Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30D72744EFF211EEB3E1DF9D775412E6.roa
File: 30D72744EFF211EEB3E1DF9D775412E6.roa (raw, json)
Hash identifier: 1IobGgchbwiHiAZu/cT43LdYc9859TRr/XPRny4dqp0=
Subject key identifier: 0E:ED:97:9A:E8:E5:8A:EF:17:F2:80:CF:93:98:7D:B6:65:04:C0:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30D72744EFF211EEB3E1DF9D775412E6.roa
Signing time: Mon 01 Apr 2024 06:36:38 +0000
ROA not before: Mon 01 Apr 2024 06:36:34 +0000
ROA not after: Tue 07 May 2024 06:36:34 +0000
asID: 138915
IP address blocks: 154.223.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42952 (0xa7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:36:34 2024 GMT
Not After : May 7 06:36:34 2024 GMT
Subject: CN=660a55f5-3362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:cb:4d:f0:ee:32:0b:40:b7:fd:28:44:9e:
82:58:0a:42:80:b1:83:c4:b4:4a:4d:13:67:c0:a8:
6b:53:19:76:dc:74:18:fb:57:73:e1:67:89:ce:a5:
32:de:67:21:36:e4:dc:69:4f:5a:e9:52:17:5b:76:
23:9b:17:2a:59:db:6b:09:50:ad:13:34:df:8d:a7:
7d:63:0f:05:ec:e3:0e:eb:18:9e:00:6a:d2:9b:84:
5f:29:a9:17:68:d5:33:7e:f5:c5:a9:1b:11:da:88:
f6:25:07:89:c5:94:d8:d4:1f:c9:d6:2f:04:48:d9:
64:4f:67:35:3b:67:0c:e7:c6:85:dd:50:bc:39:43:
a4:6d:31:65:34:96:4b:12:91:83:a4:9e:6a:62:b1:
58:15:cf:4f:53:3d:30:be:d8:05:90:6d:91:9d:cf:
30:26:40:8a:6a:27:50:38:cc:dc:53:ad:7e:0a:e5:
69:0f:a6:10:60:47:54:c8:29:80:bc:bd:3e:46:c3:
6b:3b:2e:bd:fb:d8:79:9b:dc:ae:74:c5:18:c2:f0:
6d:93:dd:80:fe:89:55:c5:ac:21:d9:57:b4:97:ce:
38:cf:e5:d7:9f:b8:ef:bc:33:b2:09:63:2e:a7:f0:
9c:ad:5a:44:d2:81:3f:02:68:0b:24:ef:a7:65:35:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:97:9A:E8:E5:8A:EF:17:F2:80:CF:93:98:7D:B6:65:04:C0:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30D72744EFF211EEB3E1DF9D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:8f:92:13:6b:cb:e2:b6:08:7e:40:67:7b:4e:af:76:79:f0:
fa:03:9d:c9:3f:fa:89:0a:d8:70:48:be:8c:d2:d5:34:a0:ef:
3f:ad:03:70:eb:06:13:0b:b9:d2:6a:4a:bf:01:b4:0e:92:72:
c8:d6:65:97:9b:17:3d:d8:c8:28:f8:27:f7:72:6f:9d:73:37:
35:c5:c4:90:31:64:7b:64:aa:18:68:0b:8c:53:b4:f0:99:91:
ee:8f:02:9a:eb:08:06:a6:30:fa:7d:90:8d:04:dd:90:55:0b:
1e:0c:85:80:ec:55:85:b5:34:65:a9:d7:95:17:54:93:27:71:
3b:8a:f6:bb:76:d9:a7:98:d8:a1:ff:26:13:db:db:74:ae:e7:
98:fa:a8:45:d8:f3:be:d8:db:ec:4a:44:16:0f:96:38:8c:0a:
fc:f4:1a:fb:58:3f:fa:e1:fd:e5:9b:7e:15:c3:a7:e9:a2:30:
af:9f:bf:ca:29:90:5a:7d:2e:2c:e6:45:88:45:dc:f2:ea:3c:
db:c2:6b:7a:1d:f3:4c:90:11:8e:3f:2d:e9:58:60:c5:87:7d:
e5:af:78:92:49:9f:a3:64:6e:2d:e0:86:9a:71:71:ba:a1:02:
61:55:a7:a8:dd:96:bd:ee:3e:7d:cc:96:56:d6:a6:5f:58:52:
f3:74:11:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKfIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDYzNjM0WhcNMjQwNTA3MDYzNjM0WjAYMRYw
FAYDVQQDEw02NjBhNTVmNS0zMzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA393LTfDuMgtAt/0oRJ6CWApCgLGDxLRKTRNnwKhrUxl23HQY+1dz4WeJ
zqUy3mchNuTcaU9a6VIXW3YjmxcqWdtrCVCtEzTfjad9Yw8F7OMO6xieAGrSm4Rf
KakXaNUzfvXFqRsR2oj2JQeJxZTY1B/J1i8ESNlkT2c1O2cM58aF3VC8OUOkbTFl
NJZLEpGDpJ5qYrFYFc9PUz0wvtgFkG2Rnc8wJkCKaidQOMzcU61+CuVpD6YQYEdU
yCmAvL0+RsNrOy69+9h5m9yudMUYwvBtk92A/olVxawh2Ve0l844z+XXn7jvvDOy
CWMup/CcrVpE0oE/AmgLJO+nZTX7BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA7t
l5ro5YrvF/KAz5OYfbZlBMD8MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMEQ3Mjc0NEVGRjIxMUVFQjNFMURGOUQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8zMA0GCSqGSIb3DQEB
CwUAA4IBAQC0j5ITa8vitgh+QGd7Tq92efD6A53JP/qJCthwSL6M0tU0oO8/rQNw
6wYTC7nSakq/AbQOknLI1mWXmxc92Mgo+Cf3cm+dczc1xcSQMWR7ZKoYaAuMU7Tw
mZHujwKa6wgGpjD6fZCNBN2QVQseDIWA7FWFtTRlqdeVF1STJ3E7iva7dtmnmNih
/yYT29t0rueY+qhF2PO+2NvsSkQWD5Y4jAr89Br7WD/64f3lm34Vw6fpojCvn7/K
KZBafS4s5kWIRdzy6jzbwmt6HfNMkBGOPy3pWGDFh33lr3iSSZ+jZG4t4IaacXG6
oQJhVaeo3Za97j59zJZW1qZfWFLzdBEa
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org