Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D401E46E73911EEB355A15A775412E6.roa
File: 1D401E46E73911EEB355A15A775412E6.roa (raw, json)
Hash identifier: RwBLoo/6EDoykzsbDaAGfw4/anUG2aB2yaslJHz7+5E=
Subject key identifier: E4:4F:0F:9F:8C:C5:BF:20:47:01:52:F6:0A:17:95:00:65:BE:2C:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A386
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D401E46E73911EEB355A15A775412E6.roa
Signing time: Thu 21 Mar 2024 04:11:39 +0000
ROA not before: Thu 21 Mar 2024 04:11:35 +0000
ROA not after: Tue 23 Apr 2024 04:11:35 +0000
asID: 44559
IP address blocks: 154.221.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41862 (0xa386)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:11:35 2024 GMT
Not After : Apr 23 04:11:35 2024 GMT
Subject: CN=65fbb37a-5299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:80:98:c7:f2:73:11:65:34:b4:7f:fc:d4:
06:15:9c:3b:c6:de:ec:4c:ef:08:8d:74:f6:a2:d6:
2a:13:76:b8:53:b7:a1:9b:94:e7:a2:8f:2c:9a:1b:
9e:9a:2e:72:44:74:a6:50:de:64:3a:c7:48:77:78:
29:df:c1:c5:04:52:bd:1a:8a:92:da:f2:6f:39:64:
42:9d:fe:47:f4:b4:ad:b0:a8:06:2b:eb:18:f6:df:
10:c0:74:75:38:c4:66:2e:82:eb:66:da:ec:fd:b0:
49:8c:53:c9:60:7e:26:95:fb:b4:23:7f:6c:7d:c8:
dc:8f:09:93:04:d1:ab:6d:1c:9b:74:21:d6:ab:06:
ba:4c:65:8c:36:56:9c:e3:b0:e8:94:06:c0:b5:0b:
33:3c:39:8f:87:2a:b6:d3:4f:1f:4f:34:4c:9d:d5:
20:88:1f:12:9d:7b:b8:54:fc:32:e2:d6:ea:79:48:
2f:bd:a0:50:18:34:f6:08:36:9a:ed:ab:88:e9:f0:
87:ec:49:29:0e:32:53:7d:db:cc:7c:96:51:c5:02:
1e:52:a7:5c:14:65:f4:42:16:35:7c:8e:a1:39:f5:
3d:81:64:a8:30:97:ad:e6:4f:b7:95:af:dd:2d:83:
ad:f5:cc:b4:21:93:0b:64:4f:01:d6:cb:5a:67:ac:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4F:0F:9F:8C:C5:BF:20:47:01:52:F6:0A:17:95:00:65:BE:2C:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D401E46E73911EEB355A15A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.246.0/24
Signature Algorithm: sha256WithRSAEncryption
32:8c:48:2c:13:47:0c:9b:6c:1f:71:e7:3d:e3:09:a6:a0:5a:
54:7a:a8:f2:7f:66:ac:00:56:a4:d8:9f:9e:43:cb:b2:72:94:
cf:e4:01:f3:72:4d:15:9f:16:35:d8:42:1d:2f:8b:d6:7f:97:
0d:2d:a2:1d:d1:28:fb:60:f6:d5:e9:82:35:d9:be:17:2b:6a:
aa:28:6f:39:cb:39:da:6b:6c:bc:0f:0a:7c:c7:c6:77:1f:17:
01:66:68:8b:64:0f:a7:8e:61:fa:80:fe:ad:a2:af:bf:f0:6d:
9c:63:5e:d5:44:6a:26:20:ff:92:64:6d:4a:f9:89:ae:36:5c:
2f:88:da:55:3b:17:c8:88:20:36:c2:6d:92:73:55:67:64:12:
bc:73:47:e9:ca:c6:44:d1:3d:9a:41:63:b1:ef:a7:03:cb:0e:
4a:77:39:45:dc:13:f2:0e:02:48:d5:89:5e:e9:13:9a:5b:f6:
21:81:69:a3:ad:04:1d:e0:6e:66:44:ba:1c:2c:2b:e8:8c:c3:
86:4c:ed:1c:c9:e7:d0:5a:e4:2b:f9:98:cf:01:38:df:e7:92:
19:95:5d:95:9c:87:fd:3a:92:6c:d9:bb:6d:28:10:9a:95:9d:
8a:47:d9:eb:20:ed:14:6e:f0:24:06:3d:23:4d:65:70:19:29:
b9:42:ec:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKOGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDQxMTM1WhcNMjQwNDIzMDQxMTM1WjAYMRYw
FAYDVQQDEw02NWZiYjM3YS01Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoKyAmMfycxFlNLR//NQGFZw7xt7sTO8IjXT2otYqE3a4U7ehm5Tnoo8s
mhuemi5yRHSmUN5kOsdId3gp38HFBFK9GoqS2vJvOWRCnf5H9LStsKgGK+sY9t8Q
wHR1OMRmLoLrZtrs/bBJjFPJYH4mlfu0I39sfcjcjwmTBNGrbRybdCHWqwa6TGWM
Nlac47DolAbAtQszPDmPhyq2008fTzRMndUgiB8SnXu4VPwy4tbqeUgvvaBQGDT2
CDaa7auI6fCH7EkpDjJTfdvMfJZRxQIeUqdcFGX0QhY1fI6hOfU9gWSoMJet5k+3
la/dLYOt9cy0IZMLZE8B1staZ6yOAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFORP
D5+Mxb8gRwFS9goXlQBlviwoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xRDQwMUU0NkU3MzkxMUVFQjM1NUExNUE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt32MA0GCSqGSIb3DQEB
CwUAA4IBAQAyjEgsE0cMm2wfcec94wmmoFpUeqjyf2asAFak2J+eQ8uycpTP5AHz
ck0VnxY12EIdL4vWf5cNLaId0Sj7YPbV6YI12b4XK2qqKG85yznaa2y8Dwp8x8Z3
HxcBZmiLZA+njmH6gP6toq+/8G2cY17VRGomIP+SZG1K+YmuNlwviNpVOxfIiCA2
wm2Sc1VnZBK8c0fpysZE0T2aQWOx76cDyw5KdzlF3BPyDgJI1Yle6ROaW/YhgWmj
rQQd4G5mRLocLCvojMOGTO0cyefQWuQr+ZjPATjf55IZlV2VnIf9OpJs2bttKBCa
lZ2KR9nrIO0UbvAkBj0jTWVwGSm5Quwf
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:14 2024 by rpki-client on console-fra.rpki-client.org