Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282DD176B0FD11EEB5B0245A775412E6.roa
File: 282DD176B0FD11EEB5B0245A775412E6.roa (raw, json)
Hash identifier: 2d+j2jr8Ig0u2ouujPzI9YWbRuy51ddNyWxyJCylLtA=
Subject key identifier: B0:0A:FB:C3:C4:A6:B7:77:BB:7D:85:9B:DC:97:77:17:AC:FF:40:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7473
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282DD176B0FD11EEB5B0245A775412E6.roa
Signing time: Fri 12 Jan 2024 03:46:24 +0000
ROA not before: Fri 12 Jan 2024 03:46:21 +0000
ROA not after: Fri 13 Dec 2024 03:46:21 +0000
asID: 140224
IP address blocks: 154.205.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29811 (0x7473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 03:46:21 2024 GMT
Not After : Dec 13 03:46:21 2024 GMT
Subject: CN=65a0b610-72d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:d4:18:b4:4f:a7:99:23:64:ec:29:13:83:
df:9d:3b:62:e8:48:71:2a:96:6c:4e:2f:ef:1e:cd:
21:d0:73:24:a2:d3:77:ed:4b:cc:99:22:65:3d:47:
43:58:02:56:02:f4:bf:b1:e6:af:b0:89:63:6b:e8:
a7:bf:e8:cc:d9:15:17:20:45:f7:ea:b9:31:a1:37:
ef:ae:bd:9d:62:a8:af:d5:4d:68:29:86:8a:2e:4b:
d3:e9:52:21:67:0f:3b:ca:a5:77:fa:c7:f6:ad:2e:
ec:19:b5:23:3c:d0:e1:5a:bf:b7:75:4e:a8:1d:3b:
55:3a:f2:26:d8:4c:d2:26:4d:47:f8:a1:1e:b6:b7:
51:25:0e:0a:c9:17:c3:9d:d8:c2:87:3e:a0:49:81:
11:8e:1b:dc:bc:1a:66:d0:f6:cc:b7:f5:00:14:91:
3b:8a:bc:69:52:ca:4b:22:3a:b0:cd:6a:9c:f5:13:
80:8f:20:25:f1:4a:11:14:ef:36:64:42:c2:c9:f6:
e3:2b:62:5d:fa:39:59:4c:75:4a:fd:d2:b2:22:ad:
b6:3d:9f:1e:e7:61:7e:2e:a0:8a:86:d5:2a:0d:cb:
06:6b:0d:3e:70:e9:86:83:8c:71:f9:4a:ea:61:5e:
13:6d:24:11:ce:9e:25:2b:0e:07:28:6c:51:78:cd:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:FB:C3:C4:A6:B7:77:BB:7D:85:9B:DC:97:77:17:AC:FF:40:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/282DD176B0FD11EEB5B0245A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.194.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c6:32:f3:46:85:ef:60:12:7f:7f:e9:5b:a3:f0:3c:a1:75:
f1:26:56:ea:1f:7e:dd:fd:25:20:48:14:58:43:40:8f:25:06:
92:b4:16:68:70:54:d3:f0:f7:0b:9d:2e:00:20:df:45:fa:b0:
7c:ea:6f:ea:b2:d7:e0:68:f7:ef:2c:63:8e:18:14:76:3d:a6:
ea:d5:f6:ff:e0:94:19:38:5c:8a:35:07:72:02:13:ba:0b:eb:
fd:2c:2c:a5:54:d9:cd:72:d9:67:c4:6c:c1:0c:82:9f:eb:b9:
d4:b0:58:f9:1a:bc:ea:29:47:f2:5b:a5:e8:55:b9:73:d9:fd:
55:85:36:1a:48:89:bb:bb:48:13:c8:51:bf:84:00:4e:fd:96:
7c:5f:ff:ef:f0:25:ca:34:9b:3d:26:31:b6:4d:63:88:e5:7f:
aa:e2:36:b8:2a:94:1e:35:a2:ff:5e:08:0a:e1:a7:6b:84:64:
ba:ba:4d:87:f0:76:a4:75:99:73:af:7b:bb:30:1d:1b:2d:36:
0d:c1:1a:a0:82:64:d2:1d:08:ed:1a:78:51:de:4f:be:80:6b:
08:ca:28:26:a5:35:64:34:a8:45:19:77:69:65:39:fa:32:9d:
dd:33:e1:a7:99:c4:7e:ff:92:86:2d:98:8e:53:b2:8f:59:8b:
74:02:35:5f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdHMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTIwMzQ2MjFaFw0yNDEyMTMwMzQ2MjFaMBgxFjAU
BgNVBAMTDTY1YTBiNjEwLTcyZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbtdQYtE+nmSNk7CkTg9+dO2LoSHEqlmxOL+8ezSHQcySi03ftS8yZImU9
R0NYAlYC9L+x5q+wiWNr6Ke/6MzZFRcgRffquTGhN++uvZ1iqK/VTWgphoouS9Pp
UiFnDzvKpXf6x/atLuwZtSM80OFav7d1TqgdO1U68ibYTNImTUf4oR62t1ElDgrJ
F8Od2MKHPqBJgRGOG9y8GmbQ9sy39QAUkTuKvGlSyksiOrDNapz1E4CPICXxShEU
7zZkQsLJ9uMrYl36OVlMdUr90rIirbY9nx7nYX4uoIqG1SoNywZrDT5w6YaDjHH5
SuphXhNtJBHOniUrDgcobFF4zY+VAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsAr7
w8Smt3e7fYWb3Jd3F6z/QHowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzI4MkREMTc2QjBGRDExRUVCNUIwMjQ1QTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazcIwDQYJKoZIhvcNAQEL
BQADggEBACPGMvNGhe9gEn9/6Vuj8DyhdfEmVuofft39JSBIFFhDQI8lBpK0Fmhw
VNPw9wudLgAg30X6sHzqb+qy1+Bo9+8sY44YFHY9purV9v/glBk4XIo1B3ICE7oL
6/0sLKVU2c1y2WfEbMEMgp/rudSwWPkavOopR/JbpehVuXPZ/VWFNhpIibu7SBPI
Ub+EAE79lnxf/+/wJco0mz0mMbZNY4jlf6riNrgqlB41ov9eCArhp2uEZLq6TYfw
dqR1mXOve7swHRstNg3BGqCCZNIdCO0aeFHeT76AawjKKCalNWQ0qEUZd2llOfoy
nd0z4aeZxH7/koYtmI5Tso9Zi3QCNV8=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org