Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE4CFFDA0B5411EF83CA3139017001B1.roa
File: CE4CFFDA0B5411EF83CA3139017001B1.roa (raw, json)
Hash identifier: ZK49IPB3+jqjFUcNCsbAhwR1cZsJob9yZEKi5BcSOLo=
Subject key identifier: C4:79:76:C4:2F:07:48:D1:A7:D2:38:AA:8B:2A:5F:06:66:45:E4:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE4CFFDA0B5411EF83CA3139017001B1.roa
Signing time: Mon 06 May 2024 03:00:34 +0000
ROA not before: Mon 06 May 2024 03:00:30 +0000
ROA not after: Tue 11 Jun 2024 03:00:30 +0000
asID: 63139
IP address blocks: 154.203.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46284 (0xb4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:00:30 2024 GMT
Not After : Jun 11 03:00:30 2024 GMT
Subject: CN=663847d2-7357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:dd:a1:87:fc:1d:5c:a1:35:27:47:90:35:
a5:c8:a0:3e:27:64:6a:2a:b6:f0:45:f5:d4:4c:ee:
6f:f7:b0:f0:5e:6e:0d:65:5d:7e:7b:4f:0c:a8:a9:
04:a6:ba:d2:21:f2:58:42:5c:f2:2d:ce:19:60:67:
4f:a0:a7:60:34:00:f4:79:39:06:27:a0:b6:f2:cf:
e6:f9:ff:f3:9d:3a:dc:fd:4f:9d:03:bb:34:b6:5d:
f9:43:cf:ea:5f:c9:40:49:13:08:4e:2c:80:24:7a:
47:86:21:c1:0a:a4:32:63:d1:08:98:84:93:ef:1f:
94:4e:f2:de:93:de:5d:38:ed:9e:4e:94:84:1f:c8:
79:87:20:40:c6:18:22:ce:17:d9:fa:49:d5:58:07:
92:a6:8d:d1:14:fa:23:d2:8d:9d:b0:e1:ce:48:0b:
7e:62:ea:79:63:0c:e1:33:87:f8:d8:93:87:9c:a1:
d4:d5:e8:69:6b:14:17:56:a0:bb:63:e1:c6:63:c7:
f6:98:7c:ce:a0:5a:db:52:5d:ec:fd:ab:fc:86:49:
b9:8c:fc:14:7b:8e:d3:32:69:10:14:8e:57:12:90:
02:de:f0:b9:46:74:18:d2:2b:50:c6:f1:e6:04:53:
78:0d:a3:75:da:19:21:1a:c7:be:e8:dc:30:73:a8:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:79:76:C4:2F:07:48:D1:A7:D2:38:AA:8B:2A:5F:06:66:45:E4:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE4CFFDA0B5411EF83CA3139017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b5:8b:1a:73:78:c9:01:b2:32:d5:a6:3c:80:41:51:b4:00:
82:62:27:f9:7b:55:46:6f:3f:0c:63:c3:88:14:a7:7b:55:b4:
fb:b1:0d:0b:c0:4e:15:13:66:88:1f:fe:c4:96:02:0d:be:af:
f3:67:57:90:98:6d:41:5a:c5:3f:e8:76:7d:9b:ad:7b:d1:7a:
3a:e4:2a:7a:95:66:f4:bb:05:fe:9a:96:d2:38:fa:b0:d1:b5:
5c:4c:57:20:ef:6f:03:87:55:ac:41:88:e0:47:f1:92:ae:33:
02:a8:87:6e:cf:ad:78:4c:f5:4f:67:c8:1b:6c:c0:36:e0:3f:
58:0c:1d:c7:8f:ce:58:28:3a:e8:45:d1:57:c2:27:e2:89:4b:
8f:45:f9:74:d1:50:5f:9d:e5:ae:4a:5f:9a:85:c8:dc:55:a7:
50:0e:18:7d:74:ca:40:81:53:b3:1a:67:d2:74:d4:fa:83:36:
57:64:f3:e3:d5:2d:ff:90:24:8a:b7:72:1e:8a:60:67:65:d2:
58:03:e0:a6:d1:a9:da:83:44:72:aa:e2:92:19:48:07:7a:ae:
16:03:4e:54:c8:b1:69:3b:af:da:40:18:9a:b5:19:94:5b:89:
7f:1f:6b:09:fc:89:b8:c5:e5:a3:0b:df:bb:79:80:21:55:bb:
38:8f:8c:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALTMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDMwMDMwWhcNMjQwNjExMDMwMDMwWjAYMRYw
FAYDVQQDEw02NjM4NDdkMi03MzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0VvdoYf8HVyhNSdHkDWlyKA+J2RqKrbwRfXUTO5v97DwXm4NZV1+e08M
qKkEprrSIfJYQlzyLc4ZYGdPoKdgNAD0eTkGJ6C28s/m+f/znTrc/U+dA7s0tl35
Q8/qX8lASRMITiyAJHpHhiHBCqQyY9EImIST7x+UTvLek95dOO2eTpSEH8h5hyBA
xhgizhfZ+knVWAeSpo3RFPoj0o2dsOHOSAt+Yup5YwzhM4f42JOHnKHU1ehpaxQX
VqC7Y+HGY8f2mHzOoFrbUl3s/av8hkm5jPwUe47TMmkQFI5XEpAC3vC5RnQY0itQ
xvHmBFN4DaN12hkhGse+6Nwwc6glkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMR5
dsQvB0jRp9I4qosqXwZmReQkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRTRDRkZEQTBCNTQxMUVGODNDQTMxMzkwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuqMA0GCSqGSIb3DQEB
CwUAA4IBAQBvtYsac3jJAbIy1aY8gEFRtACCYif5e1VGbz8MY8OIFKd7VbT7sQ0L
wE4VE2aIH/7ElgINvq/zZ1eQmG1BWsU/6HZ9m6170Xo65Cp6lWb0uwX+mpbSOPqw
0bVcTFcg728Dh1WsQYjgR/GSrjMCqIduz614TPVPZ8gbbMA24D9YDB3Hj85YKDro
RdFXwifiiUuPRfl00VBfneWuSl+ahcjcVadQDhh9dMpAgVOzGmfSdNT6gzZXZPPj
1S3/kCSKt3IeimBnZdJYA+Cm0anag0RyquKSGUgHeq4WA05UyLFpO6/aQBiatRmU
W4l/H2sJ/Im4xeWjC9+7eYAhVbs4j4xH
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:12 2024 by rpki-client on console-fra.rpki-client.org