Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5C949E20B4C11EFBF9523F5007001B1.roa
File: D5C949E20B4C11EFBF9523F5007001B1.roa (raw, json)
Hash identifier: zj2YIJ9qiKOEj4D9/YM7cIbsRao/LMYwZVkWZUugDgk=
Subject key identifier: D6:83:61:88:0E:D8:55:24:38:06:CA:2B:46:70:6C:A9:5D:CF:62:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B46C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5C949E20B4C11EFBF9523F5007001B1.roa
Signing time: Mon 06 May 2024 02:03:30 +0000
ROA not before: Mon 06 May 2024 02:03:27 +0000
ROA not after: Tue 11 Jun 2024 02:03:27 +0000
asID: 138915
IP address blocks: 154.203.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46188 (0xb46c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:03:27 2024 GMT
Not After : Jun 11 02:03:27 2024 GMT
Subject: CN=66383a72-57dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:98:c7:4e:a2:96:f0:16:f0:cd:2e:00:1d:
12:3e:fb:ed:9e:4a:36:16:fe:f0:7b:90:2a:12:36:
2b:c1:04:0f:a0:3e:13:fa:38:47:a3:d0:0a:10:15:
49:24:2f:18:e9:bb:0c:a7:62:42:df:de:b7:e2:f2:
86:68:7e:c4:6b:ad:37:98:c5:fa:36:68:5a:48:ca:
3e:57:d9:57:60:da:78:0b:89:82:0f:32:2f:3f:e8:
96:34:bc:c6:68:33:08:de:90:12:94:8a:59:93:6a:
92:88:36:91:6a:30:09:76:58:52:a1:1d:8b:2f:16:
fb:0c:7c:99:dd:41:6d:95:28:b3:c9:24:9a:11:35:
e9:27:68:24:ac:2c:6b:7a:6f:73:de:3b:d0:0e:d2:
2b:43:a5:1e:1b:b4:49:69:c7:69:ac:81:2f:26:1e:
69:0c:c5:c2:de:26:af:47:31:bd:b8:6f:dc:84:21:
7f:0b:eb:43:1d:01:17:f7:4c:c9:33:50:ed:f7:8f:
7b:01:08:21:50:5f:97:8a:04:c8:4d:ef:9b:92:14:
38:bd:2c:c2:c8:dc:d6:80:c3:8c:e3:eb:93:67:ce:
e5:7b:43:bc:a4:04:e6:d7:d8:cf:27:b1:40:de:92:
80:9f:b2:50:c7:7d:f7:72:7b:1c:e6:c5:8c:a0:7f:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:83:61:88:0E:D8:55:24:38:06:CA:2B:46:70:6C:A9:5D:CF:62:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5C949E20B4C11EFBF9523F5007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.147.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:7a:69:9c:f4:8c:aa:0a:ca:d7:54:86:29:21:10:90:08:26:
f8:15:b5:63:50:66:d7:70:70:68:54:84:b1:17:3d:bf:6d:46:
ac:03:db:65:c2:52:71:d0:9a:38:6f:50:95:1d:33:52:99:3c:
09:a9:48:8f:f2:ed:3e:d4:53:85:29:a1:cc:ac:c2:04:c3:7a:
75:bd:be:82:bc:9e:80:6d:bf:04:cc:b9:56:77:d5:a8:9e:2c:
4c:fc:ea:cc:47:e1:90:86:d6:11:75:6d:d1:fb:bc:a8:ba:22:
81:ad:d7:46:41:99:c3:2a:7c:82:4d:cc:2c:35:38:56:79:e1:
a7:25:a4:33:3f:33:f8:76:53:65:a6:74:56:e2:79:19:82:0f:
04:b8:43:77:87:94:ab:17:89:b8:50:48:31:24:e5:b6:13:c4:
3d:72:48:b6:86:9f:0c:22:19:81:5c:cd:3f:b3:de:55:c2:d6:
c8:ed:8c:0a:06:5d:fd:c3:79:c0:86:84:24:cf:63:37:2b:80:
8c:64:1f:a1:a8:3b:c1:cb:89:47:0f:b1:08:52:17:10:80:94:
a0:18:af:a8:9a:a7:77:64:bc:a6:67:e7:3d:07:2c:d8:8b:3f:
d1:6b:25:d1:f1:e2:99:bf:22:1e:34:f6:f4:ec:e6:b1:01:1f:
f5:68:78:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALRsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDIwMzI3WhcNMjQwNjExMDIwMzI3WjAYMRYw
FAYDVQQDEw02NjM4M2E3Mi01N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7MKYx06ilvAW8M0uAB0SPvvtnko2Fv7we5AqEjYrwQQPoD4T+jhHo9AK
EBVJJC8Y6bsMp2JC39634vKGaH7Ea603mMX6NmhaSMo+V9lXYNp4C4mCDzIvP+iW
NLzGaDMI3pASlIpZk2qSiDaRajAJdlhSoR2LLxb7DHyZ3UFtlSizySSaETXpJ2gk
rCxrem9z3jvQDtIrQ6UeG7RJacdprIEvJh5pDMXC3iavRzG9uG/chCF/C+tDHQEX
90zJM1Dt9497AQghUF+XigTITe+bkhQ4vSzCyNzWgMOM4+uTZ87le0O8pATm19jP
J7FA3pKAn7JQx333cnsc5sWMoH/uawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNaD
YYgO2FUkOAbKK0ZwbKldz2KVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENUM5NDlFMjBCNEMxMUVGQkY5NTIzRjUwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuTMA0GCSqGSIb3DQEB
CwUAA4IBAQDUemmc9IyqCsrXVIYpIRCQCCb4FbVjUGbXcHBoVISxFz2/bUasA9tl
wlJx0Jo4b1CVHTNSmTwJqUiP8u0+1FOFKaHMrMIEw3p1vb6CvJ6Abb8EzLlWd9Wo
nixM/OrMR+GQhtYRdW3R+7youiKBrddGQZnDKnyCTcwsNThWeeGnJaQzPzP4dlNl
pnRW4nkZgg8EuEN3h5SrF4m4UEgxJOW2E8Q9cki2hp8MIhmBXM0/s95VwtbI7YwK
Bl39w3nAhoQkz2M3K4CMZB+hqDvBy4lHD7EIUhcQgJSgGK+omqd3ZLymZ+c9ByzY
iz/RayXR8eKZvyIeNPb07OaxAR/1aHgx
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:24 2024 by rpki-client on console-fra.rpki-client.org