Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/864D723E0B5211EF9FB90628017001B1.roa
File: 864D723E0B5211EF9FB90628017001B1.roa (raw, json)
Hash identifier: 3x5Ad/GxWJ/Am7cr49bzH7LzEqbTW+h2PAUeyIF++ys=
Subject key identifier: FC:7D:33:CF:86:56:EB:09:4C:AF:AC:D4:08:8D:9E:7B:D9:57:E5:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/864D723E0B5211EF9FB90628017001B1.roa
Signing time: Mon 06 May 2024 02:44:14 +0000
ROA not before: Mon 06 May 2024 02:44:11 +0000
ROA not after: Tue 11 Jun 2024 02:44:11 +0000
asID: 63139
IP address blocks: 154.203.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46256 (0xb4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:44:11 2024 GMT
Not After : Jun 11 02:44:11 2024 GMT
Subject: CN=663843fe-be02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:22:9f:11:82:b7:32:98:13:e1:e0:98:2a:
72:ef:d5:8d:ae:b0:8f:93:13:d0:30:0e:83:22:e3:
78:23:58:2f:c3:12:61:a3:a0:53:45:bd:73:2d:16:
01:7a:27:3f:ea:58:11:cc:4c:48:72:75:b3:7e:6b:
5a:2d:92:aa:fc:12:0c:81:a1:9f:8a:47:b0:33:43:
21:95:58:04:3a:f2:d2:c4:d7:cd:68:33:8e:d8:0a:
b5:a8:53:44:47:1f:70:80:7e:39:91:84:3b:74:9a:
60:e6:98:01:56:0b:5b:96:55:4f:99:8f:f1:fb:60:
7d:18:5d:81:8e:ac:76:8f:4a:8c:2f:06:5d:8a:e5:
66:4b:18:0b:b9:94:8e:ed:87:5e:8d:d6:72:25:93:
53:6b:29:48:63:c7:f1:ff:5e:8c:da:f8:01:a0:b8:
53:eb:4e:fa:f0:9b:39:11:ee:70:f2:39:99:35:6c:
5c:9f:21:a5:96:b0:c2:23:4c:ec:1a:5d:04:ee:91:
07:8f:2a:08:bc:46:ec:84:75:6b:40:0f:0a:33:9a:
05:d9:54:c9:c2:2c:ff:9f:16:06:0e:e1:3f:6a:eb:
97:c9:21:48:a2:82:3d:74:a3:c8:0d:f3:81:e7:93:
81:c7:32:7b:45:69:d5:7f:33:c6:0c:4f:65:4e:0e:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:33:CF:86:56:EB:09:4C:AF:AC:D4:08:8D:9E:7B:D9:57:E5:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/864D723E0B5211EF9FB90628017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0a:6c:9d:59:b5:f6:59:16:92:60:3e:06:d3:da:05:cb:17:
05:7f:d8:a4:1d:cc:9e:bc:f4:bd:35:d0:9a:00:40:6d:19:01:
f2:58:6b:ec:18:55:ea:a0:14:ac:5b:86:bf:cf:9c:d2:e1:1d:
42:a2:4e:66:9f:4f:a3:dc:a5:f7:b0:79:be:41:23:07:35:27:
ce:27:29:8a:f4:5a:c6:94:26:a4:48:f2:3b:97:8a:27:7d:0d:
d6:1a:33:94:ac:17:f5:5f:82:e9:df:ab:35:8e:df:e1:c4:10:
4b:2a:75:e1:42:02:98:e9:32:8d:bc:02:f9:80:ff:59:ce:92:
cc:74:f0:83:11:ab:f3:ce:07:21:a7:e3:17:13:ec:83:ac:4a:
39:3f:09:8f:76:d3:3a:58:75:76:83:00:c4:a0:1a:85:37:45:
5b:37:54:b5:f1:91:ea:27:f8:81:59:7f:46:09:a5:12:9b:6c:
c0:c7:fd:4f:12:ac:a8:1f:61:41:09:d1:f6:cc:50:db:cc:7e:
cf:31:14:2e:cc:48:0b:86:23:87:67:b5:9c:3c:31:cf:fc:eb:
0d:96:6c:6a:08:bb:78:7f:ae:31:2a:7e:21:6f:26:64:b0:07:
dc:ac:ba:3c:de:61:28:2f:91:cd:6b:f3:50:3a:a6:41:34:a0:
01:16:81:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALSwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDI0NDExWhcNMjQwNjExMDI0NDExWjAYMRYw
FAYDVQQDEw02NjM4NDNmZS1iZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwVQinxGCtzKYE+HgmCpy79WNrrCPkxPQMA6DIuN4I1gvwxJho6BTRb1z
LRYBeic/6lgRzExIcnWzfmtaLZKq/BIMgaGfikewM0MhlVgEOvLSxNfNaDOO2Aq1
qFNERx9wgH45kYQ7dJpg5pgBVgtbllVPmY/x+2B9GF2Bjqx2j0qMLwZdiuVmSxgL
uZSO7YdejdZyJZNTaylIY8fx/16M2vgBoLhT60768Js5Ee5w8jmZNWxcnyGllrDC
I0zsGl0E7pEHjyoIvEbshHVrQA8KM5oF2VTJwiz/nxYGDuE/auuXySFIooI9dKPI
DfOB55OBxzJ7RWnVfzPGDE9lTg4fvQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPx9
M8+GVusJTK+s1AiNnnvZV+VCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjRENzIzRTBCNTIxMUVGOUZCOTA2MjgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsu4MA0GCSqGSIb3DQEB
CwUAA4IBAQAsCmydWbX2WRaSYD4G09oFyxcFf9ikHcyevPS9NdCaAEBtGQHyWGvs
GFXqoBSsW4a/z5zS4R1Cok5mn0+j3KX3sHm+QSMHNSfOJymK9FrGlCakSPI7l4on
fQ3WGjOUrBf1X4Lp36s1jt/hxBBLKnXhQgKY6TKNvAL5gP9ZzpLMdPCDEavzzgch
p+MXE+yDrEo5PwmPdtM6WHV2gwDEoBqFN0VbN1S18ZHqJ/iBWX9GCaUSm2zAx/1P
EqyoH2FBCdH2zFDbzH7PMRQuzEgLhiOHZ7WcPDHP/OsNlmxqCLt4f64xKn4hbyZk
sAfcrLo83mEoL5HNa/NQOqZBNKABFoFS
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:19 2024 by rpki-client on console-fra.rpki-client.org