Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5598D8ACCBC11EE9742F482775412E6.roa
File: B5598D8ACCBC11EE9742F482775412E6.roa (raw, json)
Hash identifier: wHBd4CY64DZhwpsfzknOQoym1x0zYFK13n88wUsybvc=
Subject key identifier: CA:E1:D7:EC:17:51:5A:B0:43:F2:8B:32:BB:36:4F:CB:BE:F2:4E:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5598D8ACCBC11EE9742F482775412E6.roa
Signing time: Fri 16 Feb 2024 11:15:36 +0000
ROA not before: Fri 16 Feb 2024 11:15:33 +0000
ROA not after: Fri 26 Apr 2024 11:15:33 +0000
asID: 9009
IP address blocks: 154.216.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35561 (0x8ae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:15:33 2024 GMT
Not After : Apr 26 11:15:33 2024 GMT
Subject: CN=65cf43d8-5527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:e3:f3:21:76:45:06:ae:0f:3e:66:97:21:
ae:60:8c:1a:8b:6f:dc:90:ad:54:c3:6c:b1:9c:d8:
4c:b3:2f:1b:76:2b:aa:10:78:4a:d8:1a:d3:8f:6e:
c5:02:dd:6c:02:fe:5f:14:9b:51:23:b1:35:79:d2:
4b:1f:18:5f:81:ad:8c:b5:87:54:61:c9:f4:82:cc:
a9:27:b4:16:b4:f5:ad:40:96:5f:e5:1a:b4:0d:54:
93:21:6d:78:c6:bd:64:4b:23:66:22:a4:0e:15:6b:
93:e7:40:43:5d:be:27:c5:67:e1:28:17:3d:90:47:
43:a8:e9:71:82:5f:82:d7:81:cd:49:74:17:8d:3d:
13:0a:8c:27:65:a6:fa:0c:a0:d7:f2:39:7b:42:32:
68:83:50:49:2f:39:02:ac:af:2e:ae:16:7b:fc:46:
a0:4a:d3:ed:ea:35:9c:5c:d5:b8:b9:1a:46:69:81:
0c:db:7f:9f:5c:e7:32:58:57:66:59:1c:ad:5a:66:
ac:46:16:dc:06:44:ca:15:a5:6e:45:db:58:e5:60:
0f:aa:7a:e0:43:4b:0c:f3:30:00:29:4f:a6:96:8c:
6e:cc:5d:ce:a7:1c:78:63:13:a0:c6:55:6e:02:d5:
7c:75:cc:e9:b4:65:74:64:71:73:ea:76:a0:6c:59:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:D7:EC:17:51:5A:B0:43:F2:8B:32:BB:36:4F:CB:BE:F2:4E:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5598D8ACCBC11EE9742F482775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f0:72:eb:8e:3b:93:89:59:1d:a9:88:81:40:ca:15:03:50:
c9:09:93:ac:a4:a6:06:86:80:8f:c5:6f:03:10:07:0d:d9:61:
38:d4:1d:b1:3a:87:e6:c8:3a:39:1a:fb:45:a9:a2:15:38:db:
df:d7:07:a6:f2:2a:2c:d8:6d:79:49:3d:f3:73:2e:0d:d1:d7:
30:60:dc:23:9f:e3:dc:9f:54:95:5f:17:7a:c1:32:5c:1c:49:
f4:e7:f9:a5:07:67:df:59:ea:c0:05:2d:90:b3:b4:7e:fb:e0:
24:58:7f:e2:aa:36:91:e9:72:3d:8f:51:77:8f:15:24:e5:3c:
89:a5:2e:f9:98:73:97:81:16:6e:96:69:5b:00:b0:a0:2e:be:
bc:69:c9:e2:a5:a2:ab:ca:dd:04:ee:23:cb:24:92:be:80:b1:
e9:05:82:93:11:c5:d1:75:95:9e:2d:e8:c8:2f:78:22:29:6d:
1e:34:89:b7:f8:5f:ce:1c:8a:9b:d2:1f:f9:28:bb:37:d1:66:
ca:f2:4d:3e:3e:93:db:ab:b0:a1:d1:82:35:ec:31:55:d3:39:
1d:ee:67:0e:f5:fa:a0:12:82:1f:77:59:2c:8a:e1:a9:c3:74:
ea:35:49:62:da:6a:29:b5:8e:16:9e:c3:6b:0f:a9:02:6f:37:
03:9e:78:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAIrpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjE2MTExNTMzWhcNMjQwNDI2MTExNTMzWjAYMRYw
FAYDVQQDEw02NWNmNDNkOC01NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxWPj8yF2RQauDz5mlyGuYIwai2/ckK1Uw2yxnNhMsy8bdiuqEHhK2BrT
j27FAt1sAv5fFJtRI7E1edJLHxhfga2MtYdUYcn0gsypJ7QWtPWtQJZf5Rq0DVST
IW14xr1kSyNmIqQOFWuT50BDXb4nxWfhKBc9kEdDqOlxgl+C14HNSXQXjT0TCown
Zab6DKDX8jl7QjJog1BJLzkCrK8urhZ7/EagStPt6jWcXNW4uRpGaYEM23+fXOcy
WFdmWRytWmasRhbcBkTKFaVuRdtY5WAPqnrgQ0sM8zAAKU+mloxuzF3Opxx4YxOg
xlVuAtV8dczptGV0ZHFz6nagbFk8ZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMrh
1+wXUVqwQ/KLMrs2T8u+8k4UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNTU5OEQ4QUNDQkMxMUVFOTc0MkY0ODI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtjkMA0GCSqGSIb3DQEB
CwUAA4IBAQBn8HLrjjuTiVkdqYiBQMoVA1DJCZOspKYGhoCPxW8DEAcN2WE41B2x
OofmyDo5GvtFqaIVONvf1wem8ios2G15ST3zcy4N0dcwYNwjn+Pcn1SVXxd6wTJc
HEn05/mlB2ffWerABS2Qs7R+++AkWH/iqjaR6XI9j1F3jxUk5TyJpS75mHOXgRZu
lmlbALCgLr68acnipaKryt0E7iPLJJK+gLHpBYKTEcXRdZWeLejIL3giKW0eNIm3
+F/OHIqb0h/5KLs30WbK8k0+PpPbq7Ch0YI17DFV0zkd7mcO9fqgEoIfd1ksiuGp
w3TqNUli2moptY4WnsNrD6kCbzcDnnjv
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:47 2024 by rpki-client on console-ams.rpki-client.org