Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EB87BD80B5211EF8FADA227017001B1.roa
File: 5EB87BD80B5211EF8FADA227017001B1.roa (raw, json)
Hash identifier: ZPMudYIc8IuZTxhNjnELwUYoKs2AKQeTQkBJ0R8Bl2w=
Subject key identifier: D5:24:23:7D:5B:48:2A:11:02:AC:3A:02:E4:68:DF:1E:F6:8F:DF:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EB87BD80B5211EF8FADA227017001B1.roa
Signing time: Mon 06 May 2024 02:43:08 +0000
ROA not before: Mon 06 May 2024 02:43:04 +0000
ROA not after: Tue 11 Jun 2024 02:43:04 +0000
asID: 63139
IP address blocks: 154.203.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46254 (0xb4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:43:04 2024 GMT
Not After : Jun 11 02:43:04 2024 GMT
Subject: CN=663843bc-6a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:32:51:aa:16:03:be:21:53:b1:91:a0:4a:
ea:e9:16:2f:18:72:9d:67:2d:21:3e:cd:dc:94:f3:
0c:f4:49:cc:00:41:50:9d:65:21:52:ca:81:cf:c3:
9a:86:d9:3d:f3:c0:e5:bd:f8:b0:18:43:ae:23:c2:
bb:b2:aa:21:e3:e5:6f:8d:e2:4e:0c:54:7e:7e:cb:
63:d8:4a:27:90:9c:d9:81:11:5e:d1:c4:05:12:8d:
62:62:81:63:67:e2:be:12:42:a5:c5:1a:22:5a:10:
f5:54:c4:50:2c:60:65:39:32:14:a7:fa:52:69:c1:
6c:7e:51:4b:21:51:14:67:d1:b5:d5:2b:c1:cc:47:
a1:b9:7b:c0:ae:fa:aa:3e:24:d9:ed:0d:75:06:50:
d4:10:ce:ed:a9:2f:34:85:2b:70:75:45:b4:82:04:
64:23:a4:a9:32:a0:ba:cf:e8:1c:fb:26:4e:c7:1f:
97:30:c8:a1:99:65:01:8a:90:4a:42:2e:c1:9b:0c:
cc:1a:77:e0:e1:02:ff:47:2a:81:6c:e8:73:8c:e8:
05:ee:ef:61:c3:ab:de:db:d9:0b:15:0c:28:ee:57:
b5:10:21:e5:7a:30:98:f4:03:5f:94:ac:79:ff:2b:
85:71:30:47:23:08:6d:2b:bc:ae:34:24:a9:57:5e:
71:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:23:7D:5B:48:2A:11:02:AC:3A:02:E4:68:DF:1E:F6:8F:DF:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EB87BD80B5211EF8FADA227017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.185.0/24
Signature Algorithm: sha256WithRSAEncryption
09:95:9e:64:1b:41:d5:d4:65:80:87:c4:e0:93:c8:a3:91:48:
5d:02:82:ce:43:27:c9:17:a4:a4:ce:0d:c7:95:cc:2a:87:65:
50:e5:33:4e:79:4c:37:1e:80:d7:dc:e2:96:02:c3:27:18:73:
33:25:16:4c:d9:b0:8b:3b:d2:e6:c0:89:b7:46:31:32:ae:ab:
54:1c:fe:0e:91:43:d4:38:86:b7:e9:f7:bf:85:83:ba:bb:d9:
77:03:52:ac:a1:63:8d:8c:9c:65:51:9d:cc:9e:b7:ea:d2:ab:
73:8d:4f:b2:ce:7a:b7:39:f6:27:32:da:10:c2:75:88:af:d1:
b2:1a:7a:e0:30:dc:4f:5a:53:2c:d7:51:b0:f7:06:e4:bc:e5:
d7:2d:22:35:51:cb:c0:32:95:12:a1:f7:45:5e:b3:58:28:eb:
1e:9d:0b:42:32:e3:d4:e0:11:95:0f:f7:4c:31:7d:90:54:c7:
8d:56:70:2b:4b:06:60:c6:4c:25:74:a3:72:30:9e:fc:ea:a0:
d0:d2:ce:26:27:b0:98:70:b4:11:e7:45:94:12:7b:d6:ce:3a:
a6:70:e2:69:9a:55:ec:89:e8:dc:f3:65:2e:3e:d2:b0:77:b0:
37:40:67:d8:86:1b:ea:59:1b:20:bc:5d:69:b1:63:b0:85:c2:
15:b8:69:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALSuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDI0MzA0WhcNMjQwNjExMDI0MzA0WjAYMRYw
FAYDVQQDEw02NjM4NDNiYy02YTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvJ8yUaoWA74hU7GRoErq6RYvGHKdZy0hPs3clPMM9EnMAEFQnWUhUsqB
z8Oahtk988DlvfiwGEOuI8K7sqoh4+VvjeJODFR+fstj2EonkJzZgRFe0cQFEo1i
YoFjZ+K+EkKlxRoiWhD1VMRQLGBlOTIUp/pSacFsflFLIVEUZ9G11SvBzEehuXvA
rvqqPiTZ7Q11BlDUEM7tqS80hStwdUW0ggRkI6SpMqC6z+gc+yZOxx+XMMihmWUB
ipBKQi7BmwzMGnfg4QL/RyqBbOhzjOgF7u9hw6ve29kLFQwo7le1ECHlejCY9ANf
lKx5/yuFcTBHIwhtK7yuNCSpV15x6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNUk
I31bSCoRAqw6AuRo3x72j9+SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RUI4N0JEODBCNTIxMUVGOEZBREEyMjcwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsu5MA0GCSqGSIb3DQEB
CwUAA4IBAQAJlZ5kG0HV1GWAh8Tgk8ijkUhdAoLOQyfJF6Skzg3Hlcwqh2VQ5TNO
eUw3HoDX3OKWAsMnGHMzJRZM2bCLO9LmwIm3RjEyrqtUHP4OkUPUOIa36fe/hYO6
u9l3A1KsoWONjJxlUZ3Mnrfq0qtzjU+yznq3OfYnMtoQwnWIr9GyGnrgMNxPWlMs
11Gw9wbkvOXXLSI1UcvAMpUSofdFXrNYKOsenQtCMuPU4BGVD/dMMX2QVMeNVnAr
SwZgxkwldKNyMJ786qDQ0s4mJ7CYcLQR50WUEnvWzjqmcOJpmlXsiejc82UuPtKw
d7A3QGfYhhvqWRsgvF1psWOwhcIVuGlp
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:23 2024 by rpki-client on console-ams.rpki-client.org