Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADB2394B0FC11EEBD6E0158775412E6.roa
File: 1ADB2394B0FC11EEBD6E0158775412E6.roa (raw, json)
Hash identifier: ohSqDzn2PPUKaFAAHPSda1gWYMu1++FPIzWqFCTKY5k=
Subject key identifier: A3:FC:83:ED:95:33:1E:24:F9:3F:57:32:EC:98:F9:57:53:81:A9:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7469
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADB2394B0FC11EEBD6E0158775412E6.roa
Signing time: Fri 12 Jan 2024 03:38:52 +0000
ROA not before: Fri 12 Jan 2024 03:38:49 +0000
ROA not after: Fri 13 Dec 2024 03:38:49 +0000
asID: 140224
IP address blocks: 154.205.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29801 (0x7469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 03:38:49 2024 GMT
Not After : Dec 13 03:38:49 2024 GMT
Subject: CN=65a0b44c-b290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:12:d3:d8:41:5e:af:17:dd:11:8e:96:80:
a3:a5:f7:a0:03:f3:e9:3d:9a:25:ab:1c:85:84:21:
b8:be:91:5f:dd:34:f3:8a:9f:28:e8:68:05:da:06:
2c:34:ad:d4:bd:d5:19:9a:79:50:a9:ad:56:2a:5e:
b1:36:5a:e4:d0:97:9b:54:0a:3d:95:d5:30:66:f5:
9d:df:f9:de:46:52:d7:8d:b9:5d:16:46:47:ba:f7:
69:a5:e8:64:43:84:16:f0:13:60:5b:58:15:4c:9e:
31:ff:4e:e1:ff:0e:21:e4:67:ba:be:7e:26:b6:31:
23:10:ee:88:77:a0:c1:88:5e:9b:5b:ff:a5:16:05:
c2:07:2d:ec:21:6f:85:59:98:44:18:24:e2:c0:4b:
4b:98:72:c7:bc:6d:e2:86:ff:bf:6e:d2:12:6e:34:
47:fb:64:c6:4e:bf:ed:d5:fa:f5:34:16:b6:4f:fa:
36:0a:da:67:2d:d5:6c:e3:30:c8:b9:f8:57:38:92:
c1:29:60:e6:a2:4e:46:e2:ca:8a:b2:c7:02:c7:7e:
0b:1a:f9:97:8d:d6:68:a9:fc:3f:4b:a1:27:02:cf:
4d:ca:85:3c:7d:3e:cf:d1:bb:a8:58:b1:ae:6a:59:
8c:b5:d0:67:d1:ec:6c:e3:03:1f:ba:d1:84:ac:54:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:83:ED:95:33:1E:24:F9:3F:57:32:EC:98:F9:57:53:81:A9:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1ADB2394B0FC11EEBD6E0158775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f7:a3:37:dd:71:03:48:bf:77:0e:18:e0:6e:f0:3d:74:65:
23:44:11:b2:19:89:bb:81:00:02:58:cf:33:ca:53:8c:83:51:
50:a7:20:ef:76:61:8e:e7:0c:ac:46:19:14:70:0e:7b:e5:56:
7f:62:86:2b:7b:69:11:7c:18:12:fd:d2:18:8e:e7:4b:e1:57:
2a:76:65:86:22:b7:ee:80:6a:27:0c:eb:09:5a:b3:38:d5:be:
eb:51:71:38:c3:1f:f0:3f:44:49:d8:a9:0a:4c:4a:54:e5:1b:
3e:cd:e8:d6:54:95:a3:95:c2:58:12:d9:f5:c6:f5:30:a0:7c:
7a:c0:ae:25:52:56:09:21:1f:4b:e7:d2:2d:6e:3e:14:09:53:
13:ce:bc:4c:69:ed:dd:44:0a:98:c9:03:ca:87:41:74:0c:44:
f8:bf:5a:61:95:be:44:58:42:16:5b:b3:9d:b6:ed:6a:7f:8b:
67:99:23:64:db:f9:2b:67:82:f5:c0:19:e0:75:13:57:63:3b:
16:00:03:83:92:1b:3d:6a:df:76:08:87:b1:aa:5b:32:e3:d6:
52:0c:bf:8e:27:6d:0a:5c:09:72:12:1a:76:c7:b9:5d:84:df:
9f:16:de:cd:01:ab:3d:5a:aa:b7:89:e1:d8:5f:42:4d:ac:1f:
00:01:89:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdGkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTIwMzM4NDlaFw0yNDEyMTMwMzM4NDlaMBgxFjAU
BgNVBAMTDTY1YTBiNDRjLWIyOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO3RLT2EFerxfdEY6WgKOl96AD8+k9miWrHIWEIbi+kV/dNPOKnyjoaAXa
Biw0rdS91RmaeVCprVYqXrE2WuTQl5tUCj2V1TBm9Z3f+d5GUteNuV0WRke692ml
6GRDhBbwE2BbWBVMnjH/TuH/DiHkZ7q+fia2MSMQ7oh3oMGIXptb/6UWBcIHLewh
b4VZmEQYJOLAS0uYcse8beKG/79u0hJuNEf7ZMZOv+3V+vU0FrZP+jYK2mct1Wzj
MMi5+Fc4ksEpYOaiTkbiyoqyxwLHfgsa+ZeN1mip/D9LoScCz03KhTx9Ps/Ru6hY
sa5qWYy10GfR7GzjAx+60YSsVJszAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUo/yD
7ZUzHiT5P1cy7Jj5V1OBqc8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFBREIyMzk0QjBGQzExRUVCRDZFMDE1ODc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazcswDQYJKoZIhvcNAQEL
BQADggEBALb3ozfdcQNIv3cOGOBu8D10ZSNEEbIZibuBAAJYzzPKU4yDUVCnIO92
YY7nDKxGGRRwDnvlVn9ihit7aRF8GBL90hiO50vhVyp2ZYYit+6AaicM6wlaszjV
vutRcTjDH/A/REnYqQpMSlTlGz7N6NZUlaOVwlgS2fXG9TCgfHrAriVSVgkhH0vn
0i1uPhQJUxPOvExp7d1ECpjJA8qHQXQMRPi/WmGVvkRYQhZbs5227Wp/i2eZI2Tb
+StngvXAGeB1E1djOxYAA4OSGz1q33YIh7GqWzLj1lIMv44nbQpcCXISGnbHuV2E
358W3s0Bqz1aqreJ4dhfQk2sHwABieQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org