Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8194C0A2C511EEA1653425D25BE465.roa
File: 1C8194C0A2C511EEA1653425D25BE465.roa (raw, json)
Hash identifier: a9WraQqGFZJGlJHp1lCAAAb//SVzYp+6TWaSS5oBBKg=
Subject key identifier: 7D:0B:E1:0C:D4:D6:DA:15:EC:8A:7F:12:8E:A2:BF:C8:5F:A5:9C:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 668B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8194C0A2C511EEA1653425D25BE465.roa
Signing time: Mon 25 Dec 2023 01:29:56 +0000
ROA not before: Mon 25 Dec 2023 01:29:53 +0000
ROA not after: Tue 07 Jan 2025 01:29:53 +0000
asID: 139057
IP address blocks: 154.85.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26251 (0x668b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 01:29:53 2023 GMT
Not After : Jan 7 01:29:53 2025 GMT
Subject: CN=6588db14-d69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:bc:a0:c3:f1:4a:58:d3:d4:4d:24:54:62:
b8:94:5c:84:b3:8f:05:32:83:56:65:4a:6f:2c:14:
73:60:b7:ed:f4:66:c0:11:55:d5:d7:0e:40:8d:e0:
54:ff:88:f1:47:c3:05:c5:00:ce:13:17:15:e4:da:
71:52:b5:a6:1b:f4:ee:17:55:84:41:5f:e3:83:28:
b2:2a:db:58:8f:63:13:c2:bd:68:bf:f0:3f:95:c1:
b2:69:ca:c1:5c:b8:9b:3f:b4:69:bd:d7:d0:0e:c3:
87:06:c8:2c:e2:0c:11:44:a2:60:c7:83:60:f9:87:
35:10:05:fc:0c:76:5c:1e:fc:e1:82:13:9e:a0:ef:
ca:05:23:a1:29:b7:60:0b:46:58:d6:12:5e:33:9c:
c1:fb:30:2a:99:78:fe:b5:40:a9:af:ea:ce:0f:71:
2a:c2:03:bc:a6:1b:7b:31:36:65:fc:15:44:40:e4:
cb:f6:ff:01:e6:f4:6c:ce:07:c9:60:49:94:11:ad:
a0:e5:58:09:3e:9a:52:34:85:2d:e4:3b:13:bd:b9:
fd:e5:46:53:3f:d9:52:31:02:35:1c:a7:20:78:66:
2a:7d:ab:25:1d:d8:7d:ac:29:4f:ee:51:60:52:ce:
9f:fa:4c:23:7b:c0:75:24:b6:da:fb:e2:c2:65:50:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0B:E1:0C:D4:D6:DA:15:EC:8A:7F:12:8E:A2:BF:C8:5F:A5:9C:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C8194C0A2C511EEA1653425D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.68.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4a:f2:c2:d7:81:94:9d:fe:8e:c6:48:54:a5:50:ad:f1:8c:
08:a6:b4:3b:9c:70:11:cc:bc:03:fb:2d:af:47:87:81:5b:17:
82:3c:84:b7:45:06:69:57:ce:1c:0c:e7:f0:ca:f1:e8:69:97:
4a:74:bb:b9:0d:33:1d:b0:0c:53:70:29:3b:8b:31:79:5a:f3:
e2:7e:79:a6:77:21:78:69:c2:8d:63:61:c7:5e:21:ea:e2:54:
fc:07:c4:a6:3e:71:53:77:87:77:68:b1:a3:f5:85:e2:8f:35:
fb:17:d4:d9:d1:c1:a9:5f:8e:22:39:60:4d:d1:4f:23:85:37:
99:73:ae:9b:55:5c:46:b3:79:85:89:bd:05:f8:e0:6b:20:05:
60:8e:ac:f9:0c:25:aa:98:d3:21:ae:84:80:4f:2e:5f:a0:83:
51:55:b3:a9:a2:7b:44:4e:19:d9:b5:20:b4:f2:d1:08:57:93:
d4:f5:3c:2e:9d:e1:2d:c4:37:c5:6e:6f:cc:21:bc:fd:eb:63:
78:d2:20:d1:2b:00:ef:c3:8a:ad:dc:1e:75:3f:c2:e1:b1:3f:
b1:5a:d2:4e:48:bb:6d:82:d6:bf:45:fa:22:80:be:e2:ca:8a:
72:4d:08:21:ee:61:20:af:3c:16:ea:41:00:fe:b5:2d:e3:c6:
68:2d:30:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICZoswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMjUwMTI5NTNaFw0yNTAxMDcwMTI5NTNaMBgxFjAU
BgNVBAMTDTY1ODhkYjE0LWQ2OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsTrygw/FKWNPUTSRUYriUXISzjwUyg1ZlSm8sFHNgt+30ZsARVdXXDkCN
4FT/iPFHwwXFAM4TFxXk2nFStaYb9O4XVYRBX+ODKLIq21iPYxPCvWi/8D+VwbJp
ysFcuJs/tGm919AOw4cGyCziDBFEomDHg2D5hzUQBfwMdlwe/OGCE56g78oFI6Ep
t2ALRljWEl4znMH7MCqZeP61QKmv6s4PcSrCA7ymG3sxNmX8FURA5Mv2/wHm9GzO
B8lgSZQRraDlWAk+mlI0hS3kOxO9uf3lRlM/2VIxAjUcpyB4Zip9qyUd2H2sKU/u
UWBSzp/6TCN7wHUkttr74sJlUGtbAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfQvh
DNTW2hXsin8SjqK/yF+lnPkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzFDODE5NEMwQTJDNTExRUVBMTY1MzQyNUQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVUQwDQYJKoZIhvcNAQEL
BQADggEBADdK8sLXgZSd/o7GSFSlUK3xjAimtDuccBHMvAP7La9Hh4FbF4I8hLdF
BmlXzhwM5/DK8ehpl0p0u7kNMx2wDFNwKTuLMXla8+J+eaZ3IXhpwo1jYcdeIeri
VPwHxKY+cVN3h3dosaP1heKPNfsX1NnRwalfjiI5YE3RTyOFN5lzrptVXEazeYWJ
vQX44GsgBWCOrPkMJaqY0yGuhIBPLl+gg1FVs6mie0ROGdm1ILTy0QhXk9T1PC6d
4S3EN8Vub8whvP3rY3jSINErAO/Diq3cHnU/wuGxP7Fa0k5Iu22C1r9F+iKAvuLK
inJNCCHuYSCvPBbqQQD+tS3jxmgtMOk=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org