Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752DFC16061211EF9E766B68017001B1.roa
File: 752DFC16061211EF9E766B68017001B1.roa (raw, json)
Hash identifier: jIq7gMLKlwxIbORAT6p3cWAUrMIBpXE9i/tZ+r+DsYg=
Subject key identifier: EB:F5:70:2F:3D:F9:14:B5:EE:13:9E:6F:21:10:D7:5E:95:EB:B4:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B246
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752DFC16061211EF9E766B68017001B1.roa
Signing time: Mon 29 Apr 2024 10:23:02 +0000
ROA not before: Mon 29 Apr 2024 10:22:58 +0000
ROA not after: Fri 07 Jun 2024 10:22:58 +0000
asID: 138915
IP address blocks: 154.223.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45638 (0xb246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:22:58 2024 GMT
Not After : Jun 7 10:22:58 2024 GMT
Subject: CN=662f7506-7d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:a8:7b:45:45:bb:35:d0:17:be:32:2b:42:
91:bb:31:03:0f:91:b4:a5:cf:3b:2a:b7:aa:17:73:
4c:44:a2:7a:59:f5:74:86:1d:9f:0c:5d:b6:1c:5e:
e6:66:6b:02:d9:cb:26:22:bf:5c:3c:fd:9e:31:df:
83:2a:af:2a:11:d7:b1:0f:4b:48:60:b5:95:eb:1d:
85:ba:89:a0:7a:b8:17:66:85:39:fa:b2:d2:72:b4:
3f:c2:64:cb:92:5a:62:71:19:8b:5d:a6:76:42:f3:
7e:03:5c:0f:b2:bd:48:52:e4:40:c8:e3:ae:d2:b7:
ed:39:41:4c:54:23:84:2d:bf:74:1c:13:50:9d:d5:
6b:78:de:6c:88:a9:46:7c:56:44:8b:38:83:ea:10:
0b:82:4f:62:c7:d7:e5:cc:86:c4:25:35:bf:fd:64:
0b:4d:e3:4e:b7:d0:b8:2e:5d:a1:1e:8f:51:76:da:
45:06:80:f4:d1:62:3b:3f:a6:3b:5f:01:bd:a8:2b:
64:e8:40:dd:3f:a9:72:14:c4:47:18:0d:61:0e:45:
19:a0:6f:38:2d:43:5b:e7:20:21:26:b3:fa:43:83:
b6:06:63:c4:36:74:f4:97:3c:96:a6:74:69:31:fb:
45:34:53:6d:a8:04:71:df:77:92:e4:ae:25:ce:a9:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F5:70:2F:3D:F9:14:B5:EE:13:9E:6F:21:10:D7:5E:95:EB:B4:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/752DFC16061211EF9E766B68017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.26.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f2:32:a2:01:ef:31:60:9d:89:51:24:5d:72:c7:86:7f:7e:
0c:18:8a:6f:64:48:c2:f8:43:2a:39:a9:cc:f8:b0:90:d3:d3:
f1:f6:cd:40:07:c4:16:78:b9:56:23:c9:71:b5:22:00:35:36:
63:ad:4a:e7:87:dc:f2:4b:ef:3a:ab:ef:a5:32:65:74:9d:1d:
e7:25:ef:0d:ce:19:c1:73:2d:15:f8:0f:bf:b2:9d:d6:a6:37:
2c:53:c1:34:f1:90:9b:50:14:5a:98:ce:6b:9d:1a:d3:15:5e:
e6:1d:38:9a:06:41:37:62:0b:75:35:72:8d:4c:47:5b:9d:4b:
78:75:fe:2f:72:10:a6:47:04:c9:44:ce:74:74:14:e2:1d:9c:
b7:0b:55:0b:d1:d2:32:5e:ee:17:00:b3:f9:46:7b:21:5d:e1:
3a:e1:e9:b1:b5:e3:37:88:4f:a8:d0:43:4c:a9:52:45:39:40:
7e:8d:be:07:ce:42:de:1d:30:16:0e:23:c0:67:45:e2:05:d3:
ff:7b:f3:3d:b9:3a:3d:1c:1e:5a:65:00:d2:ec:79:43:f4:de:
5b:04:f9:12:6d:92:12:40:09:89:77:22:6b:74:0b:5c:9d:f8:
8e:51:24:3d:71:09:e9:de:c4:e6:f4:b2:b0:1b:e8:ec:fc:8e:
67:e9:65:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALJGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI5MTAyMjU4WhcNMjQwNjA3MTAyMjU4WjAYMRYw
FAYDVQQDEw02NjJmNzUwNi03ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1MSoe0VFuzXQF74yK0KRuzEDD5G0pc87KreqF3NMRKJ6WfV0hh2fDF22
HF7mZmsC2csmIr9cPP2eMd+DKq8qEdexD0tIYLWV6x2FuomgergXZoU5+rLScrQ/
wmTLklpicRmLXaZ2QvN+A1wPsr1IUuRAyOOu0rftOUFMVCOELb90HBNQndVreN5s
iKlGfFZEiziD6hALgk9ix9flzIbEJTW//WQLTeNOt9C4Ll2hHo9RdtpFBoD00WI7
P6Y7XwG9qCtk6EDdP6lyFMRHGA1hDkUZoG84LUNb5yAhJrP6Q4O2BmPENnT0lzyW
pnRpMftFNFNtqARx33eS5K4lzqnKUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOv1
cC89+RS17hOebyEQ116V67S/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NTJERkMxNjA2MTIxMUVGOUU3NjZCNjgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8aMA0GCSqGSIb3DQEB
CwUAA4IBAQAd8jKiAe8xYJ2JUSRdcseGf34MGIpvZEjC+EMqOanM+LCQ09Px9s1A
B8QWeLlWI8lxtSIANTZjrUrnh9zyS+86q++lMmV0nR3nJe8NzhnBcy0V+A+/sp3W
pjcsU8E08ZCbUBRamM5rnRrTFV7mHTiaBkE3Ygt1NXKNTEdbnUt4df4vchCmRwTJ
RM50dBTiHZy3C1UL0dIyXu4XALP5RnshXeE64emxteM3iE+o0ENMqVJFOUB+jb4H
zkLeHTAWDiPAZ0XiBdP/e/M9uTo9HB5aZQDS7HlD9N5bBPkSbZISQAmJdyJrdAtc
nfiOUSQ9cQnp3sTm9LKwG+js/I5n6WUz
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:18 2024 by rpki-client on console-fra.rpki-client.org