Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256C9F1AE20511EE9D73AFC7775412E6.roa
File: 256C9F1AE20511EE9D73AFC7775412E6.roa (raw, json)
Hash identifier: HNn0nebFGDjTq01JasleGt8MsKoncZW5CAfVz6dAwGg=
Subject key identifier: 22:6D:4B:1C:C9:6A:FC:09:82:0B:1E:4D:56:8A:BC:8B:A4:FD:D7:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A164
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256C9F1AE20511EE9D73AFC7775412E6.roa
Signing time: Thu 14 Mar 2024 13:17:03 +0000
ROA not before: Thu 14 Mar 2024 13:16:58 +0000
ROA not after: Fri 20 Sep 2024 13:16:58 +0000
asID: 2914
IP address blocks: 154.214.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41316 (0xa164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 14 13:16:58 2024 GMT
Not After : Sep 20 13:16:58 2024 GMT
Subject: CN=65f2f8cf-d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:6b:1d:63:93:33:93:43:c6:94:c3:5d:68:
ff:3f:16:84:f6:1c:88:55:be:11:86:ea:8d:e5:dd:
59:0c:6f:dd:bd:65:39:2f:7c:01:23:7f:45:a5:2a:
d6:5d:e0:0d:5d:69:4a:3f:b9:0b:34:dc:7e:05:8c:
81:36:dd:c6:20:55:c6:55:be:dc:d2:67:70:e7:e7:
48:51:e2:8f:79:e5:ec:a3:ce:44:c2:39:b6:e8:a7:
a5:70:6c:cc:1e:8e:c0:a6:30:a2:66:4e:2a:aa:4f:
36:11:45:b7:42:2f:5d:88:7d:2c:c9:8e:de:1f:37:
2e:bd:4c:d8:72:fe:81:3c:2c:66:39:52:3c:4c:d3:
84:4c:0d:5f:58:2c:b5:10:71:64:51:f1:76:d8:ce:
b8:09:70:10:b9:11:e2:3a:bd:a4:7c:7a:95:55:b0:
27:25:ee:86:54:d9:42:18:99:48:4b:b5:f5:12:b6:
05:d0:26:8f:dd:21:9e:8c:78:aa:b0:9e:3f:6f:85:
c3:91:36:39:98:f4:95:fd:cc:84:24:41:99:f0:c8:
f1:e3:51:ce:ac:70:d5:4f:15:2f:18:f1:1a:50:3f:
3d:29:05:5d:19:39:0b:86:c2:0d:cc:58:6e:61:ce:
4b:80:ff:73:42:45:55:7e:5f:e5:1a:ef:67:a8:45:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:4B:1C:C9:6A:FC:09:82:0B:1E:4D:56:8A:BC:8B:A4:FD:D7:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/256C9F1AE20511EE9D73AFC7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:57:50:14:fc:89:3c:95:42:54:22:20:62:b0:91:b4:e7:14:
e0:1c:3a:a9:28:14:01:29:8e:13:d7:ea:64:f4:22:26:d5:ef:
df:12:0f:ae:56:71:03:2d:97:25:ac:22:8c:ad:70:6d:8f:c0:
d4:d7:8b:94:b3:99:0d:ee:51:d3:cb:f6:4d:5c:72:22:8b:16:
fb:26:23:d6:2c:38:12:dd:d9:e8:79:c5:08:81:55:8f:3c:49:
d6:bf:5e:df:70:71:c5:fd:18:85:a6:81:23:3a:28:fc:f6:92:
f5:fe:49:60:a6:a5:9b:52:37:6a:c9:e7:12:10:02:25:1d:a9:
88:bb:bd:9d:ee:7a:6f:2a:4f:33:89:20:6b:31:97:16:c3:f9:
c2:b2:e9:ae:53:aa:9a:c7:ad:2d:84:81:8b:c6:7f:a0:3b:2c:
28:fc:ed:68:05:59:78:d9:33:63:20:58:f9:6a:3b:68:30:aa:
2b:5f:16:dc:2f:94:aa:e1:ff:1e:9b:0b:30:3b:9a:f9:dc:b3:
35:50:85:92:69:f3:04:e6:1a:b7:38:e4:dc:73:6a:c4:46:10:
38:bf:c0:ec:68:76:07:d5:80:94:ad:dc:a4:3c:52:a4:a7:27:
fe:56:d4:f8:66:c0:8c:92:75:28:b0:2b:6a:39:43:76:9e:f3:
eb:31:7d:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKFkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzE0MTMxNjU4WhcNMjQwOTIwMTMxNjU4WjAYMRYw
FAYDVQQDEw02NWYyZjhjZi1kOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2SdrHWOTM5NDxpTDXWj/PxaE9hyIVb4RhuqN5d1ZDG/dvWU5L3wBI39F
pSrWXeANXWlKP7kLNNx+BYyBNt3GIFXGVb7c0mdw5+dIUeKPeeXso85Ewjm26Kel
cGzMHo7ApjCiZk4qqk82EUW3Qi9diH0syY7eHzcuvUzYcv6BPCxmOVI8TNOETA1f
WCy1EHFkUfF22M64CXAQuRHiOr2kfHqVVbAnJe6GVNlCGJlIS7X1ErYF0CaP3SGe
jHiqsJ4/b4XDkTY5mPSV/cyEJEGZ8Mjx41HOrHDVTxUvGPEaUD89KQVdGTkLhsIN
zFhuYc5LgP9zQkVVfl/lGu9nqEVzSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCJt
SxzJavwJggseTVaKvIuk/dfLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNTZDOUYxQUUyMDUxMUVFOUQ3M0FGQzc3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbIMA0GCSqGSIb3DQEB
CwUAA4IBAQCMV1AU/Ik8lUJUIiBisJG05xTgHDqpKBQBKY4T1+pk9CIm1e/fEg+u
VnEDLZclrCKMrXBtj8DU14uUs5kN7lHTy/ZNXHIiixb7JiPWLDgS3dnoecUIgVWP
PEnWv17fcHHF/RiFpoEjOij89pL1/klgpqWbUjdqyecSEAIlHamIu72d7npvKk8z
iSBrMZcWw/nCsumuU6qax60thIGLxn+gOywo/O1oBVl42TNjIFj5ajtoMKorXxbc
L5Sq4f8emwswO5r53LM1UIWSafME5hq3OOTcc2rERhA4v8DsaHYH1YCUrdykPFKk
pyf+VtT4ZsCMknUosCtqOUN2nvPrMX3S
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org