Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22FFC576E73811EE9F4B9054775412E6.roa
File: 22FFC576E73811EE9F4B9054775412E6.roa (raw, json)
Hash identifier: tCCVBk7iGks9mujbtrVY8M+RtmAnsOKBCMwntkeyijM=
Subject key identifier: 71:3F:46:D3:0C:91:A9:0D:D5:6E:21:6B:D1:7A:AB:43:5F:71:4C:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A37C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22FFC576E73811EE9F4B9054775412E6.roa
Signing time: Thu 21 Mar 2024 04:04:39 +0000
ROA not before: Thu 21 Mar 2024 04:04:35 +0000
ROA not after: Tue 23 Apr 2024 04:04:35 +0000
asID: 44559
IP address blocks: 154.221.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41852 (0xa37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:04:35 2024 GMT
Not After : Apr 23 04:04:35 2024 GMT
Subject: CN=65fbb1d7-c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:0c:ae:e8:a8:d1:25:b0:82:16:18:34:26:
25:d0:b6:2d:e8:fd:5c:d6:34:5c:9d:8f:33:20:b5:
59:72:46:03:4c:6b:ae:35:77:05:d0:38:99:89:e1:
d0:41:fc:32:8d:ed:ce:30:16:2d:1a:df:80:57:cd:
7c:10:e2:e9:ec:6d:d8:ac:6f:57:1e:d7:48:84:46:
93:f7:21:3a:72:4e:90:5c:3a:42:6e:33:0c:84:99:
a8:02:3a:27:06:c5:a4:01:1c:65:b8:6e:87:91:1d:
3e:de:d4:3c:03:dc:99:a7:6e:78:3b:47:63:ae:ac:
04:40:8e:2d:05:b2:53:8c:21:61:58:18:43:92:a7:
11:fc:cd:68:5d:cc:37:0d:7b:31:92:bb:e1:b8:9f:
f2:61:a7:af:b7:0b:23:a0:0d:e3:04:9c:67:9b:5d:
3d:8a:39:c7:64:aa:f7:f5:1d:65:0a:94:8e:0e:7d:
e1:45:39:06:ea:06:00:a8:8b:2b:d1:0a:6d:a9:18:
bf:69:a8:47:7d:86:64:4f:f1:0c:ee:73:b2:c5:63:
7e:9c:1a:6d:32:b8:20:5d:8a:b4:10:a3:15:14:77:
bf:87:a9:29:81:89:66:e9:92:c9:4c:f9:eb:63:27:
cd:93:71:97:4b:7c:02:2e:2d:3c:eb:72:e6:4b:67:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:46:D3:0C:91:A9:0D:D5:6E:21:6B:D1:7A:AB:43:5F:71:4C:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22FFC576E73811EE9F4B9054775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4b:ea:89:61:44:48:9b:c3:8c:18:a6:ce:05:d8:db:93:c8:
2e:a0:d6:89:6f:16:37:a0:3e:32:f2:02:1d:bc:6c:8a:1d:66:
a8:e1:7f:c1:6e:ed:8c:42:07:88:20:06:c4:fe:b9:56:64:02:
91:dc:ec:89:8f:c6:eb:ef:9a:f2:f7:ba:34:f7:b8:b7:a3:7a:
db:fb:aa:46:df:7f:07:e1:c4:24:a1:8e:03:26:a5:44:8f:9b:
40:85:e7:3f:31:5b:fa:91:82:2d:3d:cf:41:1f:fc:45:13:03:
88:9b:64:f8:e6:dc:6d:8b:bc:c0:b5:c5:9c:f4:9c:b8:c1:a9:
f4:0c:c1:a8:dd:de:2a:92:a4:01:46:f5:85:3b:8e:45:ae:67:
7a:bf:60:47:de:b0:d9:cc:76:5a:48:55:7f:63:23:d6:24:72:
35:a1:8b:ba:de:ba:0b:26:96:54:6a:f5:f4:77:24:69:d1:00:
26:fe:86:88:ab:3e:4e:ad:dd:34:05:0a:39:bc:b9:cd:c5:51:
d7:68:9f:5d:72:a1:cc:99:63:7d:0a:3d:66:f9:0a:b2:42:04:
ec:a2:ff:25:9a:1a:d8:63:a8:1f:6b:2e:97:85:6c:5a:fb:b0:
10:98:98:f6:53:df:d8:72:82:da:5a:9a:2a:2c:74:3d:96:18:
61:61:03:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKN8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDQwNDM1WhcNMjQwNDIzMDQwNDM1WjAYMRYw
FAYDVQQDEw02NWZiYjFkNy1jOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyOwMruio0SWwghYYNCYl0LYt6P1c1jRcnY8zILVZckYDTGuuNXcF0DiZ
ieHQQfwyje3OMBYtGt+AV818EOLp7G3YrG9XHtdIhEaT9yE6ck6QXDpCbjMMhJmo
AjonBsWkARxluG6HkR0+3tQ8A9yZp254O0djrqwEQI4tBbJTjCFhWBhDkqcR/M1o
Xcw3DXsxkrvhuJ/yYaevtwsjoA3jBJxnm109ijnHZKr39R1lCpSODn3hRTkG6gYA
qIsr0QptqRi/aahHfYZkT/EM7nOyxWN+nBptMrggXYq0EKMVFHe/h6kpgYlm6ZLJ
TPnrYyfNk3GXS3wCLi0863LmS2czNQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHE/
RtMMkakN1W4ha9F6q0NfcUwIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yMkZGQzU3NkU3MzgxMUVFOUY0QjkwNTQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt37MA0GCSqGSIb3DQEB
CwUAA4IBAQB8S+qJYURIm8OMGKbOBdjbk8guoNaJbxY3oD4y8gIdvGyKHWao4X/B
bu2MQgeIIAbE/rlWZAKR3OyJj8br75ry97o097i3o3rb+6pG338H4cQkoY4DJqVE
j5tAhec/MVv6kYItPc9BH/xFEwOIm2T45txti7zAtcWc9Jy4wan0DMGo3d4qkqQB
RvWFO45Frmd6v2BH3rDZzHZaSFV/YyPWJHI1oYu63roLJpZUavX0dyRp0QAm/oaI
qz5Ord00BQo5vLnNxVHXaJ9dcqHMmWN9Cj1m+QqyQgTsov8lmhrYY6gfay6XhWxa
+7AQmJj2U9/YcoLaWpoqLHQ9lhhhYQNA
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:15 2024 by rpki-client on console-ams.rpki-client.org