Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58C0DEE0B4A11EFBC05F85F017001B1.roa
File: E58C0DEE0B4A11EFBC05F85F017001B1.roa (raw, json)
Hash identifier: hV82OhXwHDKDssVnh+v1ql28YavY/y+uGOhprwofwwI=
Subject key identifier: 77:97:08:0E:D2:D0:C2:C4:11:BE:C2:5C:97:67:71:FF:43:0F:34:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B45C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58C0DEE0B4A11EFBC05F85F017001B1.roa
Signing time: Mon 06 May 2024 01:49:38 +0000
ROA not before: Mon 06 May 2024 01:49:34 +0000
ROA not after: Tue 11 Jun 2024 01:49:34 +0000
asID: 138915
IP address blocks: 154.203.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46172 (0xb45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 01:49:34 2024 GMT
Not After : Jun 11 01:49:34 2024 GMT
Subject: CN=66383732-bb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:1a:22:de:2f:e4:53:d3:82:99:d1:c6:1d:
e7:69:3c:4f:44:6c:ea:43:52:7d:73:9a:cd:48:b3:
7e:aa:b4:64:08:4d:12:fa:44:6d:c6:f1:a9:91:cf:
f7:5c:ca:9b:fc:48:1e:33:8e:59:60:a7:35:5c:9c:
9f:dd:63:9d:17:e9:a9:80:88:6a:92:37:ff:77:7e:
b6:ff:af:c0:46:17:0a:33:89:a3:3e:3c:f5:41:67:
b3:27:1f:4c:bb:38:48:4f:db:31:d4:fd:ae:61:2f:
ac:f1:55:55:28:d8:d5:da:b4:6a:7b:a7:51:d9:f8:
d3:de:ed:45:1d:2d:e2:66:40:8d:e0:b6:62:66:d8:
9e:cb:3c:1a:fd:ab:80:4c:e7:70:34:39:28:05:4a:
bb:fa:48:1f:bb:ee:f8:58:2e:96:a9:76:71:24:3f:
d3:e6:93:15:13:e8:fe:ef:fb:cb:56:de:b8:cc:b3:
8c:a1:72:43:bc:25:2b:e9:b8:41:0f:c0:94:a2:6c:
ac:96:27:04:2b:cf:51:d4:5e:b7:e3:ca:a0:fa:b6:
cc:88:0c:d5:6f:c2:ed:4e:e9:37:a7:e5:aa:1d:33:
d2:b9:a4:5a:f2:3f:ff:af:f8:6a:92:45:5a:2b:e3:
91:11:50:1e:b3:0e:24:cd:65:6a:fb:fb:04:7a:b1:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:08:0E:D2:D0:C2:C4:11:BE:C2:5C:97:67:71:FF:43:0F:34:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E58C0DEE0B4A11EFBC05F85F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:96:59:f0:0f:5e:bd:54:f5:1e:3c:00:9d:1b:62:ce:ba:6b:
dd:c0:6d:ad:37:ab:cf:13:ef:b3:83:02:38:80:1f:fc:33:9e:
a2:6b:27:01:d5:b5:88:00:fc:00:f9:51:11:f2:00:9b:d5:2c:
3e:b0:c9:a2:9d:60:40:0b:ff:94:00:c0:97:4b:97:dd:b7:a9:
34:20:9b:c4:db:12:02:e1:64:17:4f:14:cf:64:6a:be:62:9a:
5c:93:02:01:32:7d:6a:ac:c0:f3:4c:19:0a:df:2a:2f:5e:33:
1c:32:49:f4:e1:75:a4:82:ef:28:84:8e:81:b9:56:fc:50:07:
c8:96:e8:d8:aa:15:ce:89:a4:c6:0b:21:4b:6c:56:e1:71:0e:
f3:a3:4b:4e:c5:44:c8:ea:1b:2c:2f:f5:45:61:26:e9:7c:3e:
75:81:48:eb:0d:20:7f:61:78:5b:6a:33:d6:fd:55:5b:8f:b8:
94:87:a9:0c:66:22:60:04:98:d3:a3:84:0b:de:52:8c:60:8d:
d9:9f:0a:b1:47:fe:c2:f7:5c:13:6b:cb:41:43:96:fc:c9:aa:
2b:cd:b3:95:1a:4c:3a:15:d7:a2:2c:14:e8:9a:e5:0a:b6:bf:
67:be:1a:48:81:59:2c:d3:78:da:26:ae:41:f7:a2:21:d0:f6:
c7:39:c7:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALRcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDE0OTM0WhcNMjQwNjExMDE0OTM0WjAYMRYw
FAYDVQQDEw02NjM4MzczMi1iYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArc0aIt4v5FPTgpnRxh3naTxPRGzqQ1J9c5rNSLN+qrRkCE0S+kRtxvGp
kc/3XMqb/EgeM45ZYKc1XJyf3WOdF+mpgIhqkjf/d362/6/ARhcKM4mjPjz1QWez
Jx9MuzhIT9sx1P2uYS+s8VVVKNjV2rRqe6dR2fjT3u1FHS3iZkCN4LZiZtieyzwa
/auATOdwNDkoBUq7+kgfu+74WC6WqXZxJD/T5pMVE+j+7/vLVt64zLOMoXJDvCUr
6bhBD8CUomyslicEK89R1F6348qg+rbMiAzVb8LtTuk3p+WqHTPSuaRa8j//r/hq
kkVaK+OREVAesw4kzWVq+/sEerGUMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHeX
CA7S0MLEEb7CXJdncf9DDzThMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FNThDMERFRTBCNEExMUVGQkMwNUY4NUYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuYMA0GCSqGSIb3DQEB
CwUAA4IBAQAcllnwD169VPUePACdG2LOumvdwG2tN6vPE++zgwI4gB/8M56iaycB
1bWIAPwA+VER8gCb1Sw+sMminWBAC/+UAMCXS5fdt6k0IJvE2xIC4WQXTxTPZGq+
YppckwIBMn1qrMDzTBkK3yovXjMcMkn04XWkgu8ohI6BuVb8UAfIlujYqhXOiaTG
CyFLbFbhcQ7zo0tOxUTI6hssL/VFYSbpfD51gUjrDSB/YXhbajPW/VVbj7iUh6kM
ZiJgBJjTo4QL3lKMYI3ZnwqxR/7C91wTa8tBQ5b8yaorzbOVGkw6FdeiLBTomuUK
tr9nvhpIgVks03jaJq5B96Ih0PbHOceD
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:32 2024 by rpki-client on console-ams.rpki-client.org