Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8BFFA6E74111EEA09C0199775412E6.roa
File: 0F8BFFA6E74111EEA09C0199775412E6.roa (raw, json)
Hash identifier: 2FXiW+XH/dpUJInX/mdgEhMbmEzkSZE5GUjgYeshiQk=
Subject key identifier: 2E:2E:42:D1:DA:41:20:79:65:61:B3:E9:97:6C:6D:E5:3C:18:E9:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8BFFA6E74111EEA09C0199775412E6.roa
Signing time: Thu 21 Mar 2024 05:08:31 +0000
ROA not before: Thu 21 Mar 2024 05:08:28 +0000
ROA not after: Tue 23 Apr 2024 05:08:28 +0000
asID: 44559
IP address blocks: 154.221.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41942 (0xa3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:08:28 2024 GMT
Not After : Apr 23 05:08:28 2024 GMT
Subject: CN=65fbc0cf-09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:79:5c:89:7c:60:03:23:ff:a4:8a:f6:f7:
4e:83:da:45:04:0d:70:25:64:3a:ab:a2:5d:a5:35:
6b:48:b6:94:8d:7d:a2:f0:45:5c:c0:71:e6:80:47:
13:35:af:41:27:62:21:c2:62:31:1c:a7:a9:21:75:
ab:14:47:2f:43:f6:84:01:88:1f:83:f5:85:c0:97:
52:dd:1b:af:5f:d2:05:9b:80:d7:08:4c:50:7a:3a:
37:ea:23:04:69:69:93:5c:54:f3:3e:76:4d:59:08:
fd:0b:76:30:89:ea:ac:3f:0f:8f:41:73:fb:67:0b:
90:2a:3d:31:cf:96:d9:2e:80:72:1a:d3:f9:52:d6:
cb:71:d4:b3:12:81:75:d6:5c:16:14:05:9c:0c:24:
b0:27:87:56:73:39:a0:30:75:98:d9:35:ba:53:d6:
7c:7a:1c:3d:c3:eb:80:1b:a9:44:74:74:89:ce:f1:
c6:6d:40:b3:4d:f6:43:e3:57:d2:bf:88:11:dd:f3:
a6:25:fb:3e:3a:5b:80:ed:0c:a3:ae:45:b0:86:45:
73:d6:3b:f1:b2:f7:61:af:a6:3c:d4:42:5e:e1:2b:
b4:7b:2a:e2:0f:b8:2d:f2:44:a5:ff:aa:c3:55:be:
df:29:8a:fa:64:bd:ec:20:da:92:ff:bd:af:8a:59:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:42:D1:DA:41:20:79:65:61:B3:E9:97:6C:6D:E5:3C:18:E9:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F8BFFA6E74111EEA09C0199775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4c:04:66:44:33:e9:87:08:2a:1c:f4:1f:3b:70:02:2c:6f:
28:ab:f6:32:c2:29:c5:30:30:02:fb:e0:b1:28:d6:d4:f6:9e:
c6:d5:fc:21:8a:83:09:94:4e:c5:7c:7d:4e:24:89:de:ad:56:
ec:71:85:52:ad:0c:43:91:f0:7b:86:0d:c1:dd:26:86:13:f6:
fd:dc:8b:96:1b:7d:d0:a3:56:91:4d:e0:f3:f4:c1:93:83:b2:
7f:c7:b2:3c:24:7e:cd:be:f7:58:a4:3f:9f:54:bb:be:cc:fa:
e4:9c:1a:6f:18:47:b7:8a:ea:75:dc:42:1d:25:c9:40:a3:11:
d3:7b:4a:7f:e5:68:b1:0a:94:03:32:12:50:b7:51:14:f8:98:
ad:53:59:4a:df:8e:d4:10:48:a8:b8:cb:32:03:9e:4d:c3:20:
c2:28:9f:52:85:e3:22:51:b8:5d:04:df:a1:0e:a9:1b:37:b2:
11:f3:0c:b9:bc:14:41:57:b5:af:8f:50:1f:f5:ee:5e:ad:40:
24:91:38:2a:24:a6:50:15:61:3e:e1:e1:25:4e:0c:d4:de:d7:
35:92:0a:b9:19:7f:fd:84:41:fb:64:15:90:de:30:30:6d:a7:
d6:f2:c5:6d:e8:9e:f6:6b:ef:37:d3:bc:66:e2:73:61:2f:b7:
28:f8:52:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKPWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDUwODI4WhcNMjQwNDIzMDUwODI4WjAYMRYw
FAYDVQQDEw02NWZiYzBjZi0wOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvxN5XIl8YAMj/6SK9vdOg9pFBA1wJWQ6q6JdpTVrSLaUjX2i8EVcwHHm
gEcTNa9BJ2IhwmIxHKepIXWrFEcvQ/aEAYgfg/WFwJdS3RuvX9IFm4DXCExQejo3
6iMEaWmTXFTzPnZNWQj9C3YwieqsPw+PQXP7ZwuQKj0xz5bZLoByGtP5UtbLcdSz
EoF11lwWFAWcDCSwJ4dWczmgMHWY2TW6U9Z8ehw9w+uAG6lEdHSJzvHGbUCzTfZD
41fSv4gR3fOmJfs+OluA7QyjrkWwhkVz1jvxsvdhr6Y81EJe4Su0eyriD7gt8kSl
/6rDVb7fKYr6ZL3sINqS/72vilnF5QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC4u
QtHaQSB5ZWGz6ZdsbeU8GOlBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wRjhCRkZBNkU3NDExMUVFQTA5QzAxOTk3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3OMA0GCSqGSIb3DQEB
CwUAA4IBAQAqTARmRDPphwgqHPQfO3ACLG8oq/YywinFMDAC++CxKNbU9p7G1fwh
ioMJlE7FfH1OJInerVbscYVSrQxDkfB7hg3B3SaGE/b93IuWG33Qo1aRTeDz9MGT
g7J/x7I8JH7NvvdYpD+fVLu+zPrknBpvGEe3iup13EIdJclAoxHTe0p/5WixCpQD
MhJQt1EU+JitU1lK347UEEiouMsyA55NwyDCKJ9SheMiUbhdBN+hDqkbN7IR8wy5
vBRBV7Wvj1Af9e5erUAkkTgqJKZQFWE+4eElTgzU3tc1kgq5GX/9hEH7ZBWQ3jAw
bafW8sVt6J72a+8307xm4nNhL7co+FJ7
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org