Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E58DC0EF47C11EEB91461A0775412E6.roa
File: 2E58DC0EF47C11EEB91461A0775412E6.roa (raw, json)
Hash identifier: 9smxIcVKwjBl4rPDcF6Y2EcHGwX/2zm97EeVhx0Trwc=
Subject key identifier: 79:6A:EF:B3:FB:F8:84:65:19:76:0E:8A:80:53:F2:2E:22:E6:FA:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A982
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E58DC0EF47C11EEB91461A0775412E6.roa
Signing time: Sun 07 Apr 2024 01:14:29 +0000
ROA not before: Sun 07 Apr 2024 01:14:25 +0000
ROA not after: Thu 09 May 2024 01:14:25 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43394 (0xa982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:14:25 2024 GMT
Not After : May 9 01:14:25 2024 GMT
Subject: CN=6611f374-fe0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:7c:85:19:76:40:84:ae:08:9a:24:e8:0a:
63:14:42:49:4c:1d:9f:88:0b:42:8c:b5:c8:7e:9a:
da:e2:66:87:54:c8:54:d1:b5:40:b8:99:56:a0:5f:
3d:20:cd:3b:d8:76:7c:ee:4f:61:ad:f9:ea:4e:d2:
c1:f7:1a:f3:2d:90:f7:a9:d1:0a:a7:bf:c3:07:d6:
0d:39:79:89:92:74:d6:70:78:b5:f6:5c:06:65:b3:
80:a5:8e:07:45:d3:c2:41:9d:e0:b6:51:c9:f2:c4:
b1:b2:b4:97:5b:1f:29:c6:bf:0f:30:00:31:65:2d:
24:e8:e8:48:6a:e3:24:d0:75:d9:ea:6e:bb:57:65:
49:19:90:62:92:27:6f:6e:5e:63:12:79:a1:2b:d5:
1d:9d:08:13:b8:43:95:71:82:11:a6:7b:8d:5c:88:
98:fb:9c:8b:f1:30:df:c9:18:f7:aa:bc:91:78:78:
e3:84:da:a0:24:a1:d7:76:7c:a2:67:d3:98:ce:78:
11:62:9e:76:18:7e:8d:ce:27:cc:85:85:22:88:f9:
58:80:3d:95:63:e8:f4:3c:e2:ed:ff:f9:eb:f5:e2:
22:7a:ed:de:80:74:36:df:fb:24:9f:66:11:92:b1:
de:ef:82:b7:8f:c2:52:bc:e3:41:02:6d:b9:ef:90:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:EF:B3:FB:F8:84:65:19:76:0E:8A:80:53:F2:2E:22:E6:FA:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E58DC0EF47C11EEB91461A0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:07:cf:da:6c:be:0d:fa:53:eb:db:de:ed:df:af:36:e8:b9:
c3:89:22:25:05:b1:2d:5b:d0:b3:cf:cf:44:87:76:80:8b:3c:
7b:32:84:a5:c9:96:b1:5d:15:f5:e5:90:a4:8b:b8:09:99:e9:
c6:2b:29:d6:c4:17:b4:75:0d:df:f2:72:88:b6:29:73:2b:f5:
ff:bb:3f:67:17:44:7b:fc:6c:20:b8:2b:94:81:10:61:b8:04:
a4:4c:3a:c7:49:1e:02:a5:b0:99:40:61:5a:52:59:00:b4:56:
f0:22:22:bf:06:a9:0d:d1:d9:e4:d4:50:fb:b5:6d:de:33:e0:
e1:a0:44:36:a6:fd:1d:42:86:2a:0d:7d:d1:50:f6:c6:09:fc:
d5:75:52:5e:15:1e:cf:0d:ae:a0:af:65:b7:cb:4e:f9:07:9c:
3d:e0:b3:15:7c:79:29:0a:39:63:0b:32:cf:36:3d:c6:82:ab:
70:09:26:94:6e:90:f0:df:1f:5a:c3:dc:89:4a:6b:58:73:fc:
d2:52:ef:ca:e2:e0:19:27:aa:4b:0b:8c:f8:45:a0:31:f5:e7:
30:5a:7d:f9:e6:ab:36:53:c6:2c:85:02:de:5e:c9:75:58:ac:
74:e1:c0:7f:b7:7b:2a:cb:17:b0:af:d8:85:6b:e9:ba:4b:4a:
11:0b:81:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKmCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDA3MDExNDI1WhcNMjQwNTA5MDExNDI1WjAYMRYw
FAYDVQQDEw02NjExZjM3NC1mZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsEV8hRl2QISuCJok6ApjFEJJTB2fiAtCjLXIfpra4maHVMhU0bVAuJlW
oF89IM072HZ87k9hrfnqTtLB9xrzLZD3qdEKp7/DB9YNOXmJknTWcHi19lwGZbOA
pY4HRdPCQZ3gtlHJ8sSxsrSXWx8pxr8PMAAxZS0k6OhIauMk0HXZ6m67V2VJGZBi
kidvbl5jEnmhK9UdnQgTuEOVcYIRpnuNXIiY+5yL8TDfyRj3qryReHjjhNqgJKHX
dnyiZ9OYzngRYp52GH6NzifMhYUiiPlYgD2VY+j0POLt//nr9eIieu3egHQ23/sk
n2YRkrHe74K3j8JSvONBAm2575APdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHlq
77P7+IRlGXYOioBT8i4i5vp5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRTU4REMwRUY0N0MxMUVFQjkxNDYxQTA3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYLMA0GCSqGSIb3DQEB
CwUAA4IBAQCkB8/abL4N+lPr297t36826LnDiSIlBbEtW9Czz89Eh3aAizx7MoSl
yZaxXRX15ZCki7gJmenGKynWxBe0dQ3f8nKItilzK/X/uz9nF0R7/GwguCuUgRBh
uASkTDrHSR4CpbCZQGFaUlkAtFbwIiK/BqkN0dnk1FD7tW3eM+DhoEQ2pv0dQoYq
DX3RUPbGCfzVdVJeFR7PDa6gr2W3y075B5w94LMVfHkpCjljCzLPNj3GgqtwCSaU
bpDw3x9aw9yJSmtYc/zSUu/K4uAZJ6pLC4z4RaAx9ecwWn355qs2U8YshQLeXsl1
WKx04cB/t3sqyxewr9iFa+m6S0oRC4FB
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org