Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/035DD7B0141711EF86E84123017001B1.roa
File: 035DD7B0141711EF86E84123017001B1.roa (raw, json)
Hash identifier: aYiP8MZyB0Aq2gsZ/cUKTPgpuXLQUQ0ebrWQquu8THM=
Subject key identifier: 55:A5:3E:A6:BE:69:4C:59:2F:13:52:D2:D4:05:96:D9:69:F5:D4:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B81D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/035DD7B0141711EF86E84123017001B1.roa
Signing time: Fri 17 May 2024 06:30:55 +0000
ROA not before: Fri 17 May 2024 06:30:51 +0000
ROA not after: Mon 12 May 2025 06:30:51 +0000
asID: 41095
IP address blocks: 154.205.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47133 (0xb81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 06:30:51 2024 GMT
Not After : May 12 06:30:51 2025 GMT
Subject: CN=6646f99e-5c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:a4:1d:0c:10:8c:94:f0:f3:25:17:3e:c6:
3f:7c:ed:17:c0:3d:62:33:1c:87:46:ce:2f:81:e9:
24:ba:30:78:af:68:7e:cc:06:b7:ef:2d:e3:84:f4:
82:5e:cc:3e:fc:ac:bd:04:41:c3:92:f0:4c:4f:2c:
6d:36:67:3b:24:61:fd:49:48:43:75:d6:28:f7:f7:
38:6b:9a:59:95:a6:41:fb:ed:60:59:6d:11:29:c9:
15:95:a9:e7:23:d7:23:f7:85:43:f0:ab:92:02:92:
a3:a6:a1:ee:6b:a6:bb:5a:22:2e:d6:63:94:a6:28:
a5:a0:e4:ca:21:c1:7c:2b:90:28:e4:1f:19:7d:95:
fb:b2:c5:55:6a:73:cd:e8:02:e9:59:0b:cc:ce:92:
ab:42:e9:af:9f:5b:ea:19:70:2c:1c:37:55:96:ef:
5b:67:03:36:61:4c:32:7c:06:dc:cb:a7:32:63:6b:
4a:c1:de:13:17:b0:b0:80:6a:cd:33:0c:65:18:3e:
b9:a3:da:7c:f3:15:f3:0b:54:88:e8:16:0c:ea:c8:
96:2c:37:28:1b:31:31:4a:c3:01:83:43:05:55:1b:
2b:1b:fc:24:0b:4d:5f:9c:a7:d0:5c:ce:5a:8b:82:
a7:eb:1a:90:68:0e:88:d2:53:a3:ce:0d:d7:ef:7d:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:3E:A6:BE:69:4C:59:2F:13:52:D2:D4:05:96:D9:69:F5:D4:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/035DD7B0141711EF86E84123017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.0.0/23
Signature Algorithm: sha256WithRSAEncryption
75:db:ca:40:83:03:9e:81:38:d8:6e:33:cf:04:1f:d1:95:43:
f6:be:6a:61:d1:74:28:aa:f9:e4:4f:dd:ff:4e:8b:c8:1e:c2:
a8:e4:c2:ff:4b:ae:02:25:86:af:79:d3:43:a3:86:09:54:ae:
6b:fa:89:dc:2a:11:47:42:e8:c7:e1:c2:79:31:02:df:f5:98:
52:01:c0:a5:0c:cd:82:d1:15:05:2a:24:cb:82:b9:fa:37:02:
b1:81:49:d2:86:71:83:ac:09:52:9f:02:b2:38:1b:3c:ca:0d:
c2:db:86:a0:47:2a:f5:94:c3:97:c4:ec:f1:fe:7d:07:96:f8:
6a:f1:06:95:50:bb:36:30:2b:78:f8:c4:5a:dc:1c:6f:34:6e:
48:de:0f:e5:73:44:c7:a3:0c:31:26:f3:ff:23:04:de:63:c0:
f2:81:e7:3e:73:8a:81:61:4d:36:24:75:c4:c1:21:50:ea:11:
94:0a:65:52:c3:61:45:16:9e:8f:7c:a6:90:ab:67:7c:73:a4:
51:ca:0a:c9:f4:6c:f8:42:49:b5:b4:4a:9d:46:ba:1e:71:f2:
38:1d:29:86:cd:fb:8f:5e:c4:6e:61:3b:85:0b:94:8e:50:08:
c4:9f:fd:cf:5e:d9:89:38:48:00:69:97:9d:df:41:b5:b9:60:
de:7c:6c:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALgdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTE3MDYzMDUxWhcNMjUwNTEyMDYzMDUxWjAYMRYw
FAYDVQQDEw02NjQ2Zjk5ZS01YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzU6kHQwQjJTw8yUXPsY/fO0XwD1iMxyHRs4vgekkujB4r2h+zAa37y3j
hPSCXsw+/Ky9BEHDkvBMTyxtNmc7JGH9SUhDddYo9/c4a5pZlaZB++1gWW0RKckV
lannI9cj94VD8KuSApKjpqHua6a7WiIu1mOUpiiloOTKIcF8K5Ao5B8ZfZX7ssVV
anPN6ALpWQvMzpKrQumvn1vqGXAsHDdVlu9bZwM2YUwyfAbcy6cyY2tKwd4TF7Cw
gGrNMwxlGD65o9p88xXzC1SI6BYM6siWLDcoGzExSsMBg0MFVRsrG/wkC01fnKfQ
XM5ai4Kn6xqQaA6I0lOjzg3X733TcwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFWl
Pqa+aUxZLxNS0tQFltlp9dT3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wMzVERDdCMDE0MTcxMUVGODZFODQxMjMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms0AMA0GCSqGSIb3DQEB
CwUAA4IBAQB128pAgwOegTjYbjPPBB/RlUP2vmph0XQoqvnkT93/TovIHsKo5ML/
S64CJYavedNDo4YJVK5r+oncKhFHQujH4cJ5MQLf9ZhSAcClDM2C0RUFKiTLgrn6
NwKxgUnShnGDrAlSnwKyOBs8yg3C24agRyr1lMOXxOzx/n0Hlvhq8QaVULs2MCt4
+MRa3BxvNG5I3g/lc0THowwxJvP/IwTeY8Dygec+c4qBYU02JHXEwSFQ6hGUCmVS
w2FFFp6PfKaQq2d8c6RRygrJ9Gz4Qkm1tEqdRroecfI4HSmGzfuPXsRuYTuFC5SO
UAjEn/3PXtmJOEgAaZed30G1uWDefGwT
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org