Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51FBF740B4C11EFB3EE656F017001B1.roa
File: A51FBF740B4C11EFB3EE656F017001B1.roa (raw, json)
Hash identifier: 0eyPm/XkfyajJ+Ju3Sj/UICyGkZDOBRjC4ce7TbRok4=
Subject key identifier: 8E:30:32:A5:A2:11:F9:EE:5A:33:B8:3B:7A:5D:CA:B9:D8:C7:A3:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B46A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51FBF740B4C11EFB3EE656F017001B1.roa
Signing time: Mon 06 May 2024 02:02:09 +0000
ROA not before: Mon 06 May 2024 02:02:05 +0000
ROA not after: Tue 11 Jun 2024 02:02:05 +0000
asID: 138915
IP address blocks: 154.203.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46186 (0xb46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:02:05 2024 GMT
Not After : Jun 11 02:02:05 2024 GMT
Subject: CN=66383a21-d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:6a:48:a6:cd:b5:7e:a9:24:c3:d1:2d:3d:
dc:37:bc:ac:92:cc:db:1d:3a:77:af:c2:7a:6e:f2:
11:b0:bd:ef:6e:fe:44:cd:71:ce:f2:2c:a5:4d:8d:
11:d1:31:26:91:b0:95:ce:b9:a7:71:82:bb:62:d7:
36:24:ee:56:ee:f2:01:cf:86:7a:87:c9:a3:72:f4:
d5:a7:ca:85:a5:00:f8:e5:f2:1a:3a:6a:40:5f:27:
c3:11:5d:d3:b5:1d:d6:5c:2f:a6:f4:f0:8e:51:7f:
97:d2:24:44:83:31:53:20:8c:a2:bd:09:cc:20:00:
ae:f1:a8:f4:a2:70:6b:3d:0a:1d:e8:cc:66:5c:2b:
4a:5d:ac:26:8b:fb:ca:28:f4:04:c4:c2:0e:64:c3:
ea:19:78:d5:97:db:a5:4e:8d:e5:78:97:66:9e:2c:
16:d4:04:74:12:3e:d3:f5:65:eb:f6:b6:ca:22:12:
89:2b:7e:10:01:17:b1:18:0c:09:71:5d:98:29:3a:
a3:de:55:06:2a:4e:56:4f:58:98:90:d1:3f:a8:8a:
e1:4b:b4:d3:7f:ce:55:a2:42:b5:1a:7a:41:a8:06:
78:9f:88:07:7a:54:22:fb:d0:09:44:bf:52:85:1d:
14:ab:32:1d:d5:d9:73:0d:07:24:48:76:6a:9f:a3:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:32:A5:A2:11:F9:EE:5A:33:B8:3B:7A:5D:CA:B9:D8:C7:A3:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A51FBF740B4C11EFB3EE656F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.169.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:5a:e8:61:e5:9e:bc:7a:87:1c:ff:0a:74:01:69:d2:87:2c:
94:97:0b:95:d0:cb:8c:ed:36:16:de:4f:5c:44:13:99:a4:de:
18:e4:18:c5:c6:45:71:35:a4:5e:40:f5:74:cf:c0:7c:dc:a8:
85:ec:b3:2a:b0:04:da:15:05:89:40:73:8c:bf:23:28:1a:5f:
87:b9:e6:dd:80:eb:ce:1b:74:99:7d:2b:3d:bc:8d:dd:a7:c4:
a4:9c:7e:82:91:af:84:1b:2f:a5:bd:e0:b8:2b:9a:b3:96:92:
6c:f3:b9:a7:ab:c5:a3:74:70:84:30:19:7a:d4:00:6c:d0:bd:
c2:33:98:b3:44:36:1e:56:7d:04:98:b8:4a:b6:5b:ea:f1:f8:
17:29:32:9e:e6:ea:e5:64:19:e2:04:71:ff:ad:f8:bf:27:15:
98:07:f4:56:5e:34:5c:38:00:47:89:13:9b:81:56:38:fa:eb:
6f:61:f5:b9:75:f8:9e:ae:d8:e7:6f:9b:be:90:49:1f:0b:a4:
2e:4c:00:40:93:a3:e8:44:28:0f:3a:c2:3c:3d:56:46:d4:3b:
b1:8b:2b:01:55:10:9f:a5:9e:d7:b8:3b:cb:82:31:1d:fb:04:
fe:7f:d9:fb:05:10:3f:2f:82:46:53:9e:53:9f:70:d5:e0:c6:
9d:fd:51:b8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALRqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDIwMjA1WhcNMjQwNjExMDIwMjA1WjAYMRYw
FAYDVQQDEw02NjM4M2EyMS1kNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx6pqSKbNtX6pJMPRLT3cN7yskszbHTp3r8J6bvIRsL3vbv5EzXHO8iyl
TY0R0TEmkbCVzrmncYK7Ytc2JO5W7vIBz4Z6h8mjcvTVp8qFpQD45fIaOmpAXyfD
EV3TtR3WXC+m9PCOUX+X0iREgzFTIIyivQnMIACu8aj0onBrPQod6MxmXCtKXawm
i/vKKPQExMIOZMPqGXjVl9ulTo3leJdmniwW1AR0Ej7T9WXr9rbKIhKJK34QARex
GAwJcV2YKTqj3lUGKk5WT1iYkNE/qIrhS7TTf85VokK1GnpBqAZ4n4gHelQi+9AJ
RL9ShR0UqzId1dlzDQckSHZqn6PQyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFI4w
MqWiEfnuWjO4O3pdyrnYx6OAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNTFGQkY3NDBCNEMxMUVGQjNFRTY1NkYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsupMA0GCSqGSIb3DQEB
CwUAA4IBAQDQWuhh5Z68eocc/wp0AWnShyyUlwuV0MuM7TYW3k9cRBOZpN4Y5BjF
xkVxNaReQPV0z8B83KiF7LMqsATaFQWJQHOMvyMoGl+HuebdgOvOG3SZfSs9vI3d
p8SknH6Cka+EGy+lveC4K5qzlpJs87mnq8WjdHCEMBl61ABs0L3CM5izRDYeVn0E
mLhKtlvq8fgXKTKe5urlZBniBHH/rfi/JxWYB/RWXjRcOABHiRObgVY4+utvYfW5
dfiertjnb5u+kEkfC6QuTABAk6PoRCgPOsI8PVZG1DuxiysBVRCfpZ7XuDvLgjEd
+wT+f9n7BRA/L4JGU55Tn3DV4Mad/VG4
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:21 2024 by rpki-client on console-fra.rpki-client.org