Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52FA80D60B5511EFBF72553E017001B1.roa
File: 52FA80D60B5511EFBF72553E017001B1.roa (raw, json)
Hash identifier: soNRT4x8mRE6rSVwOcEfOTj2mWxTFOzSytTNYlhoNLs=
Subject key identifier: 5E:E6:50:53:10:68:B8:84:3F:6A:C8:CA:14:7E:EE:09:79:E0:4D:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52FA80D60B5511EFBF72553E017001B1.roa
Signing time: Mon 06 May 2024 03:04:16 +0000
ROA not before: Mon 06 May 2024 03:04:13 +0000
ROA not after: Tue 11 Jun 2024 03:04:13 +0000
asID: 63139
IP address blocks: 154.203.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46290 (0xb4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:04:13 2024 GMT
Not After : Jun 11 03:04:13 2024 GMT
Subject: CN=663848b0-102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:c7:ab:59:9d:53:92:ea:fa:0f:dc:10:03:
40:1d:e9:b6:1d:ec:b2:87:5f:76:2e:9f:67:39:42:
d8:83:ae:58:06:83:c5:9f:32:08:02:60:a1:c4:ba:
00:1a:e6:37:49:0a:a6:66:6e:bc:76:80:83:47:c9:
f5:7e:a4:6f:57:d1:79:cb:b1:e1:f4:c0:ac:e7:28:
f8:a0:10:8e:4d:64:32:62:d6:f8:41:d4:f0:cc:74:
37:e0:ac:2a:e5:be:1f:00:de:63:dd:eb:8e:f9:e2:
e7:a3:d0:d9:7c:4d:06:63:23:96:15:6b:91:aa:cf:
cc:54:4b:cd:d5:82:1a:f0:69:2a:0d:37:63:2d:b8:
f9:57:a1:2e:6a:a9:54:68:ae:29:f2:f7:e7:48:99:
67:62:d9:03:e8:3f:36:b1:93:bc:4e:6e:f9:af:43:
75:ab:2f:c6:a4:53:9c:a7:22:36:61:fb:38:20:ba:
8c:56:6e:22:6f:be:37:45:25:30:e4:6a:fc:ff:9d:
e1:ba:c2:60:c1:50:b9:c9:38:b0:fb:ee:e6:93:45:
1d:65:f9:48:ad:9b:35:ca:76:2e:0d:70:95:53:9e:
d7:83:f4:55:36:14:49:f7:ff:c8:bf:a8:d4:57:3d:
62:a6:4c:e7:3e:0d:03:f4:4e:b1:08:ad:0a:46:91:
13:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E6:50:53:10:68:B8:84:3F:6A:C8:CA:14:7E:EE:09:79:E0:4D:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52FA80D60B5511EFBF72553E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.167.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e3:9c:e7:51:6f:a5:18:3e:45:a8:72:47:f3:99:17:a9:d1:
ec:78:07:74:51:5d:c6:91:5e:89:66:20:fd:65:b8:81:14:9d:
3b:51:2a:60:73:9d:d7:e4:43:fe:82:00:a2:37:5d:70:e3:56:
29:fe:ac:85:22:37:91:a3:4b:53:6b:1a:98:70:e6:76:ac:59:
ba:24:3c:06:d4:35:28:3e:eb:b7:96:c5:d0:49:67:fe:8c:0a:
3b:48:62:92:4e:45:2b:70:11:81:4d:1a:c9:a1:78:76:2c:ea:
4d:b8:6b:4d:39:4d:ec:ad:60:16:07:b3:00:aa:f1:b1:dc:26:
c1:13:6b:c0:a8:ed:f5:50:f6:ab:6c:6a:f1:62:c7:aa:76:d3:
54:30:bd:c7:99:a3:6f:7b:7d:5c:94:b4:dc:90:ce:a6:ff:ed:
9f:bf:eb:72:fb:8c:e4:fd:8f:25:38:9f:d8:11:27:c2:9f:1e:
63:12:1f:e3:56:70:56:12:5e:73:f7:7d:1a:8f:6d:07:8f:21:
13:ce:83:7a:5c:52:b3:fa:a8:88:9d:bd:6f:ef:3f:c9:86:61:
3d:b3:33:a9:a0:2d:25:4d:8a:25:ee:80:a2:21:59:fb:23:39:
bd:9b:93:5b:2e:09:f0:36:c5:61:e1:4a:08:de:e1:c8:14:af:
74:9b:2f:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALTSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDMwNDEzWhcNMjQwNjExMDMwNDEzWjAYMRYw
FAYDVQQDEw02NjM4NDhiMC0xMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlSXHq1mdU5Lq+g/cEANAHem2Heyyh192Lp9nOULYg65YBoPFnzIIAmCh
xLoAGuY3SQqmZm68doCDR8n1fqRvV9F5y7Hh9MCs5yj4oBCOTWQyYtb4QdTwzHQ3
4Kwq5b4fAN5j3euO+eLno9DZfE0GYyOWFWuRqs/MVEvN1YIa8GkqDTdjLbj5V6Eu
aqlUaK4p8vfnSJlnYtkD6D82sZO8Tm75r0N1qy/GpFOcpyI2Yfs4ILqMVm4ib743
RSUw5Gr8/53husJgwVC5yTiw++7mk0UdZflIrZs1ynYuDXCVU57Xg/RVNhRJ9//I
v6jUVz1ipkznPg0D9E6xCK0KRpETbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF7m
UFMQaLiEP2rIyhR+7gl54E3cMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MkZBODBENjBCNTUxMUVGQkY3MjU1M0UwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsunMA0GCSqGSIb3DQEB
CwUAA4IBAQCX45znUW+lGD5FqHJH85kXqdHseAd0UV3GkV6JZiD9ZbiBFJ07USpg
c53X5EP+ggCiN11w41Yp/qyFIjeRo0tTaxqYcOZ2rFm6JDwG1DUoPuu3lsXQSWf+
jAo7SGKSTkUrcBGBTRrJoXh2LOpNuGtNOU3srWAWB7MAqvGx3CbBE2vAqO31UPar
bGrxYseqdtNUML3HmaNve31clLTckM6m/+2fv+ty+4zk/Y8lOJ/YESfCnx5jEh/j
VnBWEl5z930aj20HjyETzoN6XFKz+qiInb1v7z/JhmE9szOpoC0lTYol7oCiIVn7
Izm9m5NbLgnwNsVh4UoI3uHIFK90my8s
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:22 2024 by rpki-client on console-ams.rpki-client.org