Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E6D95682BB11EEB8A638334AD9E6FC.roa
File: 33E6D95682BB11EEB8A638334AD9E6FC.roa (raw, json)
Hash identifier: mWlAh7H5eKBlGRba/XzOXLGJdNNeo2AWSC80svBtDCM=
Subject key identifier: 8A:25:E0:62:05:EC:DD:DD:BD:54:17:4F:D4:A6:FA:66:D6:39:74:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E6D95682BB11EEB8A638334AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:58:24 +0000
ROA not before: Tue 14 Nov 2023 06:58:20 +0000
ROA not after: Tue 12 Nov 2024 06:58:20 +0000
asID: 397630
IP address blocks: 154.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20454 (0x4fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:58:20 2023 GMT
Not After : Nov 12 06:58:20 2024 GMT
Subject: CN=65531a90-3498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:33:44:e2:e0:4e:94:8f:81:eb:c8:cc:06:a4:
cc:fa:dc:6a:45:98:17:70:36:ca:6c:7b:22:78:18:
04:23:29:93:b6:a8:9c:dc:e4:74:fd:42:32:95:70:
ce:db:4c:76:4d:40:32:4b:ca:9b:2a:35:3d:cc:e7:
bf:98:71:5f:29:f7:8f:19:ff:bf:28:98:ae:5b:08:
c2:82:1a:89:38:da:9f:66:d6:e7:6e:d4:70:52:dd:
66:6d:d8:ed:8b:56:4d:d7:59:e4:b9:44:da:cb:70:
6c:69:8f:41:6f:81:c2:0e:a4:58:0a:cf:10:e2:e7:
57:0a:39:dd:37:98:42:e3:01:f9:8e:9d:13:c4:fb:
2c:20:86:89:9f:be:44:67:8f:ca:10:78:be:15:5f:
94:f4:11:f0:52:28:16:6a:b0:b2:82:04:05:d9:67:
6a:58:66:81:fe:a5:10:fa:d8:13:79:67:18:1f:18:
bb:91:1a:6b:f7:f6:d9:72:6b:5e:12:51:0d:8d:95:
d0:a6:83:c2:cc:20:a7:bd:86:f2:f7:f9:bb:a0:31:
2d:08:0a:94:84:3c:25:84:05:99:94:60:44:49:9f:
ea:1c:6a:6c:32:84:42:53:39:f3:e8:7b:4a:15:97:
50:78:50:f9:bd:69:53:01:3e:dd:df:ca:d5:fc:be:
0e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:E0:62:05:EC:DD:DD:BD:54:17:4F:D4:A6:FA:66:D6:39:74:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/33E6D95682BB11EEB8A638334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2a:4e:e4:94:f1:7f:e7:99:5b:95:b8:16:f5:02:f5:74:ff:
1a:fe:80:a0:e3:ea:d6:6c:58:c1:60:88:5d:a4:ae:f2:67:3b:
1c:e5:e1:7c:6a:71:48:89:45:95:26:b9:d9:e9:64:f4:5a:f9:
11:63:38:bf:5b:3b:62:e7:24:63:6c:60:27:a2:d6:53:b2:3b:
91:fd:7b:27:15:f3:2f:e7:ad:c3:fd:f0:60:74:e1:6c:66:32:
44:93:fb:93:28:c6:fa:bf:cb:82:0c:bf:69:bd:fd:5d:06:51:
4f:1f:18:d6:87:38:48:44:42:c3:a1:b6:03:16:65:8a:22:dd:
cf:7d:be:56:21:c6:81:5f:3e:00:13:a2:df:7f:c9:10:df:1d:
db:46:07:19:f7:33:79:cd:05:4b:e7:cb:e5:61:5f:fa:9f:e0:
37:13:ec:81:a3:7b:5f:d7:ff:c6:a0:90:0a:3d:27:af:90:22:
86:41:86:3d:02:89:c3:e0:83:62:6a:3e:03:1b:77:c4:28:c7:
f8:a6:47:b5:9b:1f:fe:ee:c4:69:16:c9:93:68:ca:ca:73:2e:
6a:60:57:ce:2c:4a:55:ad:9b:82:97:1b:58:3d:8e:0b:83:9a:
e0:ac:2a:33:b0:6e:a4:7d:2d:68:11:ba:5f:6b:ec:5a:7a:25:
46:75:81:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICT+YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNjU4MjBaFw0yNDExMTIwNjU4MjBaMBgxFjAU
BgNVBAMTDTY1NTMxYTkwLTM0OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2M0Ti4E6Uj4HryMwGpMz63GpFmBdwNspseyJ4GAQjKZO2qJzc5HT9QjKV
cM7bTHZNQDJLypsqNT3M57+YcV8p948Z/78omK5bCMKCGok42p9m1udu1HBS3WZt
2O2LVk3XWeS5RNrLcGxpj0FvgcIOpFgKzxDi51cKOd03mELjAfmOnRPE+ywghomf
vkRnj8oQeL4VX5T0EfBSKBZqsLKCBAXZZ2pYZoH+pRD62BN5ZxgfGLuRGmv39tly
a14SUQ2NldCmg8LMIKe9hvL3+bugMS0ICpSEPCWEBZmUYERJn+ocamwyhEJTOfPo
e0oVl1B4UPm9aVMBPt3fytX8vg4tAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiiXg
YgXs3d29VBdP1Kb6ZtY5dMkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzMzRTZEOTU2ODJCQjExRUVCOEE2MzgzMzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaynMwDQYJKoZIhvcNAQEL
BQADggEBAGIqTuSU8X/nmVuVuBb1AvV0/xr+gKDj6tZsWMFgiF2krvJnOxzl4Xxq
cUiJRZUmudnpZPRa+RFjOL9bO2LnJGNsYCei1lOyO5H9eycV8y/nrcP98GB04Wxm
MkST+5Moxvq/y4IMv2m9/V0GUU8fGNaHOEhEQsOhtgMWZYoi3c99vlYhxoFfPgAT
ot9/yRDfHdtGBxn3M3nNBUvny+VhX/qf4DcT7IGje1/X/8agkAo9J6+QIoZBhj0C
icPgg2JqPgMbd8Qox/imR7WbH/7uxGkWyZNoyspzLmpgV84sSlWtm4KXG1g9jguD
muCsKjOwbqR9LWgRul9r7Fp6JUZ1gd8=
-----END CERTIFICATE-----
Generated at Fri May 3 01:29:52 2024 by rpki-client on console-fra.rpki-client.org