Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2795834CCBF11EEB56B1E88775412E6.roa
File: D2795834CCBF11EEB56B1E88775412E6.roa (raw, json)
Hash identifier: tl5CSQM1cjyu+b9zeqPHmiyvqChoz5ZNznaukVqt+yI=
Subject key identifier: 8B:45:E7:3A:24:6C:12:2B:42:7D:31:E7:DB:DF:E1:43:16:68:74:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2795834CCBF11EEB56B1E88775412E6.roa
Signing time: Fri 16 Feb 2024 11:37:54 +0000
ROA not before: Fri 16 Feb 2024 11:37:50 +0000
ROA not after: Fri 26 Apr 2024 11:37:50 +0000
asID: 9009
IP address blocks: 154.216.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35581 (0x8afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:37:50 2024 GMT
Not After : Apr 26 11:37:50 2024 GMT
Subject: CN=65cf4912-ab8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:c6:db:42:2b:71:37:4e:a7:8e:14:48:30:
cc:dd:f5:c2:23:87:d1:cf:ff:9d:c2:48:ea:f4:fd:
c1:eb:05:af:52:e8:f6:80:e0:d0:0f:c4:e7:80:d0:
18:2e:07:93:77:c4:45:0d:08:f4:9e:47:61:66:97:
d2:8e:82:61:4d:47:a2:69:3e:19:38:99:87:7d:92:
c5:16:cc:e3:63:e0:aa:52:e4:2c:53:62:34:64:c8:
6e:94:88:65:6d:64:b2:c1:d9:60:be:49:8d:ee:3f:
74:98:65:45:4d:ff:54:03:d6:4b:2f:76:59:0d:81:
4f:57:b1:00:7c:20:44:f9:a1:c2:f5:10:fc:d5:33:
d5:35:d6:8f:0c:79:2b:55:7f:b5:e5:d8:25:bb:6b:
26:47:62:69:c0:f8:ba:83:65:21:68:03:62:7b:43:
78:84:f0:72:14:68:2d:09:e2:c9:b5:44:58:b2:48:
c8:28:cc:5c:2d:5a:18:81:7d:5c:f6:51:d7:28:16:
0e:6b:05:c5:15:8b:1f:fc:9f:8e:40:e6:34:3a:f1:
14:e1:99:98:c2:66:40:c3:ad:79:3b:31:1a:5f:23:
13:f9:6c:9e:af:f8:8a:5d:52:4d:97:8c:d5:91:5c:
6e:c9:03:05:84:86:84:7f:bd:98:f4:35:3e:14:87:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:45:E7:3A:24:6C:12:2B:42:7D:31:E7:DB:DF:E1:43:16:68:74:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2795834CCBF11EEB56B1E88775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.238.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:91:bd:0c:e5:ba:04:e8:26:e2:61:b3:0c:80:ca:2a:19:33:
2b:13:e5:6e:01:8f:1d:cd:de:43:27:12:82:f6:df:ee:b0:f6:
77:ca:2a:5a:68:70:4f:cb:87:0b:d8:98:be:c5:8e:07:ed:42:
19:0a:4f:a5:b7:c9:b6:fa:7d:be:4b:e4:13:44:ca:c7:a3:23:
2b:fd:41:c6:fd:b6:0d:78:86:72:1f:38:8b:fe:fb:d1:e3:cf:
fd:22:39:0e:fa:ab:5b:99:9e:7c:c6:7e:9c:b0:c7:6d:ff:45:
3c:14:6a:b5:8a:41:69:10:7a:87:1b:27:dd:b0:42:7c:0a:68:
7e:07:4a:60:bd:f9:0a:d8:09:ba:09:3f:75:35:6d:90:22:8e:
53:a9:7a:d9:69:e0:11:2b:90:9d:5b:d6:c2:f8:41:6c:f6:da:
23:e0:a1:8d:0e:0a:f1:69:95:46:6d:5b:ff:d4:47:5f:95:5c:
44:da:8a:a9:58:a6:f5:ce:42:b1:3f:9f:86:56:3a:c9:37:92:
30:4e:b9:34:14:86:65:05:21:2b:50:3c:2c:63:18:75:d4:b8:
34:fc:4d:f0:f4:e3:1b:1d:7f:fc:44:3a:75:dc:aa:41:b9:dc:
32:16:7e:98:eb:76:fa:39:0e:92:cc:79:f5:79:0b:20:e7:c1:
67:6a:90:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAIr9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjE2MTEzNzUwWhcNMjQwNDI2MTEzNzUwWjAYMRYw
FAYDVQQDEw02NWNmNDkxMi1hYjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxHTG20IrcTdOp44USDDM3fXCI4fRz/+dwkjq9P3B6wWvUuj2gODQD8Tn
gNAYLgeTd8RFDQj0nkdhZpfSjoJhTUeiaT4ZOJmHfZLFFszjY+CqUuQsU2I0ZMhu
lIhlbWSywdlgvkmN7j90mGVFTf9UA9ZLL3ZZDYFPV7EAfCBE+aHC9RD81TPVNdaP
DHkrVX+15dglu2smR2JpwPi6g2UhaANie0N4hPByFGgtCeLJtURYskjIKMxcLVoY
gX1c9lHXKBYOawXFFYsf/J+OQOY0OvEU4ZmYwmZAw615OzEaXyMT+Wyer/iKXVJN
l4zVkVxuyQMFhIaEf72Y9DU+FIel/QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFItF
5zokbBIrQn0x59vf4UMWaHQpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMjc5NTgzNENDQkYxMUVFQjU2QjFFODg3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtjuMA0GCSqGSIb3DQEB
CwUAA4IBAQC7kb0M5boE6CbiYbMMgMoqGTMrE+VuAY8dzd5DJxKC9t/usPZ3yipa
aHBPy4cL2Ji+xY4H7UIZCk+lt8m2+n2+S+QTRMrHoyMr/UHG/bYNeIZyHziL/vvR
48/9IjkO+qtbmZ58xn6csMdt/0U8FGq1ikFpEHqHGyfdsEJ8Cmh+B0pgvfkK2Am6
CT91NW2QIo5TqXrZaeARK5CdW9bC+EFs9toj4KGNDgrxaZVGbVv/1EdflVxE2oqp
WKb1zkKxP5+GVjrJN5IwTrk0FIZlBSErUDwsYxh11Lg0/E3w9OMbHX/8RDp13KpB
udwyFn6Y63b6OQ6SzHn1eQsg58FnapDf
-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:49 2024 by rpki-client on console-ams.rpki-client.org