Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B8C764E0B4E11EF9F144302017001B1.roa
File: 4B8C764E0B4E11EF9F144302017001B1.roa (raw, json)
Hash identifier: wh23Ka9aTIh8wMuXaQFp9qDjWf5KCl3xn0cVGzY43+Q=
Subject key identifier: 66:4F:77:E3:CD:EE:5B:AD:F8:04:E6:A2:5C:05:37:73:82:C1:27:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B47C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B8C764E0B4E11EF9F144302017001B1.roa
Signing time: Mon 06 May 2024 02:13:58 +0000
ROA not before: Mon 06 May 2024 02:13:54 +0000
ROA not after: Tue 11 Jun 2024 02:13:54 +0000
asID: 138915
IP address blocks: 154.205.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46204 (0xb47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:13:54 2024 GMT
Not After : Jun 11 02:13:54 2024 GMT
Subject: CN=66383ce5-3b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:70:de:84:e0:fe:d7:ba:8a:27:1c:8f:d7:
62:e2:20:24:21:81:67:88:da:8d:38:67:c5:a0:01:
7a:be:16:1b:92:78:e5:ce:4e:a0:3e:f4:78:da:ab:
cf:77:0e:4b:61:a1:e3:04:ad:8d:73:d5:29:63:66:
c2:f1:00:f8:a9:a9:46:61:c0:24:a6:dc:25:47:35:
0d:0d:9c:91:5d:9d:1f:f9:f4:9d:28:3d:35:38:02:
cd:24:50:ea:e2:ef:58:89:a0:fc:9a:43:6c:f7:26:
23:ad:02:7a:f5:40:9c:7c:45:c2:92:c0:8b:03:1d:
b4:2b:ef:a6:13:ad:29:4e:08:0a:2a:b7:30:cb:f4:
c9:f3:a3:85:22:89:a3:6b:27:ec:6a:d3:1d:21:59:
62:f3:78:e3:1d:6c:b2:12:67:56:90:58:54:c0:4c:
cc:a9:76:8b:32:19:bf:9f:d1:ca:7d:c9:98:43:6c:
d6:20:60:99:1f:1c:4d:57:0d:69:d5:3b:97:c9:39:
75:24:90:69:49:c9:e6:0d:ce:1f:b5:97:36:a9:25:
7e:26:b4:7b:df:85:6d:43:93:d9:3d:84:45:66:51:
e3:b6:cb:09:94:fd:fd:08:a4:ce:f0:87:f5:7b:16:
70:d8:79:4f:09:0c:4f:fb:e6:2f:60:de:40:a7:45:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:77:E3:CD:EE:5B:AD:F8:04:E6:A2:5C:05:37:73:82:C1:27:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B8C764E0B4E11EF9F144302017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.149.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c7:fe:03:60:99:3f:ff:67:97:72:27:5b:d1:46:4a:1a:7c:
55:98:e3:2f:5e:e0:7e:be:e8:39:25:b8:b8:5f:7b:4e:9d:4b:
2f:aa:ca:83:ec:e2:11:24:08:a8:f1:0c:ba:30:47:5f:74:7b:
81:7b:a6:f6:41:3d:96:e3:d8:15:fa:77:9f:28:6f:90:ee:c9:
2e:03:96:7a:ea:82:ec:0d:b6:28:0f:66:44:f9:0a:79:8c:07:
e7:02:73:7b:29:49:b3:21:48:4e:e0:3b:c6:37:2f:c4:ad:5c:
62:5f:71:0a:72:6c:a4:37:f6:61:2d:6b:21:99:ae:e1:a1:4c:
16:09:1f:84:36:21:86:ff:e4:86:78:16:13:b2:6e:b2:35:41:
19:a6:9f:95:94:c8:fa:9e:1f:04:18:ac:2c:ff:9b:1e:89:15:
b9:3e:f0:81:bf:2a:9a:e7:c3:83:0c:5b:fd:7f:54:43:9d:7d:
1f:e0:f5:0b:e9:c9:9f:e4:53:33:8f:66:d0:54:a5:62:1a:b5:
c4:0e:be:b4:93:23:d1:f2:82:47:98:02:96:84:57:91:4b:70:
ac:e7:29:a1:eb:78:e6:c0:09:69:a1:66:93:ea:2b:86:1b:15:
e6:7e:77:05:ec:ad:ec:c1:1b:60:39:3c:8f:bf:37:01:88:af:
8a:11:4b:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALR8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDIxMzU0WhcNMjQwNjExMDIxMzU0WjAYMRYw
FAYDVQQDEw02NjM4M2NlNS0zYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJxw3oTg/te6iiccj9di4iAkIYFniNqNOGfFoAF6vhYbknjlzk6gPvR4
2qvPdw5LYaHjBK2Nc9UpY2bC8QD4qalGYcAkptwlRzUNDZyRXZ0f+fSdKD01OALN
JFDq4u9YiaD8mkNs9yYjrQJ69UCcfEXCksCLAx20K++mE60pTggKKrcwy/TJ86OF
IomjayfsatMdIVli83jjHWyyEmdWkFhUwEzMqXaLMhm/n9HKfcmYQ2zWIGCZHxxN
Vw1p1TuXyTl1JJBpScnmDc4ftZc2qSV+JrR734VtQ5PZPYRFZlHjtssJlP39CKTO
8If1exZw2HlPCQxP++YvYN5Ap0VAXQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGZP
d+PN7lut+ATmolwFN3OCwScsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80QjhDNzY0RTBCNEUxMUVGOUYxNDQzMDIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2VMA0GCSqGSIb3DQEB
CwUAA4IBAQBJx/4DYJk//2eXcidb0UZKGnxVmOMvXuB+vug5Jbi4X3tOnUsvqsqD
7OIRJAio8Qy6MEdfdHuBe6b2QT2W49gV+nefKG+Q7skuA5Z66oLsDbYoD2ZE+Qp5
jAfnAnN7KUmzIUhO4DvGNy/ErVxiX3EKcmykN/ZhLWshma7hoUwWCR+ENiGG/+SG
eBYTsm6yNUEZpp+VlMj6nh8EGKws/5seiRW5PvCBvyqa58ODDFv9f1RDnX0f4PUL
6cmf5FMzj2bQVKViGrXEDr60kyPR8oJHmAKWhFeRS3Cs5ymh63jmwAlpoWaT6iuG
GxXmfncF7K3swRtgOTyPvzcBiK+KEUuB
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:15 2024 by rpki-client on console-fra.rpki-client.org