Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224A41F682C011EE84BCA2424AD9E6FC.roa
File: 224A41F682C011EE84BCA2424AD9E6FC.roa (raw, json)
Hash identifier: n2bIb5P0DPICKI32IVo0WJ1Si5x+cITymbNE6EIrOMQ=
Subject key identifier: 82:F3:AF:6D:61:04:D4:77:34:56:0D:5A:7D:6F:AB:D6:C4:29:63:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5016
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224A41F682C011EE84BCA2424AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:33:42 +0000
ROA not before: Tue 14 Nov 2023 07:33:38 +0000
ROA not after: Tue 12 Nov 2024 07:33:38 +0000
asID: 397630
IP address blocks: 154.84.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20502 (0x5016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:33:38 2023 GMT
Not After : Nov 12 07:33:38 2024 GMT
Subject: CN=655322d5-c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:e9:79:a6:a8:0a:bf:d9:50:e5:f2:8f:9a:
fd:ba:3c:15:df:02:30:81:fc:ca:99:44:30:41:f9:
b4:5d:bd:5a:b2:ee:19:00:83:85:31:7c:cc:10:e7:
8f:9c:c8:80:d8:f8:24:0d:25:eb:16:6e:cf:10:1b:
c9:e2:7b:e7:fc:ad:98:45:c2:f4:69:15:e8:66:f2:
e9:3d:e8:10:ed:da:26:79:b4:2a:74:6b:75:b5:26:
f0:07:67:22:20:55:66:3c:b8:99:c9:d2:d3:5f:bd:
a9:23:fb:de:c2:12:0d:1e:ac:5d:71:8b:14:ba:8e:
8b:f7:8b:17:ba:41:d2:9f:d9:ff:40:8e:be:f5:1d:
29:0b:37:20:30:dc:16:c4:40:5c:34:dd:82:91:f0:
c2:1b:b8:93:a5:d4:36:90:a0:69:c8:51:97:e1:fe:
d2:4c:d7:dc:4b:f6:ca:5c:71:3b:76:8e:48:32:7e:
5b:b8:9f:ca:96:58:77:dc:93:5b:53:d6:c8:b9:27:
28:23:22:fd:3a:bd:f0:0e:e3:95:7a:b6:50:56:35:
14:b5:66:ef:8d:de:d6:96:b0:47:c1:ee:31:7e:74:
8a:5e:13:bd:4d:84:b9:ad:d5:4f:f0:93:ef:70:45:
d2:08:ab:df:7c:ec:bf:72:10:75:95:cd:5a:4a:2d:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F3:AF:6D:61:04:D4:77:34:56:0D:5A:7D:6F:AB:D6:C4:29:63:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/224A41F682C011EE84BCA2424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.140.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:3b:d4:50:74:bf:0e:86:2e:91:f1:aa:9a:48:86:71:ed:99:
8e:a7:ce:00:67:59:39:c1:00:25:c5:86:a8:61:5a:44:b8:94:
49:3f:22:5c:97:d1:88:61:36:b9:91:3f:f5:4b:4f:dc:51:43:
a9:d5:b3:2a:4c:0f:48:cf:00:2f:db:a2:e4:c2:1e:70:21:33:
62:e3:66:56:03:ef:b8:1d:6e:43:9b:f0:d6:34:d9:c0:f4:9c:
ac:6f:f4:2d:f2:7c:cc:4d:ef:37:ac:17:73:d4:5b:46:6b:dc:
b0:d7:4d:f7:cd:71:3d:ab:40:6b:c6:0f:fb:e4:91:11:52:51:
9e:da:b9:9e:d1:ce:4b:4e:c4:6f:fb:f4:30:de:f6:4b:a1:9d:
19:5f:c2:b0:ee:93:39:6d:db:ae:f5:1e:ef:25:8f:bc:e7:bc:
99:c4:91:b8:3a:48:98:12:3f:d8:a0:43:4f:84:14:16:16:60:
51:46:d7:0d:a3:44:35:07:b6:bf:88:32:7d:e0:21:38:05:5b:
3c:b0:65:b5:05:00:c1:da:15:e3:67:b6:67:ea:25:94:b6:79:
a2:51:6b:ac:9d:ac:b1:d5:2b:aa:b7:95:db:3b:8b:e2:66:0a:
81:dc:bd:dd:f4:3c:50:7c:95:eb:a1:4e:fd:f1:37:e0:55:e9:
b5:e0:3e:c4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUBYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNzMzMzhaFw0yNDExMTIwNzMzMzhaMBgxFjAU
BgNVBAMTDTY1NTMyMmQ1LWMxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUr+l5pqgKv9lQ5fKPmv26PBXfAjCB/MqZRDBB+bRdvVqy7hkAg4UxfMwQ
54+cyIDY+CQNJesWbs8QG8nie+f8rZhFwvRpFehm8uk96BDt2iZ5tCp0a3W1JvAH
ZyIgVWY8uJnJ0tNfvakj+97CEg0erF1xixS6jov3ixe6QdKf2f9Ajr71HSkLNyAw
3BbEQFw03YKR8MIbuJOl1DaQoGnIUZfh/tJM19xL9spccTt2jkgyflu4n8qWWHfc
k1tT1si5JygjIv06vfAO45V6tlBWNRS1Zu+N3taWsEfB7jF+dIpeE71NhLmt1U/w
k+9wRdIIq9987L9yEHWVzVpKLW4tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgvOv
bWEE1Hc0Vg1afW+r1sQpY4cwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzIyNEE0MUY2ODJDMDExRUU4NEJDQTI0MjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVIwwDQYJKoZIhvcNAQEL
BQADggEBAMQ71FB0vw6GLpHxqppIhnHtmY6nzgBnWTnBACXFhqhhWkS4lEk/IlyX
0YhhNrmRP/VLT9xRQ6nVsypMD0jPAC/bouTCHnAhM2LjZlYD77gdbkOb8NY02cD0
nKxv9C3yfMxN7zesF3PUW0Zr3LDXTffNcT2rQGvGD/vkkRFSUZ7auZ7RzktOxG/7
9DDe9kuhnRlfwrDukzlt2671Hu8lj7znvJnEkbg6SJgSP9igQ0+EFBYWYFFG1w2j
RDUHtr+IMn3gITgFWzywZbUFAMHaFeNntmfqJZS2eaJRa6ydrLHVK6q3lds7i+Jm
CoHcvd30PFB8leuhTv3xN+BV6bXgPsQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org