Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA32B2CE76811EE857B604B775412E6.roa
File: 2EA32B2CE76811EE857B604B775412E6.roa (raw, json)
Hash identifier: VRk9IVABDIgjRK3Ymn0fsFtFROkejNy/xMj5dFNHWKw=
Subject key identifier: 67:5E:E9:0A:2D:67:D4:77:8B:4D:1A:B3:FE:D9:19:54:8E:34:6D:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A529
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA32B2CE76811EE857B604B775412E6.roa
Signing time: Thu 21 Mar 2024 09:48:34 +0000
ROA not before: Thu 21 Mar 2024 09:48:30 +0000
ROA not after: Tue 23 Apr 2024 09:48:30 +0000
asID: 44559
IP address blocks: 154.208.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42281 (0xa529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:48:30 2024 GMT
Not After : Apr 23 09:48:30 2024 GMT
Subject: CN=65fc0272-2378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:18:8c:10:bb:9f:30:e1:76:b7:d2:3c:a1:3e:
f5:04:93:85:c6:5b:5d:89:da:87:e7:ba:64:af:91:
3b:65:2e:d4:b3:d4:e4:19:1e:af:6f:3f:fe:ce:f4:
6b:6d:a1:64:1c:62:9e:b5:ff:a1:84:20:f5:91:75:
1e:ec:f0:12:4f:a6:82:1a:1e:25:23:38:98:3a:93:
04:7b:d9:72:8c:39:5b:51:e3:42:e8:d3:d5:1b:43:
4f:97:fd:21:10:eb:2f:54:b1:32:49:05:11:81:97:
86:5f:14:73:16:19:23:43:bb:d7:41:01:86:b3:28:
66:79:95:86:d5:a4:4b:fd:c3:ff:9e:af:11:9a:b5:
be:3d:49:ce:c5:53:6a:39:a9:29:f0:b6:1d:87:e3:
03:09:e2:52:f3:a5:af:c8:3f:9b:5d:56:81:48:d9:
19:a9:1e:a4:c9:70:0b:bb:73:a7:41:e6:3b:40:1f:
36:e0:9b:16:8b:0e:8b:aa:b9:30:c8:63:20:b9:97:
21:8b:69:0d:29:5b:36:3f:88:57:28:ba:ff:15:64:
8e:37:7d:5f:88:5d:d2:7c:6a:f8:c7:7d:7d:13:5b:
6e:8d:69:1d:6d:78:7f:a7:cf:8e:66:b5:f3:e4:8e:
c7:92:50:69:b7:a4:94:33:86:0c:7c:65:4d:d9:ff:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:E9:0A:2D:67:D4:77:8B:4D:1A:B3:FE:D9:19:54:8E:34:6D:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA32B2CE76811EE857B604B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:c2:68:03:35:ea:f5:74:e3:65:8b:0b:1c:a8:a6:73:f2:55:
c2:af:21:9e:3f:82:db:ba:f0:a3:43:b3:6f:bb:2a:19:7f:d8:
8c:5b:85:27:f1:1d:d0:e9:d3:e8:ee:d1:84:af:7a:fc:e7:f7:
d4:d5:b1:c4:6a:70:1a:80:26:ba:fe:61:77:ed:40:43:35:93:
b5:de:a0:08:03:69:49:09:db:07:40:1b:23:1c:a2:6a:47:d7:
cf:ff:90:c5:30:e2:92:5e:f5:1c:06:88:ff:62:17:a6:27:6d:
36:94:7b:7f:24:e0:87:62:3a:15:9d:2b:49:50:a9:9a:f4:37:
99:e5:b4:f1:28:9c:d5:c4:13:26:e9:e8:7b:ce:6b:f8:10:82:
a5:c3:70:7f:42:52:29:4f:ed:e9:82:3e:dc:30:6b:0c:90:ec:
87:e0:e5:3b:73:19:da:3e:0e:f6:58:7b:25:d1:c4:fa:1e:56:
8a:70:a7:4f:68:62:17:08:1b:fa:99:5b:b3:19:2c:8d:bb:5e:
4f:83:b1:85:35:73:cb:7f:0b:d3:21:8b:a6:89:c8:da:d6:b1:
3d:84:29:00:3c:99:95:34:32:36:df:6d:66:57:a1:c3:8e:64:
a0:51:e0:6d:bd:5f:4e:7e:2b:a8:21:6e:76:b4:a8:4e:88:95:
5c:bd:c9:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKUpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDk0ODMwWhcNMjQwNDIzMDk0ODMwWjAYMRYw
FAYDVQQDEw02NWZjMDI3Mi0yMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5RiMELufMOF2t9I8oT71BJOFxltdidqH57pkr5E7ZS7Us9TkGR6vbz/+
zvRrbaFkHGKetf+hhCD1kXUe7PAST6aCGh4lIziYOpMEe9lyjDlbUeNC6NPVG0NP
l/0hEOsvVLEySQURgZeGXxRzFhkjQ7vXQQGGsyhmeZWG1aRL/cP/nq8RmrW+PUnO
xVNqOakp8LYdh+MDCeJS86WvyD+bXVaBSNkZqR6kyXALu3OnQeY7QB824JsWiw6L
qrkwyGMguZchi2kNKVs2P4hXKLr/FWSON31fiF3SfGr4x319E1tujWkdbXh/p8+O
ZrXz5I7HklBpt6SUM4YMfGVN2f9KTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGde
6QotZ9R3i00as/7ZGVSONG2DMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRUEzMkIyQ0U3NjgxMUVFODU3QjYwNEI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtC0MA0GCSqGSIb3DQEB
CwUAA4IBAQDBwmgDNer1dONliwscqKZz8lXCryGeP4LbuvCjQ7NvuyoZf9iMW4Un
8R3Q6dPo7tGEr3r85/fU1bHEanAagCa6/mF37UBDNZO13qAIA2lJCdsHQBsjHKJq
R9fP/5DFMOKSXvUcBoj/YhemJ202lHt/JOCHYjoVnStJUKma9DeZ5bTxKJzVxBMm
6eh7zmv4EIKlw3B/QlIpT+3pgj7cMGsMkOyH4OU7cxnaPg72WHsl0cT6HlaKcKdP
aGIXCBv6mVuzGSyNu15Pg7GFNXPLfwvTIYumicja1rE9hCkAPJmVNDI2321mV6HD
jmSgUeBtvV9OfiuoIW52tKhOiJVcvclz
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:16 2024 by rpki-client on console-ams.rpki-client.org