:c5:f3:2b:0f:b0:f1:79:ee:1d:d8:ea:91:75:
53:ee:1b:56:a9:5c:fa:40:4e:1a:26:0d:35:24:0d:
0c:03:f2:7c:59:3e:5b:9f:11:59:b8:5d:80:3b:a3:
59:44:14:6d:2e:7d:c5:93:ed:65:c3:73:c1:5e:a8:
4c:26:d5:13:41:ac:75:cd:b7:0c:b4:16:25:59:09:
29:be:7b:c9:37:c9:bd:91:d5:61:27:50:c4:f4:3b:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:87:68:DD:7A:30:81:BE:00:2B:95:A2:07:0D:08:4E:C4:92:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44F5BC8C577B11EE833515314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.39.0/24
Signature Algorithm: sha256WithRSAEncryption
84:41:6b:34:e2:df:1b:34:f5:eb:f2:bb:c5:0c:1b:d6:6e:53:
7a:df:52:6b:5c:18:6a:2f:d3:4e:1d:5e:32:f9:45:df:ef:e7:
bc:f0:95:9c:df:ed:f2:c1:ee:d3:db:20:17:d4:11:19:c6:a7:
14:38:fb:38:56:d4:fa:f2:6e:c1:e3:4f:8c:a5:2d:4b:d4:63:
3c:f3:0d:33:b0:09:ec:da:72:8c:0e:99:fe:86:68:93:f7:d0:
5b:6c:c7:29:85:8d:e9:b7:fb:a0:bc:42:56:5d:13:33:60:7a:
91:31:e1:33:60:7d:73:3f:3c:78:bc:23:91:55:48:ce:be:06:
0f:ac:96:4c:f7:cf:08:ae:9c:85:b8:7f:12:dc:e5:0f:62:65:
5f:12:ce:b7:b4:c6:c7:85:bb:25:5b:df:8b:24:e2:53:88:82:
8a:45:a2:5e:8a:cc:32:d7:c2:0f:02:09:d6:d4:d4:13:67:1c:
7f:64:6e:0a:42:86:11:51:c2:44:e0:c9:ed:58:55:29:92:44:
cd:1f:f9:8e:85:91:22:ac:2a:91:ff:ba:21:e1:7f:52:b6:26:
b8:71:ba:e1:e5:20:e9:a7:9e:0b:46:60:a3:61:57:24:30:79:
87:7f:99:69:a4:c8:2c:1f:64:4f:12:21:60:0a:79:c1:c0:d4:
08:96:b9:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICPrwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MjAwNjAyMjFaFw0yNDA3MjUwNjAyMjFaMBgxFjAU
BgNVBAMTDTY1MGE4YWYwLTAxNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+lLEqedlxGOdaaj7U3w6ezwHQflOmEcDPa/eEHjTa7LNQyhcnSGbGk26S
9flrN4vNb3v7hEHveu6TRNtUbej1sr95yuUYU57SsPkWvZqAQH+vy2x/nyQq3OLo
SJqTRVKGyD4AKc4yOwWs8wbSQxed1+v+OpeaTNGNsJ1iteIcW0kP0gwqvPGBdikq
voRTy+RZNR+LrDw5NxXGWKRLOdV0bVJsEaZsxfMrD7Dxee4d2OqRdVPuG1apXPpA
ThomDTUkDQwD8nxZPlufEVm4XYA7o1lEFG0ufcWT7WXDc8FeqEwm1RNBrHXNtwy0
FiVZCSm+e8k3yb2R1WEnUMT0O+0PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJKaH
aN16MIG+ACuVogcNCE7Ekt4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ0RjVCQzhDNTc3QjExRUU4MzM1MTUzMTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACawicwDQYJKoZIhvcNAQEL
BQADggEBAIRBazTi3xs09evyu8UMG9ZuU3rfUmtcGGov004dXjL5Rd/v57zwlZzf
7fLB7tPbIBfUERnGpxQ4+zhW1PrybsHjT4ylLUvUYzzzDTOwCezacowOmf6GaJP3
0FtsxymFjem3+6C8QlZdEzNgepEx4TNgfXM/PHi8I5FVSM6+Bg+slkz3zwiunIW4
fxLc5Q9iZV8Szre0xseFuyVb34sk4lOIgopFol6KzDLXwg8CCdbU1BNnHH9kbgpC
hhFRwkTgye1YVSmSRM0f+Y6FkSKsKpH/uiHhf1K2JrhxuuHlIOmnngtGYKNhVyQw
eYd/mWmkyCwfZE8SIWAKecHA1AiWuYU=
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:21 2024 by rpki-client on console-ams.rpki-client.org