Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD0140A0B5111EF90CC7622017001B1.roa
File: DCD0140A0B5111EF90CC7622017001B1.roa (raw, json)
Hash identifier: HVH0lxtNsWHa6IGmtfFG992JCBX14XaXZkH7Aj1Qk8M=
Subject key identifier: 46:68:98:D2:A7:4F:7E:5F:9C:F3:83:B0:59:88:2D:03:56:CA:62:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD0140A0B5111EF90CC7622017001B1.roa
Signing time: Mon 06 May 2024 02:39:30 +0000
ROA not before: Mon 06 May 2024 02:39:26 +0000
ROA not after: Tue 11 Jun 2024 02:39:26 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46248 (0xb4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:39:26 2024 GMT
Not After : Jun 11 02:39:26 2024 GMT
Subject: CN=663842e2-4e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:1c:bc:39:f5:2e:3e:a4:c2:69:fd:0f:0e:
1a:69:60:48:4c:fb:ab:47:70:ff:23:9c:e6:9a:75:
01:53:4f:7a:c4:d5:e9:42:d3:07:88:7f:ed:0e:11:
7f:30:82:19:0a:11:59:78:75:f4:8f:6c:6a:18:aa:
3b:1e:9e:14:be:9d:73:27:74:6a:cb:a2:84:12:c5:
d3:a0:2f:c3:de:01:da:7e:e8:b9:9a:66:5c:e4:01:
87:f2:a3:5f:f9:58:93:f9:86:e2:ad:b2:5a:43:bd:
83:bb:88:9d:98:c7:8c:c1:b1:57:ee:c1:11:be:9e:
4e:28:a9:f8:aa:af:59:99:39:a8:d6:65:67:b5:d7:
50:1b:6b:95:10:ed:4a:9b:db:3e:aa:80:ba:73:e2:
9a:ad:f8:58:5b:26:04:ef:c3:8e:66:d5:66:f9:4c:
78:cc:e5:14:a8:45:97:35:7c:a6:f8:e9:fc:dd:da:
09:37:0d:3b:c0:47:32:72:9c:08:37:f6:4c:81:58:
fe:3c:4a:7e:8e:68:4a:e2:7c:63:65:5a:97:5c:09:
9a:ce:08:43:de:35:81:ac:44:8e:e3:e5:33:8a:0a:
86:cb:1c:01:78:25:34:d3:da:b5:8f:08:37:1c:fb:
81:c8:e9:b6:73:18:c0:b9:52:32:0c:57:6e:c1:6b:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:68:98:D2:A7:4F:7E:5F:9C:F3:83:B0:59:88:2D:03:56:CA:62:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD0140A0B5111EF90CC7622017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0/23
Signature Algorithm: sha256WithRSAEncryption
52:e2:71:b5:8a:ff:7d:e5:41:cd:bd:c6:f4:e2:d3:ee:2f:30:
9a:af:78:e0:38:c7:59:fd:84:5b:54:2c:aa:d6:3b:5c:26:37:
11:53:75:6c:ec:c9:aa:3a:cf:82:db:70:59:ac:a2:59:13:98:
a0:e0:04:66:3c:1b:b9:dd:d7:7e:62:c3:41:bb:5c:f0:99:6f:
c4:e1:96:4b:7c:b0:a5:5c:92:2f:15:d2:e1:fc:48:eb:8d:b0:
e5:bc:8c:08:f8:b8:9a:7f:f0:ef:fa:37:31:45:b9:ab:08:ca:
4c:e3:2a:2f:1a:a6:44:40:00:fa:db:c5:97:93:07:1f:76:7a:
85:bc:28:6b:44:5a:e5:e2:01:68:7f:03:2b:36:a1:b2:ae:06:
af:3d:d2:ea:d8:cd:45:e8:38:51:ce:9d:8f:71:a6:37:3c:7c:
40:29:f7:dc:86:ba:c8:f1:b5:0f:1f:c8:e4:20:0f:7d:13:41:
15:be:94:91:f9:96:a2:7a:2f:5b:c2:8c:32:77:bc:95:61:62:
37:eb:d4:e7:54:d6:31:89:4c:53:e5:fb:28:8a:4e:8f:64:28:
e8:68:66:52:fd:ba:b6:df:52:28:5a:35:d6:00:69:07:fc:2b:
c9:18:bf:fb:73:90:07:7c:40:ab:da:1f:3a:56:43:22:15:9c:
a2:d2:89:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALSoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDIzOTI2WhcNMjQwNjExMDIzOTI2WjAYMRYw
FAYDVQQDEw02NjM4NDJlMi00ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1dwcvDn1Lj6kwmn9Dw4aaWBITPurR3D/I5zmmnUBU096xNXpQtMHiH/t
DhF/MIIZChFZeHX0j2xqGKo7Hp4Uvp1zJ3Rqy6KEEsXToC/D3gHafui5mmZc5AGH
8qNf+ViT+YbirbJaQ72Du4idmMeMwbFX7sERvp5OKKn4qq9ZmTmo1mVntddQG2uV
EO1Km9s+qoC6c+KarfhYWyYE78OOZtVm+Ux4zOUUqEWXNXym+On83doJNw07wEcy
cpwIN/ZMgVj+PEp+jmhK4nxjZVqXXAmazghD3jWBrESO4+UzigqGyxwBeCU009q1
jwg3HPuByOm2cxjAuVIyDFduwWveAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEZo
mNKnT35fnPODsFmILQNWymK8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0QwMTQwQTBCNTExMUVGOTBDQzc2MjIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmsuAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS4nG1iv995UHNvcb04tPuLzCar3jgOMdZ/YRbVCyq1jtcJjcRU3Vs
7MmqOs+C23BZrKJZE5ig4ARmPBu53dd+YsNBu1zwmW/E4ZZLfLClXJIvFdLh/Ejr
jbDlvIwI+Liaf/Dv+jcxRbmrCMpM4yovGqZEQAD628WXkwcfdnqFvChrRFrl4gFo
fwMrNqGyrgavPdLq2M1F6DhRzp2PcaY3PHxAKffchrrI8bUPH8jkIA99E0EVvpSR
+Zaiei9bwowyd7yVYWI369TnVNYxiUxT5fsoik6PZCjoaGZS/bq231IoWjXWAGkH
/CvJGL/7c5AHfECr2h86VkMiFZyi0omj
-----END CERTIFICATE-----
Generated at Mon May 20 03:18:25 2024 by rpki-client on console-fra.rpki-client.org