Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA6AEA8F01111EEB2018291775412E6.roa
File: 2EA6AEA8F01111EEB2018291775412E6.roa (raw, json)
Hash identifier: YsjixCldSBalIAXyKMfUFitWHU/GnNXHobBXmAUS34Y=
Subject key identifier: 9D:AF:67:0E:8B:EF:26:FB:8D:29:BD:19:2E:43:E9:9D:14:05:0C:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A88A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA6AEA8F01111EEB2018291775412E6.roa
Signing time: Mon 01 Apr 2024 10:18:28 +0000
ROA not before: Mon 01 Apr 2024 10:18:25 +0000
ROA not after: Sat 11 May 2024 10:18:25 +0000
asID: 63139
IP address blocks: 154.203.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43146 (0xa88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:18:25 2024 GMT
Not After : May 11 10:18:25 2024 GMT
Subject: CN=660a89f4-6f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:cd:10:97:e5:3e:fe:14:22:17:00:1a:76:
ac:74:3e:72:ec:92:d3:56:cd:e2:03:7c:ff:a7:6f:
2e:f3:ad:cf:c4:17:5f:54:21:dd:bb:9a:47:e4:f0:
1c:ae:2d:46:94:60:1a:88:5e:da:ee:53:48:50:5d:
f3:ba:26:bb:89:e0:dc:7d:6f:7c:d7:69:6b:02:f6:
8e:f1:ee:c4:50:25:64:a8:8f:81:3d:55:f7:c5:f9:
77:e8:9d:06:f7:dc:c4:a6:6f:38:a9:03:b7:cb:3c:
48:b8:a5:21:72:0d:2c:68:cd:bb:4d:52:c4:3d:e8:
e1:5d:6d:26:26:c1:25:9a:2a:11:79:f3:a7:5e:78:
b5:de:59:de:8a:dc:87:8b:bd:65:38:bf:c2:20:de:
92:8a:33:65:e7:6e:61:22:fa:f6:13:d1:79:22:19:
2a:0d:34:cd:65:e0:c3:de:0c:93:d1:2c:b4:ee:3d:
bc:bd:8e:de:e6:9b:90:3a:17:7b:15:77:6e:69:57:
2c:89:83:d9:83:a6:04:3a:56:6e:12:da:0e:9b:61:
47:1d:3d:dc:77:83:1f:4c:be:96:1a:29:b0:57:f4:
32:e3:41:a5:a2:fa:3a:4a:cb:0c:0f:27:81:6c:97:
da:96:26:c7:5d:9a:5d:c6:df:84:2f:a9:61:ec:6c:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:67:0E:8B:EF:26:FB:8D:29:BD:19:2E:43:E9:9D:14:05:0C:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EA6AEA8F01111EEB2018291775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.162.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a8:5e:fa:e4:0b:83:cb:b5:8f:d9:57:bd:d9:54:68:64:04:
0b:c0:1f:9d:8a:d6:24:8f:8a:87:b1:0b:c1:26:5b:1e:40:79:
7e:e2:88:86:e1:78:a2:d7:42:96:24:a2:38:1d:0c:28:3d:a3:
55:da:45:6c:3e:66:32:b7:f7:3c:0a:85:cb:1c:8b:62:d5:09:
00:44:de:41:eb:b2:01:e4:10:dd:de:a8:c8:00:27:93:08:d2:
cc:c3:9e:9d:8f:cc:f7:8d:cd:f5:44:09:28:ad:a2:ea:55:31:
85:c8:b0:0d:17:12:16:32:b5:93:53:1d:c2:05:c0:68:bf:d0:
85:da:e9:27:15:b6:8d:02:0f:f5:1d:79:a7:b8:41:2d:b2:00:
ed:c4:f2:68:9a:8c:13:30:bc:59:53:4b:bf:5a:e0:a2:32:67:
28:27:26:a9:07:52:3a:36:0b:db:d2:40:29:dd:79:7d:3b:ad:
a8:0a:fb:0e:68:ed:3d:ad:3c:81:4d:96:0b:12:23:94:21:aa:
6e:7d:7a:aa:6c:11:b5:0f:82:46:3b:a7:66:1b:f4:13:5d:34:
b7:a9:c0:15:75:57:85:0a:e0:9c:0c:fa:23:fb:6e:82:eb:f8:
a8:cb:a0:23:ba:75:39:b4:79:6a:fe:11:ea:23:4d:22:ef:4e:
35:a3:7d:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKiKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMTAxODI1WhcNMjQwNTExMTAxODI1WjAYMRYw
FAYDVQQDEw02NjBhODlmNC02ZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnULNEJflPv4UIhcAGnasdD5y7JLTVs3iA3z/p28u863PxBdfVCHdu5pH
5PAcri1GlGAaiF7a7lNIUF3zuia7ieDcfW9812lrAvaO8e7EUCVkqI+BPVX3xfl3
6J0G99zEpm84qQO3yzxIuKUhcg0saM27TVLEPejhXW0mJsElmioRefOnXni13lne
ityHi71lOL/CIN6SijNl525hIvr2E9F5IhkqDTTNZeDD3gyT0Sy07j28vY7e5puQ
Ohd7FXduaVcsiYPZg6YEOlZuEtoOm2FHHT3cd4MfTL6WGimwV/Qy40Glovo6SssM
DyeBbJfalibHXZpdxt+EL6lh7GxyzQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ2v
Zw6L7yb7jSm9GS5D6Z0UBQwjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRUE2QUVBOEYwMTExMUVFQjIwMTgyOTE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuiMA0GCSqGSIb3DQEB
CwUAA4IBAQAHqF765AuDy7WP2Ve92VRoZAQLwB+ditYkj4qHsQvBJlseQHl+4oiG
4Xii10KWJKI4HQwoPaNV2kVsPmYyt/c8CoXLHIti1QkARN5B67IB5BDd3qjIACeT
CNLMw56dj8z3jc31RAkoraLqVTGFyLANFxIWMrWTUx3CBcBov9CF2uknFbaNAg/1
HXmnuEEtsgDtxPJomowTMLxZU0u/WuCiMmcoJyapB1I6Ngvb0kAp3Xl9O62oCvsO
aO09rTyBTZYLEiOUIapufXqqbBG1D4JGO6dmG/QTXTS3qcAVdVeFCuCcDPoj+26C
6/ioy6AjunU5tHlq/hHqI00i7041o32R
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org