Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25A0F1124B1811EFB0FDF670762E951A.roa
File: 25A0F1124B1811EFB0FDF670762E951A.roa (raw, json)
Hash identifier: 8xwJoHAQr/lIb+0CMGfh8onZh/OOFZF5b0OEreCQoSA=
Subject key identifier: 9B:4C:5B:16:22:CC:9E:28:23:E7:68:8E:9D:F5:18:A4:3D:E6:13:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: D75F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25A0F1124B1811EFB0FDF670762E951A.roa
Signing time: Fri 26 Jul 2024 06:27:36 +0000
ROA not before: Fri 26 Jul 2024 06:27:32 +0000
ROA not after: Mon 02 Jun 2025 06:27:32 +0000
asID: 9304
IP address blocks: 154.223.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55135 (0xd75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 06:27:32 2024 GMT
Not After : Jun 2 06:27:32 2025 GMT
Subject: CN=66a341d7-5afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:25:e9:7a:99:70:93:33:c7:dd:43:85:41:
cc:ec:5f:23:1d:d6:27:4f:a0:52:3b:28:bd:40:ff:
40:49:48:a2:ea:33:86:e2:07:b5:eb:bf:95:56:a6:
48:e4:a1:3e:f6:31:74:04:d1:2a:71:4e:08:1c:7a:
da:81:7f:62:59:12:34:84:60:25:52:55:3f:89:b2:
e7:06:f6:05:f8:54:59:62:88:31:55:98:31:8b:ca:
82:a8:3c:94:56:38:30:70:21:02:1b:55:ec:c6:d7:
dd:94:58:42:e8:c4:ba:7e:a0:28:fa:df:79:07:a8:
18:e1:8e:c1:db:bf:63:9a:63:84:af:92:67:b2:43:
bf:cb:0e:1a:64:79:f6:ae:88:c9:56:ff:4a:b3:a6:
78:dd:1a:58:53:bf:14:b1:8f:98:68:6b:85:b9:0a:
85:bd:88:b2:2c:57:a4:4f:47:29:7e:c1:e8:c4:3e:
5f:65:8d:e8:4b:46:2a:a9:08:00:b2:6d:9e:96:2e:
a9:4e:a0:2b:09:1a:8b:5b:1c:2e:7c:46:51:25:bf:
a6:03:70:78:47:c9:d8:e9:ae:7b:2b:27:ce:aa:e0:
7b:31:e7:97:2f:b1:be:b7:56:b0:13:ba:d7:3a:a8:
cf:a3:83:a5:1d:74:c8:20:bc:89:01:ef:b9:57:12:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:5B:16:22:CC:9E:28:23:E7:68:8E:9D:F5:18:A4:3D:E6:13:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25A0F1124B1811EFB0FDF670762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:af:ec:83:1d:4e:93:ea:35:97:71:14:2f:4f:d4:03:db:6d:
bc:35:16:9a:e9:02:9d:64:b9:69:88:03:87:44:fa:c8:6d:b8:
0f:4e:4a:c2:53:19:5b:49:68:8d:32:06:e9:65:ff:33:1c:df:
c2:1b:55:04:7c:4d:ff:26:c7:4f:ba:bf:f8:8b:0c:8d:d3:85:
85:5b:db:f3:a2:e7:62:af:b9:72:a3:a6:3f:42:69:a5:74:3e:
22:61:ee:79:83:1a:4b:2f:f2:b3:6b:cb:d5:03:73:a4:26:01:
94:b2:15:01:84:f8:db:3b:83:8a:77:61:9e:79:56:98:74:dc:
0e:a3:01:83:4a:b3:70:4a:44:5f:d9:9b:f4:a2:35:1d:87:3e:
98:e4:a3:14:b0:8a:a7:f7:b3:d3:20:73:2a:55:eb:d7:4e:7c:
4c:60:cd:01:aa:cc:ff:2a:ad:c2:ca:4e:c3:d3:cd:3b:3f:fb:
3b:23:0b:95:41:d7:5d:76:8e:a2:bf:b0:80:72:ae:2e:8e:47:
4a:c9:51:d4:d8:ea:2d:06:85:a1:97:e6:ea:3d:b8:28:1e:b3:
d7:ec:56:42:5e:9f:3b:72:3b:7f:13:e9:0a:af:dc:05:aa:18:
3a:0f:f1:32:fb:94:d8:51:33:e6:1f:da:a0:fe:c9:8d:f8:51:
19:aa:fd:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDANdfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzI2MDYyNzMyWhcNMjUwNjAyMDYyNzMyWjAYMRYw
FAYDVQQDEw02NmEzNDFkNy01YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxLwl6XqZcJMzx91DhUHM7F8jHdYnT6BSOyi9QP9ASUii6jOG4ge167+V
VqZI5KE+9jF0BNEqcU4IHHragX9iWRI0hGAlUlU/ibLnBvYF+FRZYogxVZgxi8qC
qDyUVjgwcCECG1XsxtfdlFhC6MS6fqAo+t95B6gY4Y7B279jmmOEr5JnskO/yw4a
ZHn2rojJVv9Ks6Z43RpYU78UsY+YaGuFuQqFvYiyLFekT0cpfsHoxD5fZY3oS0Yq
qQgAsm2eli6pTqArCRqLWxwufEZRJb+mA3B4R8nY6a57KyfOquB7MeeXL7G+t1aw
E7rXOqjPo4OlHXTIILyJAe+5VxL7nwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJtM
WxYizJ4oI+dojp31GKQ95hNzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yNUEwRjExMjRCMTgxMUVGQjBGREY2NzA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8FMA0GCSqGSIb3DQEB
CwUAA4IBAQB8r+yDHU6T6jWXcRQvT9QD2228NRaa6QKdZLlpiAOHRPrIbbgPTkrC
UxlbSWiNMgbpZf8zHN/CG1UEfE3/JsdPur/4iwyN04WFW9vzoudir7lyo6Y/Qmml
dD4iYe55gxpLL/Kza8vVA3OkJgGUshUBhPjbO4OKd2GeeVaYdNwOowGDSrNwSkRf
2Zv0ojUdhz6Y5KMUsIqn97PTIHMqVevXTnxMYM0Bqsz/Kq3Cyk7D0807P/s7IwuV
Qddddo6iv7CAcq4ujkdKyVHU2OotBoWhl+bqPbgoHrPX7FZCXp87cjt/E+kKr9wF
qhg6D/Ey+5TYUTPmH9qg/smN+FEZqv2F
-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:15 2024 by rpki-client on console-fra.rpki-client.org