Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA2461A76CF11EE8E586D1A4AD9E6FC.roa
File: 2BA2461A76CF11EE8E586D1A4AD9E6FC.roa (raw, json)
Hash identifier: rkgXQevNOGMUWrG8tS0AckHhdbUyBVGe8tbagboh0PM=
Subject key identifier: BA:78:BD:CB:06:B4:57:4D:B5:6F:6B:5C:8E:B3:F0:FC:CD:C3:55:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4B03
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA2461A76CF11EE8E586D1A4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 02:51:06 +0000
ROA not before: Mon 30 Oct 2023 02:51:02 +0000
ROA not after: Thu 19 Dec 2024 02:51:02 +0000
asID: 141190
IP address blocks: 154.211.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19203 (0x4b03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 02:51:02 2023 GMT
Not After : Dec 19 02:51:02 2024 GMT
Subject: CN=653f1a1a-72e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:54:8d:7f:23:65:f8:9b:23:6c:33:bc:d1:
af:99:a7:16:33:bc:33:65:54:79:cc:a2:7c:18:8b:
78:ca:70:80:06:79:ef:1a:18:c6:e1:9a:24:af:34:
98:13:1e:f9:d5:0d:bc:67:51:29:51:d9:5e:c3:ef:
4f:64:0a:2a:58:3f:63:49:f6:9f:8e:5e:0e:5f:91:
c7:00:c6:6c:a6:7a:79:13:17:d4:89:4b:45:32:e6:
ee:73:41:b8:7f:a8:34:3d:82:f3:42:87:85:48:e5:
19:56:29:f2:cc:e1:da:fb:fb:9a:b3:6f:5b:c1:57:
1c:31:99:da:ae:8a:b7:a0:e9:48:1d:6b:8d:19:63:
b2:24:79:c4:99:67:75:69:5c:fa:29:2d:26:93:d1:
ee:8b:36:5a:41:0e:f5:b2:52:13:27:99:74:8a:ae:
e1:05:42:20:b4:ff:b5:c5:29:bb:51:d4:10:24:7e:
09:25:3b:8d:d1:ed:fa:24:5f:52:80:4c:b3:8d:59:
b0:8b:74:95:bc:ca:94:7b:f6:35:86:71:dc:27:2a:
0d:a6:f6:6e:0e:3e:21:55:34:c1:f9:63:27:16:c0:
ae:f5:15:0a:a1:31:b6:86:aa:58:f1:9c:92:e2:0a:
2b:36:b7:71:cd:77:57:31:c1:57:99:66:3c:4c:76:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:BD:CB:06:B4:57:4D:B5:6F:6B:5C:8E:B3:F0:FC:CD:C3:55:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BA2461A76CF11EE8E586D1A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.0.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:5c:82:30:50:87:3e:83:2f:32:6b:d9:8d:4d:a1:4b:0f:c7:
9d:90:04:a5:9a:dc:4c:a1:b3:8d:f1:39:45:ef:7a:0f:af:94:
06:24:6c:3f:a8:f9:07:6e:59:43:cd:2e:26:60:54:a4:15:48:
fe:12:3a:77:a5:9f:68:97:fa:6a:93:85:52:4d:21:c6:73:ea:
ad:f5:0e:77:07:9f:46:21:49:48:27:f9:ce:14:ef:07:93:9a:
34:16:c1:94:22:88:16:d0:18:7f:05:a5:7e:51:90:81:52:39:
55:a0:7a:42:a3:c9:ee:c6:86:22:cc:87:23:43:42:17:87:e5:
91:35:89:25:3f:2c:9d:d7:e7:08:68:5e:0c:a0:65:a6:8c:d7:
73:8c:a3:1e:7a:ab:82:7e:2b:a5:f8:9e:30:6d:e1:66:bd:b8:
14:91:d6:6f:01:47:e8:ae:af:ae:cf:7b:ed:b1:c7:a2:d5:ab:
65:d3:b6:f5:b0:64:57:b2:57:5f:68:fd:17:db:5f:e3:c1:c5:
de:eb:fd:02:0b:53:1b:ef:df:3b:6f:10:ac:45:32:54:15:78:
90:f9:0d:63:fd:05:e0:66:5d:4e:1d:1d:04:49:39:6a:44:f1:
bd:49:fe:74:83:a9:04:f7:f2:e9:eb:cd:c4:10:6b:4d:1a:3e:
8d:ff:6a:e4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICSwMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEwMzAwMjUxMDJaFw0yNDEyMTkwMjUxMDJaMBgxFjAU
BgNVBAMTDTY1M2YxYTFhLTcyZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9pFSNfyNl+JsjbDO80a+ZpxYzvDNlVHnMonwYi3jKcIAGee8aGMbhmiSv
NJgTHvnVDbxnUSlR2V7D709kCipYP2NJ9p+OXg5fkccAxmymenkTF9SJS0Uy5u5z
Qbh/qDQ9gvNCh4VI5RlWKfLM4dr7+5qzb1vBVxwxmdquireg6Ugda40ZY7IkecSZ
Z3VpXPopLSaT0e6LNlpBDvWyUhMnmXSKruEFQiC0/7XFKbtR1BAkfgklO43R7fok
X1KATLONWbCLdJW8ypR79jWGcdwnKg2m9m4OPiFVNMH5YycWwK71FQqhMbaGqljx
nJLiCis2t3HNd1cxwVeZZjxMdkKxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuni9
ywa0V021b2tcjrPw/M3DVS4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzJCQTI0NjFBNzZDRjExRUU4RTU4NkQxQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGa0wAwDQYJKoZIhvcNAQEL
BQADggEBAExcgjBQhz6DLzJr2Y1NoUsPx52QBKWa3Eyhs43xOUXveg+vlAYkbD+o
+QduWUPNLiZgVKQVSP4SOneln2iX+mqThVJNIcZz6q31DncHn0YhSUgn+c4U7weT
mjQWwZQiiBbQGH8FpX5RkIFSOVWgekKjye7GhiLMhyNDQheH5ZE1iSU/LJ3X5who
XgygZaaM13OMox56q4J+K6X4njBt4Wa9uBSR1m8BR+iur67Pe+2xx6LVq2XTtvWw
ZFeyV19o/RfbX+PBxd7r/QILUxvv3ztvEKxFMlQVeJD5DWP9BeBmXU4dHQRJOWpE
8b1J/nSDqQT38unrzcQQa00aPo3/auQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org