Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C3315C6A2C411EE9F831F22D25BE465.roa
File: 1C3315C6A2C411EE9F831F22D25BE465.roa (raw, json)
Hash identifier: uTfvBD5ERb0ha4Q3ucOSBiReTSf+0WU4pkQYAsNXoEY=
Subject key identifier: 61:A1:E3:24:59:4F:AB:D2:83:DF:68:9E:6F:0C:67:E2:C2:E8:E8:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6681
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C3315C6A2C411EE9F831F22D25BE465.roa
Signing time: Mon 25 Dec 2023 01:22:47 +0000
ROA not before: Mon 25 Dec 2023 01:22:43 +0000
ROA not after: Tue 07 Jan 2025 01:22:43 +0000
asID: 149981
IP address blocks: 154.85.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26241 (0x6681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:22:43 2023 GMT
Not After : Jan 7 01:22:43 2025 GMT
Subject: CN=6588d966-dcb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:d6:fa:45:0c:2b:bb:36:f5:7e:b1:dc:2b:
b8:a9:d2:68:fa:4b:7c:19:9d:0d:6a:30:8f:0f:db:
d4:64:ab:d5:42:e6:ed:f2:1b:6b:48:24:7f:7e:96:
e7:b8:f5:7a:88:c8:08:dc:91:ee:50:ad:65:88:a8:
55:2d:f3:ef:cc:90:4d:f0:b4:17:36:c8:af:6b:45:
6a:56:f5:e8:0e:5d:c4:7e:39:cb:bc:f0:2c:06:5e:
99:fb:a1:2b:7e:2b:c9:ae:ba:90:ea:96:9e:7d:20:
14:92:29:b5:4b:94:61:37:f9:4f:c6:10:28:1b:15:
dd:5a:9d:a4:98:a9:1b:da:55:af:c3:11:93:ab:ce:
d2:c5:ce:61:38:68:ef:ad:0c:ae:59:dd:7f:23:7a:
25:20:65:93:3d:45:b0:0b:60:1c:8c:d6:54:40:e5:
cc:18:16:fa:3b:50:a7:91:8c:53:86:1e:ec:6f:c0:
17:cb:73:6d:91:08:33:ae:8b:81:8c:08:d9:d2:e7:
9c:38:0d:07:1b:d6:17:02:62:0c:e3:b3:8e:b2:f0:
00:7a:37:4b:3c:a2:fe:60:81:57:2c:61:1c:76:6b:
79:dc:a1:2c:5d:60:78:ca:fa:b5:d0:50:df:1e:84:
e7:6b:e6:6d:36:3b:44:d2:13:ff:b2:2e:2a:e1:5b:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:E3:24:59:4F:AB:D2:83:DF:68:9E:6F:0C:67:E2:C2:E8:E8:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C3315C6A2C411EE9F831F22D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c2:7c:16:28:d3:f0:80:ea:6a:ff:e2:25:c5:22:41:95:15:
1b:49:9e:a0:d5:2a:5c:dd:02:02:8d:99:f4:f8:da:9a:01:bf:
f1:c0:b8:51:02:93:2f:46:5b:a4:a8:9c:e3:ac:7f:2d:b6:19:
4d:3e:39:e8:7f:d3:d3:f3:5a:25:f6:d9:4f:f2:68:ca:cb:01:
5d:86:41:bd:2f:14:29:78:22:44:aa:a0:b8:f0:43:7b:af:58:
70:15:7e:47:2c:ac:13:0c:a8:84:da:b2:3a:b6:f2:e6:95:6a:
6c:03:d8:38:e7:a0:08:f6:37:20:c2:37:59:03:c5:29:ce:42:
a9:20:bd:f6:c9:f8:6e:16:20:b6:f9:77:a8:f0:ff:59:bc:9b:
eb:e7:94:42:99:db:60:f9:e2:11:02:b6:ca:dc:56:bb:40:71:
91:ca:93:e5:8c:2f:ae:13:09:28:80:1b:7f:cb:be:6a:bf:14:
47:73:43:1d:07:04:96:4a:91:96:23:64:c0:f0:16:6b:4a:6c:
b4:2e:12:b0:47:bf:f2:2f:57:a1:e6:01:c3:3d:41:a6:39:b4:
f4:c7:e3:fd:69:ef:a6:a9:72:11:d5:74:5d:25:41:71:b6:d9:
f0:bf:70:56:ed:76:1b:70:ef:bd:77:13:32:11:9d:df:0f:82:
75:23:8a:01
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICZoEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMjUwMTIyNDNaFw0yNTAxMDcwMTIyNDNaMBgxFjAU
BgNVBAMTDTY1ODhkOTY2LWRjYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDitb6RQwruzb1frHcK7ip0mj6S3wZnQ1qMI8P29Rkq9VC5u3yG2tIJH9+
lue49XqIyAjcke5QrWWIqFUt8+/MkE3wtBc2yK9rRWpW9egOXcR+Ocu88CwGXpn7
oSt+K8muupDqlp59IBSSKbVLlGE3+U/GECgbFd1anaSYqRvaVa/DEZOrztLFzmE4
aO+tDK5Z3X8jeiUgZZM9RbALYByM1lRA5cwYFvo7UKeRjFOGHuxvwBfLc22RCDOu
i4GMCNnS55w4DQcb1hcCYgzjs46y8AB6N0s8ov5ggVcsYRx2a3ncoSxdYHjK+rXQ
UN8ehOdr5m02O0TSE/+yLirhW6VLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUYaHj
JFlPq9KD32iebwxn4sLo6P8wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFDMzMxNUM2QTJDNDExRUU5RjgzMUYyMkQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVVkwDQYJKoZIhvcNAQEL
BQADggEBAFrCfBYo0/CA6mr/4iXFIkGVFRtJnqDVKlzdAgKNmfT42poBv/HAuFEC
ky9GW6SonOOsfy22GU0+Oeh/09PzWiX22U/yaMrLAV2GQb0vFCl4IkSqoLjwQ3uv
WHAVfkcsrBMMqITasjq28uaVamwD2DjnoAj2NyDCN1kDxSnOQqkgvfbJ+G4WILb5
d6jw/1m8m+vnlEKZ22D54hECtsrcVrtAcZHKk+WML64TCSiAG3/Lvmq/FEdzQx0H
BJZKkZYjZMDwFmtKbLQuErBHv/IvV6HmAcM9QaY5tPTH4/1p76apchHVdF0lQXG2
2fC/cFbtdhtw7713EzIRnd8PgnUjigE=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org