Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75A203E05EF11EFB224534F017001B1.roa
File: A75A203E05EF11EFB224534F017001B1.roa (raw, json)
Hash identifier: 6LINmfGR6bXh0S+TC8596Ha7RD93JZqz1uAQNm0bRgY=
Subject key identifier: 72:39:F2:7C:B8:67:70:BE:2F:CB:FD:12:3E:1C:78:ED:D7:31:2A:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75A203E05EF11EFB224534F017001B1.roa
Signing time: Mon 29 Apr 2024 06:13:53 +0000
ROA not before: Mon 29 Apr 2024 06:13:50 +0000
ROA not after: Thu 30 May 2024 06:13:50 +0000
asID: 211826
IP address blocks: 154.194.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45520 (0xb1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 06:13:50 2024 GMT
Not After : May 30 06:13:50 2024 GMT
Subject: CN=662f3aa1-73d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:6b:52:a3:f7:af:7a:da:fc:8e:46:24:b7:
db:7a:36:d9:dc:77:06:89:94:1e:62:fb:01:4d:aa:
eb:5f:aa:9b:57:5a:1b:42:db:6e:3b:be:d6:d5:bf:
44:45:b9:bb:b3:eb:9f:12:5d:05:3d:be:0f:58:90:
d9:c6:fe:e8:ec:60:a1:1a:80:16:28:41:22:a3:82:
6d:17:59:56:71:4c:74:5f:87:4b:e6:af:97:4d:ac:
79:71:04:d1:90:89:2e:48:df:09:38:e3:a0:d2:62:
ae:b2:39:4e:9f:8c:dc:08:a7:e8:06:eb:c4:41:2c:
fd:58:ca:0c:8b:3d:8f:aa:2d:cf:dd:f1:9e:dd:ff:
25:50:ce:9e:d1:5c:11:3e:8e:72:fc:e5:03:2c:db:
ae:5e:0f:ed:db:96:3c:4a:6d:d9:78:97:d7:94:e7:
54:ea:98:ff:c1:1a:cf:2a:39:f1:12:de:13:31:1a:
27:62:44:87:80:a9:8a:31:31:f1:8b:b6:10:11:7f:
6a:c4:62:11:b6:1e:6e:ea:d9:1a:af:a0:ba:df:91:
8b:86:ce:37:ea:1a:f4:39:92:bb:8c:ad:8a:b3:49:
6f:8f:53:d3:9c:b1:ae:84:a7:e2:40:e8:26:05:85:
58:76:d0:38:30:de:23:52:86:ba:d2:b8:90:dd:ed:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:F2:7C:B8:67:70:BE:2F:CB:FD:12:3E:1C:78:ED:D7:31:2A:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A75A203E05EF11EFB224534F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ea:5e:48:42:dd:08:ab:60:11:91:61:59:aa:7a:06:d3:ef:
b7:fd:b6:93:34:91:66:e9:02:3f:01:c3:4e:fe:c6:01:a8:24:
07:fe:ba:ec:84:e8:58:86:96:a5:39:1c:ba:5b:42:8c:f7:7e:
07:03:e7:a2:da:7d:6d:0c:dc:11:05:8b:6d:e6:3d:8b:72:dd:
47:26:c0:fa:ab:55:b1:a0:6e:13:5b:e0:e1:d8:2f:7d:63:a0:
f0:1c:37:dc:71:c5:f1:e6:92:06:b7:41:db:6d:e3:e3:8d:de:
3b:20:fd:da:08:52:23:83:af:63:74:fc:6f:89:d1:ba:ff:f5:
59:bb:ce:86:38:34:90:b5:74:c3:dd:cf:48:b2:00:be:6f:2e:
0b:5b:1b:65:45:8f:c4:d7:13:54:90:64:78:80:f2:0e:07:34:
13:1f:1a:66:21:87:0f:66:7b:1c:c1:d7:86:99:76:51:53:5c:
1c:72:bd:79:94:9a:20:4a:ba:60:32:0d:6e:f3:a9:7c:9a:1a:
83:1c:98:3f:a3:0f:4f:2d:68:a8:e0:d1:4a:7f:47:62:4e:50:
0d:19:88:65:b1:8e:6a:e1:1d:a3:a9:7d:40:eb:25:4c:cb:20:
cb:bf:e6:26:bd:b0:2b:3f:15:0c:51:d3:0c:ea:d2:2d:f0:1a:
59:16:40:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALHQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI5MDYxMzUwWhcNMjQwNTMwMDYxMzUwWjAYMRYw
FAYDVQQDEw02NjJmM2FhMS03M2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuDBrUqP3r3ra/I5GJLfbejbZ3HcGiZQeYvsBTarrX6qbV1obQttuO77W
1b9ERbm7s+ufEl0FPb4PWJDZxv7o7GChGoAWKEEio4JtF1lWcUx0X4dL5q+XTax5
cQTRkIkuSN8JOOOg0mKusjlOn4zcCKfoBuvEQSz9WMoMiz2Pqi3P3fGe3f8lUM6e
0VwRPo5y/OUDLNuuXg/t25Y8Sm3ZeJfXlOdU6pj/wRrPKjnxEt4TMRonYkSHgKmK
MTHxi7YQEX9qxGIRth5u6tkar6C635GLhs436hr0OZK7jK2Ks0lvj1PTnLGuhKfi
QOgmBYVYdtA4MN4jUoa60riQ3e3pIQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHI5
8ny4Z3C+L8v9Ej4ceO3XMSpJMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BNzVBMjAzRTA1RUYxMUVGQjIyNDUzNEYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIkMA0GCSqGSIb3DQEB
CwUAA4IBAQCM6l5IQt0Iq2ARkWFZqnoG0++3/baTNJFm6QI/AcNO/sYBqCQH/rrs
hOhYhpalORy6W0KM934HA+ei2n1tDNwRBYtt5j2Lct1HJsD6q1WxoG4TW+Dh2C99
Y6DwHDfcccXx5pIGt0HbbePjjd47IP3aCFIjg69jdPxvidG6//VZu86GODSQtXTD
3c9IsgC+by4LWxtlRY/E1xNUkGR4gPIOBzQTHxpmIYcPZnscwdeGmXZRU1wccr15
lJogSrpgMg1u86l8mhqDHJg/ow9PLWio4NFKf0diTlANGYhlsY5q4R2jqX1A6yVM
yyDLv+YmvbArPxUMUdMM6tIt8BpZFkBj
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:28 2024 by rpki-client on console-ams.rpki-client.org