Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE5A7DCDAB511EEB4793E8A775412E6.roa
File: 1AE5A7DCDAB511EEB4793E8A775412E6.roa (raw, json)
Hash identifier: UCeHHCGiNTAd4AT7bAFFhhavriH0mcFHo5MMFvcYge8=
Subject key identifier: 13:63:0C:49:8E:79:0C:9E:3B:D5:FF:2B:69:EF:BD:83:D1:47:E0:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 9A87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE5A7DCDAB511EEB4793E8A775412E6.roa
Signing time: Tue 05 Mar 2024 05:56:27 +0000
ROA not before: Tue 05 Mar 2024 05:56:24 +0000
ROA not after: Fri 07 Jun 2024 05:56:24 +0000
asID: 139871
IP address blocks: 154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39559 (0x9a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 05:56:24 2024 GMT
Not After : Jun 7 05:56:24 2024 GMT
Subject: CN=65e6b40b-0b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:50:92:4c:8b:e6:7d:54:87:5f:3e:c7:57:
10:76:63:dc:a4:91:96:ab:e8:94:3b:1b:8a:a4:00:
cf:70:16:d2:9b:5f:17:f5:70:c4:33:42:34:ee:cb:
60:af:c8:a6:fc:8e:ac:e6:d6:7e:e9:64:ea:9b:60:
d2:43:06:47:92:72:12:e9:66:69:10:2d:df:b7:f8:
ae:22:18:0a:6c:f9:97:46:15:6e:02:36:db:54:00:
ec:0a:55:18:e7:12:4c:76:b0:cf:bc:34:a2:b2:f1:
15:8c:3e:c0:89:ea:b0:e2:16:d6:bc:33:0c:32:48:
27:a2:c3:54:45:66:57:cc:b9:20:de:54:ee:14:64:
1d:6a:b9:b6:fd:82:c1:93:27:2e:68:60:fd:2a:68:
e1:33:18:66:48:79:9d:7b:fb:89:9d:f4:57:14:98:
9c:70:b3:29:4e:f6:05:45:1f:bb:a5:1d:d0:98:3d:
dd:0c:99:aa:0c:41:47:3b:9a:7b:95:52:8b:87:ce:
58:f3:a2:1e:ae:7b:b1:7b:44:11:d7:33:90:41:a1:
0b:e1:3a:b1:8b:a7:38:86:0e:1f:26:3b:3a:ee:3f:
83:11:63:f9:21:48:98:87:cf:fe:8a:fe:32:2d:c6:
95:81:db:99:54:5b:34:aa:bc:7d:63:dd:54:ae:ca:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:0C:49:8E:79:0C:9E:3B:D5:FF:2B:69:EF:BD:83:D1:47:E0:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AE5A7DCDAB511EEB4793E8A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e6:fa:66:83:39:22:ec:30:7d:71:c6:3b:af:fa:1d:9f:ff:
40:f7:99:5e:f3:cc:aa:11:22:0c:5f:91:c8:c7:c7:0f:1e:12:
2e:fb:1d:ae:ff:3f:36:bb:1e:6b:30:dd:73:fe:10:98:e1:e1:
aa:ae:cc:b1:46:66:c7:16:4a:cd:9d:98:81:87:ab:0b:1c:fd:
13:b6:6b:ba:72:3f:b7:9c:6c:1f:b0:08:c9:a6:16:ed:fe:4a:
83:7b:44:ca:d4:ce:22:51:a4:48:6d:47:b1:3a:78:2d:52:01:
66:2f:6a:58:f3:99:e3:fc:cd:17:d6:b1:0a:16:e9:f9:e4:81:
9e:b5:23:ff:2d:da:d4:4f:94:f2:ea:d7:8c:ef:08:ce:83:e1:
88:28:77:cb:02:a7:ff:75:c4:c6:15:c5:1d:97:91:9a:b9:1b:
d2:8a:a3:b0:e1:44:4f:0e:17:a5:36:87:f5:1a:eb:e1:75:b2:
53:46:2d:a1:eb:04:e3:10:91:c1:2b:35:02:8f:eb:64:51:b1:
82:9c:70:18:2f:4c:0a:11:29:bc:aa:8a:3f:9a:9d:65:9a:bc:
7e:7a:07:d3:e8:f0:06:22:d2:a0:5e:29:40:36:a8:8a:59:83:
33:aa:af:58:2b:83:95:7d:ad:0a:c6:65:44:55:5a:52:4a:27:
be:d8:d0:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAJqHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzA1MDU1NjI0WhcNMjQwNjA3MDU1NjI0WjAYMRYw
FAYDVQQDEw02NWU2YjQwYi0wYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5UNQkkyL5n1Uh18+x1cQdmPcpJGWq+iUOxuKpADPcBbSm18X9XDEM0I0
7stgr8im/I6s5tZ+6WTqm2DSQwZHknIS6WZpEC3ft/iuIhgKbPmXRhVuAjbbVADs
ClUY5xJMdrDPvDSisvEVjD7Aieqw4hbWvDMMMkgnosNURWZXzLkg3lTuFGQdarm2
/YLBkycuaGD9KmjhMxhmSHmde/uJnfRXFJiccLMpTvYFRR+7pR3QmD3dDJmqDEFH
O5p7lVKLh85Y86Iernuxe0QR1zOQQaEL4Tqxi6c4hg4fJjs67j+DEWP5IUiYh8/+
iv4yLcaVgduZVFs0qrx9Y91Ursrf+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBNj
DEmOeQyeO9X/K2nvvYPRR+DAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQUU1QTdEQ0RBQjUxMUVFQjQ3OTNFOEE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVTMA0GCSqGSIb3DQEB
CwUAA4IBAQAC5vpmgzki7DB9ccY7r/odn/9A95le88yqESIMX5HIx8cPHhIu+x2u
/z82ux5rMN1z/hCY4eGqrsyxRmbHFkrNnZiBh6sLHP0Ttmu6cj+3nGwfsAjJphbt
/kqDe0TK1M4iUaRIbUexOngtUgFmL2pY85nj/M0X1rEKFun55IGetSP/LdrUT5Ty
6teM7wjOg+GIKHfLAqf/dcTGFcUdl5GauRvSiqOw4URPDhelNof1GuvhdbJTRi2h
6wTjEJHBKzUCj+tkUbGCnHAYL0wKESm8qoo/mp1lmrx+egfT6PAGItKgXilANqiK
WYMzqq9YK4OVfa0KxmVEVVpSSie+2NDN
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org