Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6746B0F48111EDB3C68F254AD9E6FC.roa
File: 0F6746B0F48111EDB3C68F254AD9E6FC.roa (raw, json)
Hash identifier: OO+4gNMjOIiWUPs/GL+7DPHLhKdCFKItJIFu/toWj3Y=
Subject key identifier: 5B:19:20:67:24:66:B4:A8:47:49:54:03:17:64:0B:A9:1C:5D:82:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 24D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6746B0F48111EDB3C68F254AD9E6FC.roa
Signing time: Wed 17 May 2023 07:04:27 +0000
ROA not before: Wed 17 May 2023 07:04:21 +0000
ROA not after: Tue 30 Apr 2024 07:04:21 +0000
asID: 136744
IP address blocks: 154.206.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 07:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9433 (0x24d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 07:04:21 2023 GMT
Not After : Apr 30 07:04:21 2024 GMT
Subject: CN=64647c7a-4f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:cb:f0:44:e3:3a:25:54:11:a6:04:1d:8e:
f6:05:2c:5f:94:99:b6:f5:81:d9:9b:5f:6b:ef:f1:
04:a0:5a:33:60:1c:24:4c:75:c6:08:7a:96:a5:a5:
3f:aa:01:89:93:cc:9a:6d:28:3f:d0:66:35:79:ff:
8e:1d:44:06:a8:0e:ca:dc:7c:69:0b:20:e2:f0:15:
61:70:bb:34:43:ce:fe:83:83:9d:e8:45:99:0f:87:
ca:3a:9d:66:9f:41:45:8c:88:2f:a2:62:90:ce:20:
1c:d3:90:67:97:e7:46:98:3a:27:7c:24:89:a2:ea:
8e:36:50:d9:10:ad:24:b0:b6:22:aa:f7:1b:0f:53:
03:07:aa:a2:53:f0:c3:4f:ea:ab:ba:7a:be:4c:cc:
52:ae:66:dc:da:06:ac:69:d4:7f:9d:03:06:1e:03:
ee:88:87:4b:08:5d:52:81:4b:67:b3:9e:6d:b7:a3:
00:1b:9d:ba:36:2a:c6:21:f4:d1:44:b3:bf:af:62:
45:10:f0:cd:b1:48:8a:cf:96:a6:1d:f9:cf:e6:26:
fc:20:59:6b:0a:44:21:a3:75:b2:3c:fb:82:71:7f:
52:13:c8:8b:f3:20:d3:ef:55:3c:10:27:7b:31:b5:
a4:fe:48:05:f2:13:72:f9:a8:c2:99:99:d9:58:de:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:20:67:24:66:B4:A8:47:49:54:03:17:64:0B:A9:1C:5D:82:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F6746B0F48111EDB3C68F254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e8:4f:3d:ec:71:a9:80:12:19:cf:2d:c2:93:62:52:2b:fb:
8d:0e:7b:2f:ad:b0:51:55:c9:70:45:9f:16:40:56:76:74:1d:
3c:f5:d9:d0:0e:7c:56:c1:d4:f1:8f:b7:31:71:51:21:54:b3:
85:a5:c8:5a:30:0f:3e:6f:b7:8a:50:6c:09:85:0b:e9:2f:f9:
9b:35:ea:e2:de:c6:9d:aa:55:13:f8:97:a3:20:4e:43:44:5c:
f1:63:ef:c2:2d:ff:7d:d2:50:ec:8a:2e:ee:b2:55:4f:d6:31:
a8:20:d8:4b:d3:d1:28:3d:d0:9e:60:57:ed:8c:b4:09:00:5b:
d9:f1:0d:65:0a:c8:b0:d2:48:c9:f5:8e:36:59:b9:40:7b:30:
20:a3:98:1d:53:24:ac:6d:51:e4:ed:64:9c:43:9d:c4:ae:ee:
f7:ff:05:e3:35:a3:92:b8:57:b0:3e:6b:db:e0:3c:89:7a:89:
7d:52:96:08:9d:57:63:ee:55:79:36:21:af:5a:9a:4f:bc:c4:
38:f4:42:47:0c:96:9f:c8:4f:6d:37:cc:0e:5b:19:75:0c:77:
59:76:f8:20:ff:fa:b2:c1:56:e8:53:6f:dd:96:ec:ea:7f:d7:
46:20:6d:df:a6:d8:6b:93:96:9c:2d:8c:13:b0:21:d6:5f:b4:
01:11:ef:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJNkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA1MTcwNzA0MjFaFw0yNDA0MzAwNzA0MjFaMBgxFjAU
BgNVBAMTDTY0NjQ3YzdhLTRmOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4KMvwROM6JVQRpgQdjvYFLF+Umbb1gdmbX2vv8QSgWjNgHCRMdcYIepal
pT+qAYmTzJptKD/QZjV5/44dRAaoDsrcfGkLIOLwFWFwuzRDzv6Dg53oRZkPh8o6
nWafQUWMiC+iYpDOIBzTkGeX50aYOid8JImi6o42UNkQrSSwtiKq9xsPUwMHqqJT
8MNP6qu6er5MzFKuZtzaBqxp1H+dAwYeA+6Ih0sIXVKBS2eznm23owAbnbo2KsYh
9NFEs7+vYkUQ8M2xSIrPlqYd+c/mJvwgWWsKRCGjdbI8+4Jxf1ITyIvzINPvVTwQ
J3sxtaT+SAXyE3L5qMKZmdlY3py9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWxkg
ZyRmtKhHSVQDF2QLqRxdghUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzBGNjc0NkIwRjQ4MTExRURCM0M2OEYyNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGazg4wDQYJKoZIhvcNAQEL
BQADggEBAEboTz3scamAEhnPLcKTYlIr+40Oey+tsFFVyXBFnxZAVnZ0HTz12dAO
fFbB1PGPtzFxUSFUs4WlyFowDz5vt4pQbAmFC+kv+Zs16uLexp2qVRP4l6MgTkNE
XPFj78It/33SUOyKLu6yVU/WMagg2EvT0Sg90J5gV+2MtAkAW9nxDWUKyLDSSMn1
jjZZuUB7MCCjmB1TJKxtUeTtZJxDncSu7vf/BeM1o5K4V7A+a9vgPIl6iX1Slgid
V2PuVXk2Ia9amk+8xDj0QkcMlp/IT203zA5bGXUMd1l2+CD/+rLBVuhTb92W7Op/
10Ygbd+m2GuTlpwtjBOwIdZftAER74I=
-----END CERTIFICATE-----
Generated at Mon Apr 29 12:50:00 2024 by rpki-client on console-ams.rpki-client.org