Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C158DF18038111EFB8CCD3FA007001B1.roa
File: C158DF18038111EFB8CCD3FA007001B1.roa (raw, json)
Hash identifier: 66GXwNyMzy1sJv18NGz11x+k+Z+R9liFIu21WBG147M=
Subject key identifier: 1E:94:35:6C:9F:E4:0C:C4:CA:21:C1:6B:AA:0C:06:BB:68:AE:22:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B154
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C158DF18038111EFB8CCD3FA007001B1.roa
Signing time: Fri 26 Apr 2024 04:02:10 +0000
ROA not before: Fri 26 Apr 2024 04:02:07 +0000
ROA not after: Tue 03 Sep 2024 04:02:07 +0000
asID: 131685
IP address blocks: 154.210.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45396 (0xb154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:02:07 2024 GMT
Not After : Sep 3 04:02:07 2024 GMT
Subject: CN=662b2742-4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:14:6c:76:19:7c:00:96:cf:be:49:b3:cf:
ca:ae:4b:a5:c0:fe:c7:a4:48:81:86:fd:38:0a:3d:
79:27:98:35:a2:53:f2:59:20:20:04:2a:7a:7b:04:
1b:b9:7e:e2:aa:bc:f8:aa:6a:94:62:57:ee:99:46:
33:55:72:7e:0f:b9:b0:53:7d:89:a2:0e:a7:7e:f4:
75:58:e7:e9:a9:64:4a:a0:98:05:de:7a:2c:fa:01:
35:62:1c:5f:7a:ea:23:32:2a:3f:c7:e2:75:ad:72:
08:00:56:41:bf:4a:4e:64:48:cc:a4:00:87:b9:d1:
4c:07:c7:ef:e8:bc:9b:35:2e:e5:31:93:da:2e:7f:
27:d8:9c:72:06:cb:9e:51:bd:37:01:d9:e7:f7:40:
e7:3b:c3:24:34:f8:78:f2:d9:02:21:a6:e5:2b:c4:
0f:8d:55:b0:73:c7:8b:2e:11:c0:63:15:61:b6:2f:
f1:53:5f:3e:76:b9:70:83:68:8d:10:5f:90:11:15:
7a:3c:cd:f4:bb:95:1a:33:39:2e:0b:77:bf:e4:24:
22:0f:86:10:3d:6f:2d:fe:cf:a8:2b:8e:d5:c0:2c:
dd:8b:76:e3:98:7f:84:f2:59:d2:bb:66:52:3f:7a:
70:7f:3d:3b:d9:c4:3d:76:2e:e9:fb:64:a4:83:7c:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:35:6C:9F:E4:0C:C4:CA:21:C1:6B:AA:0C:06:BB:68:AE:22:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C158DF18038111EFB8CCD3FA007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.236.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cf:f9:a3:6c:ce:59:ef:d0:8b:e9:ee:50:ef:0f:bb:69:ea:
42:7c:ae:39:d4:82:12:c5:78:f4:8e:4b:40:0f:32:fa:70:32:
ba:be:69:69:0c:c4:ee:02:64:2b:5b:26:5a:e1:97:12:37:79:
28:16:67:46:90:8f:30:38:83:0b:c3:9f:28:6d:08:53:98:12:
a7:f8:40:cb:98:fb:8e:a1:fb:69:14:cc:d3:0b:c3:d2:cd:a8:
b0:b1:d0:89:a5:ea:b7:c0:37:43:f5:20:b8:60:0f:81:35:b3:
82:53:7c:de:45:7b:c3:d6:f9:ec:ff:9e:4b:a3:9a:05:9c:34:
bc:c2:07:98:a8:25:31:55:fb:9a:99:68:9c:7c:21:4e:4c:5c:
9f:dd:d9:25:2c:84:84:6b:28:01:39:94:8e:37:93:54:2b:27:
2f:95:2c:fe:d7:85:84:3c:16:90:fb:7c:5b:6b:14:84:50:38:
8e:4a:6c:9a:c2:8a:09:38:18:bd:54:f9:ef:d8:8f:59:05:36:
2b:61:99:15:b7:1a:db:7e:96:6f:c8:49:be:11:b4:6e:d5:e6:
bc:2b:64:76:ed:31:38:3d:c9:b4:47:8d:7c:c4:eb:98:9d:d1:
e3:6e:ea:4d:ae:0c:c5:19:10:40:41:f3:10:b5:84:c2:e3:0b:
05:6a:89:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALFUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDQwMjA3WhcNMjQwOTAzMDQwMjA3WjAYMRYw
FAYDVQQDEw02NjJiMjc0Mi00NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA218UbHYZfACWz75Js8/KrkulwP7HpEiBhv04Cj15J5g1olPyWSAgBCp6
ewQbuX7iqrz4qmqUYlfumUYzVXJ+D7mwU32Jog6nfvR1WOfpqWRKoJgF3nos+gE1
YhxfeuojMio/x+J1rXIIAFZBv0pOZEjMpACHudFMB8fv6LybNS7lMZPaLn8n2Jxy
BsueUb03Adnn90DnO8MkNPh48tkCIablK8QPjVWwc8eLLhHAYxVhti/xU18+drlw
g2iNEF+QERV6PM30u5UaMzkuC3e/5CQiD4YQPW8t/s+oK47VwCzdi3bjmH+E8lnS
u2ZSP3pwfz072cQ9di7p+2Skg3z2OQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFB6U
NWyf5AzEyiHBa6oMBrtoriLcMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMTU4REYxODAzODExMUVGQjhDQ0QzRkEwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtLsMA0GCSqGSIb3DQEB
CwUAA4IBAQCVz/mjbM5Z79CL6e5Q7w+7aepCfK451IISxXj0jktADzL6cDK6vmlp
DMTuAmQrWyZa4ZcSN3koFmdGkI8wOIMLw58obQhTmBKn+EDLmPuOoftpFMzTC8PS
zaiwsdCJpeq3wDdD9SC4YA+BNbOCU3zeRXvD1vns/55Lo5oFnDS8wgeYqCUxVfua
mWicfCFOTFyf3dklLISEaygBOZSON5NUKycvlSz+14WEPBaQ+3xbaxSEUDiOSmya
wooJOBi9VPnv2I9ZBTYrYZkVtxrbfpZvyEm+EbRu1ea8K2R27TE4Pcm0R418xOuY
ndHjbupNrgzFGRBAQfMQtYTC4wsFaonU
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:23 2024 by rpki-client on console-fra.rpki-client.org