Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0559D42201DB11EF805D2BFF007001B1.roa
File: 0559D42201DB11EF805D2BFF007001B1.roa (raw, json)
Hash identifier: iyJtqeft4U0HIZaFtFl4qOXZ84hL8baj9v21r9dNe64=
Subject key identifier: 71:04:9D:BA:A7:90:E2:97:C9:BE:4C:6C:FA:30:7D:46:39:A7:96:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AFF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0559D42201DB11EF805D2BFF007001B1.roa
Signing time: Wed 24 Apr 2024 01:36:07 +0000
ROA not before: Wed 24 Apr 2024 01:36:04 +0000
ROA not after: Sun 26 May 2024 01:36:04 +0000
asID: 20473
IP address blocks: 154.193.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45042 (0xaff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 24 01:36:04 2024 GMT
Not After : May 26 01:36:04 2024 GMT
Subject: CN=66286207-302e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:81:24:2b:71:81:6c:a8:2f:97:ae:38:e5:
2c:e8:37:9d:39:42:0a:40:77:77:de:cb:9d:e3:d2:
be:d5:03:4e:f5:5e:d4:57:d2:ab:1d:96:25:24:8c:
48:a1:f8:37:09:68:79:cd:bf:ed:db:d2:fd:93:c1:
49:2e:a7:3d:c6:f5:33:13:e2:64:0e:69:bc:7d:5f:
af:79:3a:d9:e4:db:24:6d:62:d1:4b:54:3f:a0:73:
54:f0:7c:2b:1a:ae:97:fa:64:74:90:64:fa:40:86:
0b:98:47:6b:aa:fe:65:b0:e2:4d:c6:5b:79:85:33:
39:ed:06:b6:16:3e:0e:50:2d:f3:21:6d:15:bb:d8:
e5:05:05:da:42:49:84:39:a2:58:1c:83:0f:bd:cd:
68:87:2f:94:9e:b4:09:fc:64:70:3d:1e:e1:06:08:
53:be:07:a6:6c:31:c3:96:ba:93:81:98:fe:60:8d:
db:bd:aa:14:6b:38:34:46:f6:92:a2:90:b2:16:76:
6e:10:13:e0:ed:1a:99:e1:00:38:8e:44:17:0c:2b:
c4:53:3d:71:1f:54:b4:53:d9:35:b1:8f:f7:a5:57:
a6:86:8e:26:a7:b1:d0:4d:c9:08:d9:dc:7a:83:32:
9d:ac:1e:34:2c:39:e1:82:41:56:ce:b0:d8:f5:32:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:9D:BA:A7:90:E2:97:C9:BE:4C:6C:FA:30:7D:46:39:A7:96:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0559D42201DB11EF805D2BFF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.128.0/19
Signature Algorithm: sha256WithRSAEncryption
84:80:01:62:95:f8:cd:27:47:9d:52:4a:5a:aa:71:d4:91:f3:
95:07:03:80:7f:0d:0e:2b:4e:db:cf:9c:d9:ac:e3:b4:73:b6:
46:28:e8:17:47:3c:b4:d3:d5:ae:48:d3:0d:80:e1:0c:ab:2a:
fe:a3:c9:fd:13:08:4d:8a:88:8b:87:c1:b9:08:87:68:61:46:
8d:4d:e7:b5:5f:a1:ad:62:7f:09:0a:17:d0:da:d5:fb:6c:7a:
42:d1:dd:24:cf:b1:32:64:50:14:ee:34:c6:90:09:2b:24:f4:
be:86:11:3d:3a:91:28:fc:31:04:8f:2c:08:6c:52:0e:17:a7:
a5:df:3a:e6:34:6d:49:0b:da:af:42:2e:12:c1:de:e2:dd:fd:
82:95:e6:11:50:1f:11:2f:d7:44:5d:93:9e:14:b6:65:b2:f5:
1e:bd:95:f0:f5:ed:52:61:b0:4e:60:64:88:7c:24:0d:1b:b0:
38:a7:ae:c0:e4:2a:36:6f:7e:47:e9:17:ce:15:a8:f2:c8:6f:
05:4b:90:7b:94:4f:ab:55:cd:6d:ef:09:43:c7:a4:98:e1:f3:
fe:e3:56:c6:9f:49:89:ad:db:59:e5:f9:3b:aa:16:99:55:c1:
54:0b:a5:67:1e:20:32:26:56:1e:fa:52:60:ce:5e:34:05:64:
00:07:2a:70
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK/yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI0MDEzNjA0WhcNMjQwNTI2MDEzNjA0WjAYMRYw
FAYDVQQDEw02NjI4NjIwNy0zMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzd2BJCtxgWyoL5euOOUs6DedOUIKQHd33sud49K+1QNO9V7UV9KrHZYl
JIxIofg3CWh5zb/t29L9k8FJLqc9xvUzE+JkDmm8fV+veTrZ5NskbWLRS1Q/oHNU
8HwrGq6X+mR0kGT6QIYLmEdrqv5lsOJNxlt5hTM57Qa2Fj4OUC3zIW0Vu9jlBQXa
QkmEOaJYHIMPvc1ohy+UnrQJ/GRwPR7hBghTvgembDHDlrqTgZj+YI3bvaoUazg0
RvaSopCyFnZuEBPg7RqZ4QA4jkQXDCvEUz1xH1S0U9k1sY/3pVemho4mp7HQTckI
2dx6gzKdrB40LDnhgkFWzrDY9TI7pQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHEE
nbqnkOKXyb5MbPowfUY5p5b1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNTU5RDQyMjAxREIxMUVGODA1RDJCRkYwMDcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsGAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEgAFilfjNJ0edUkpaqnHUkfOVBwOAfw0OK07bz5zZrOO0c7ZGKOgX
Rzy009WuSNMNgOEMqyr+o8n9EwhNioiLh8G5CIdoYUaNTee1X6GtYn8JChfQ2tX7
bHpC0d0kz7EyZFAU7jTGkAkrJPS+hhE9OpEo/DEEjywIbFIOF6el3zrmNG1JC9qv
Qi4Swd7i3f2CleYRUB8RL9dEXZOeFLZlsvUevZXw9e1SYbBOYGSIfCQNG7A4p67A
5Co2b35H6RfOFajyyG8FS5B7lE+rVc1t7wlDx6SY4fP+41bGn0mJrdtZ5fk7qhaZ
VcFUC6VnHiAyJlYe+lJgzl40BWQABypw
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:27 2024 by rpki-client on console-ams.rpki-client.org