Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22768A9CD6DD11EEBE1D9CA8775412E6.roa
File: 22768A9CD6DD11EEBE1D9CA8775412E6.roa (raw, json)
Hash identifier: Uz4c/K/sbnB0G8d4GDlmgyQYZBBClGde1cadcQzo8yw=
Subject key identifier: B3:88:7B:76:1E:92:2F:00:6A:10:94:97:B4:27:21:D0:B5:FB:4A:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 930B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22768A9CD6DD11EEBE1D9CA8775412E6.roa
Signing time: Thu 29 Feb 2024 08:32:55 +0000
ROA not before: Thu 29 Feb 2024 08:32:52 +0000
ROA not after: Sun 02 Feb 2025 08:32:52 +0000
asID: 150812
IP address blocks: 154.196.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37643 (0x930b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 29 08:32:52 2024 GMT
Not After : Feb 2 08:32:52 2025 GMT
Subject: CN=65e04137-9050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:71:ac:ec:20:c9:96:d7:1e:63:51:df:f4:
92:ca:b8:ce:99:44:ea:20:f0:18:27:d8:44:1e:e0:
f9:d9:52:b0:ef:8b:b4:e6:bb:81:b3:b7:ab:7b:95:
ac:40:4b:8c:5a:98:f2:c9:cb:fb:e2:15:bf:14:52:
66:ca:a7:df:72:e0:24:55:de:c3:07:8b:89:23:45:
0b:07:ea:d2:a0:fb:35:85:05:29:1d:2c:22:de:08:
bd:88:a0:a6:95:37:f5:11:74:05:d6:ae:65:69:09:
68:e2:82:9c:6e:9e:65:87:2a:ef:31:c6:8b:49:66:
53:c8:20:0f:a5:af:2f:67:c2:39:e6:61:0e:93:46:
fc:6b:bc:02:52:fb:8f:8a:7e:4f:9e:b2:b5:51:fd:
a6:91:95:9c:64:a7:31:3f:ac:04:87:18:87:c5:5b:
e6:9f:ce:8e:e3:e2:a9:83:fc:eb:8b:64:58:47:a8:
8e:a8:3a:01:8e:14:ec:d5:6d:3d:40:c4:35:a4:f3:
b4:dd:e8:b4:f7:67:84:c2:50:2b:3d:10:8c:f2:a1:
74:b0:0d:2b:e7:61:dd:9b:31:92:f4:38:07:68:7e:
57:35:5c:a7:f9:4e:ce:f6:5f:b4:1a:68:d4:07:b7:
2d:e6:68:b9:b4:e0:e2:8d:c3:d6:3c:9c:08:16:b1:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:88:7B:76:1E:92:2F:00:6A:10:94:97:B4:27:21:D0:B5:FB:4A:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22768A9CD6DD11EEBE1D9CA8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bd:ce:59:c3:b8:7a:5c:02:c4:60:19:23:66:04:f4:2e:87:
a8:47:9f:29:cc:a1:87:8b:c8:0d:28:f1:9d:24:fa:39:d8:60:
1a:61:3c:18:39:11:6c:8e:6a:7a:1f:06:5a:24:21:df:3a:3e:
4a:d0:85:47:5c:a8:54:05:c5:84:bc:01:b3:fa:60:c2:46:55:
dc:4d:bb:2a:d2:55:69:e6:b3:a4:30:4b:8f:b7:79:b8:69:34:
9a:9c:50:fd:b0:a2:4d:cb:07:45:53:0f:3a:b6:89:67:b4:f3:
80:a7:19:3c:4d:f0:d3:0d:21:63:ad:b4:03:fb:e1:25:4a:6c:
35:ec:02:06:b9:82:f2:ea:d6:ee:63:00:82:82:b2:1e:e8:53:
40:47:15:86:ee:c7:5e:39:9a:5e:37:e3:8b:1c:fe:0d:bf:c1:
c6:23:5a:10:89:b0:7e:cd:12:0e:09:3c:7a:fd:81:b4:60:14:
ba:b4:89:e7:e0:0a:bb:76:db:fa:22:82:25:de:77:6a:45:75:
6b:b0:98:04:8c:81:dc:83:0b:76:1a:3e:07:6d:19:be:d7:28:
86:33:0b:4f:64:37:5b:18:9c:8d:1c:1d:7b:1d:d3:92:8d:2a:
30:68:86:99:38:ff:be:76:37:d9:27:07:0a:48:17:ef:63:b1:
ed:db:7b:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAJMLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjI5MDgzMjUyWhcNMjUwMjAyMDgzMjUyWjAYMRYw
FAYDVQQDEw02NWUwNDEzNy05MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAra9xrOwgyZbXHmNR3/SSyrjOmUTqIPAYJ9hEHuD52VKw74u05ruBs7er
e5WsQEuMWpjyycv74hW/FFJmyqffcuAkVd7DB4uJI0ULB+rSoPs1hQUpHSwi3gi9
iKCmlTf1EXQF1q5laQlo4oKcbp5lhyrvMcaLSWZTyCAPpa8vZ8I55mEOk0b8a7wC
UvuPin5PnrK1Uf2mkZWcZKcxP6wEhxiHxVvmn86O4+Kpg/zri2RYR6iOqDoBjhTs
1W09QMQ1pPO03ei092eEwlArPRCM8qF0sA0r52HdmzGS9DgHaH5XNVyn+U7O9l+0
GmjUB7ct5mi5tODijcPWPJwIFrERDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLOI
e3Yeki8AahCUl7QnIdC1+0ovMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMjc2OEE5Q0Q2REQxMUVFQkUxRDlDQTg3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsSCMA0GCSqGSIb3DQEB
CwUAA4IBAQCLvc5Zw7h6XALEYBkjZgT0LoeoR58pzKGHi8gNKPGdJPo52GAaYTwY
ORFsjmp6HwZaJCHfOj5K0IVHXKhUBcWEvAGz+mDCRlXcTbsq0lVp5rOkMEuPt3m4
aTSanFD9sKJNywdFUw86tolntPOApxk8TfDTDSFjrbQD++ElSmw17AIGuYLy6tbu
YwCCgrIe6FNARxWG7sdeOZpeN+OLHP4Nv8HGI1oQibB+zRIOCTx6/YG0YBS6tInn
4Aq7dtv6IoIl3ndqRXVrsJgEjIHcgwt2Gj4HbRm+1yiGMwtPZDdbGJyNHB17HdOS
jSowaIaZOP++djfZJwcKSBfvY7Ht23t3
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org