Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35F9D804FBAD11EEBE17502C017001B1.roa
File: 35F9D804FBAD11EEBE17502C017001B1.roa (raw, json)
Hash identifier: 5FGJJ7HaA3VPY2xfM/XcmoiudVyaVmWw8WrlIaOV4PY=
Subject key identifier: 55:BC:40:6F:3F:52:C1:7E:00:CF:C8:9F:C6:BF:D2:00:9B:14:1D:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35F9D804FBAD11EEBE17502C017001B1.roa
Signing time: Tue 16 Apr 2024 04:53:05 +0000
ROA not before: Tue 16 Apr 2024 04:53:02 +0000
ROA not after: Thu 30 May 2024 04:53:02 +0000
asID: 63139
IP address blocks: 154.94.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44487 (0xadc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:53:02 2024 GMT
Not After : May 30 04:53:02 2024 GMT
Subject: CN=661e0431-78b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:13:60:71:e5:d7:08:fc:ce:e2:44:a6:ee:
1a:93:4c:90:4b:d6:a0:4c:20:60:1f:f1:30:5b:16:
36:46:b2:a3:0a:89:60:f5:97:16:e5:06:64:2f:5b:
d4:14:bf:1f:7a:88:3d:76:d3:43:70:d2:c8:6c:ae:
9b:91:7e:fc:2a:8a:af:5f:0f:20:5c:59:77:2d:d9:
b1:c2:63:99:7f:ec:13:46:e2:80:90:71:44:61:e7:
94:9d:b9:ad:43:29:69:78:66:13:44:a5:57:7d:7c:
9e:9e:8d:d7:07:9b:8f:bc:dd:94:48:17:43:1d:6d:
1e:1b:12:aa:7f:dc:e9:46:98:1c:80:41:c9:6d:47:
dd:9e:93:cc:03:56:ca:e3:72:d0:12:cd:e1:f8:ac:
1a:86:89:c9:30:c6:c3:bf:12:ac:24:76:41:5c:31:
8e:47:d3:1e:06:7a:c6:69:6f:3e:9f:54:03:57:39:
80:f9:80:84:92:19:d3:f0:68:0e:07:a3:95:dd:c5:
43:36:d1:fa:f2:f7:64:9c:01:15:8c:19:ef:5b:dd:
74:9a:05:42:c1:ac:a5:2c:bb:f5:04:c8:a7:39:91:
a6:e4:5e:19:22:70:d7:98:fa:b8:73:fb:98:a8:af:
4d:8d:87:cb:8a:73:4c:c1:e9:c7:b3:4f:bb:3b:78:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BC:40:6F:3F:52:C1:7E:00:CF:C8:9F:C6:BF:D2:00:9B:14:1D:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35F9D804FBAD11EEBE17502C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.100.0/24
Signature Algorithm: sha256WithRSAEncryption
19:eb:08:1f:1d:0a:30:f3:3b:7e:10:95:0b:53:61:49:5c:5d:
2b:35:1b:c3:35:92:c0:42:15:32:09:1a:9a:ae:4e:9b:cf:ea:
f1:90:18:2d:51:37:d5:3a:9d:c2:ef:c8:f0:1b:c8:46:1b:90:
19:c2:9c:3d:86:3f:fd:5e:ef:9c:19:f5:87:63:a0:d5:10:67:
31:3c:27:cf:ac:f2:72:e9:fa:71:10:3d:47:18:53:99:4d:4b:
ef:02:ab:d5:f5:d4:6d:87:71:88:85:a6:20:2f:04:07:d4:0e:
0b:61:9d:07:5c:37:b7:f0:24:dd:44:0c:7d:b2:d2:02:98:50:
dd:7f:16:ac:cb:e8:0a:6c:ac:43:60:20:94:b1:23:6a:3d:49:
24:98:c4:f1:bb:3c:2c:e3:b7:5e:8a:ea:54:76:21:45:14:a6:
d6:3a:80:54:f5:65:45:13:1c:0f:68:4f:3f:9e:27:c7:f8:64:
80:32:4d:0b:7d:ac:49:7e:c7:4d:7c:6e:bb:46:3b:a1:fd:75:
7e:4a:9e:72:3d:a6:dd:a0:ef:25:47:1e:59:9e:c0:80:ce:47:
47:72:18:2a:ac:b4:65:88:34:23:f8:a3:22:ba:b1:2d:0f:eb:
92:29:f4:7c:87:61:bc:eb:4b:9f:40:45:82:6a:fc:2a:57:68:
0c:07:9e:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK3HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDQ1MzAyWhcNMjQwNTMwMDQ1MzAyWjAYMRYw
FAYDVQQDEw02NjFlMDQzMS03OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5ncTYHHl1wj8zuJEpu4ak0yQS9agTCBgH/EwWxY2RrKjColg9ZcW5QZk
L1vUFL8feog9dtNDcNLIbK6bkX78KoqvXw8gXFl3LdmxwmOZf+wTRuKAkHFEYeeU
nbmtQylpeGYTRKVXfXyeno3XB5uPvN2USBdDHW0eGxKqf9zpRpgcgEHJbUfdnpPM
A1bK43LQEs3h+KwahonJMMbDvxKsJHZBXDGOR9MeBnrGaW8+n1QDVzmA+YCEkhnT
8GgOB6OV3cVDNtH68vdknAEVjBnvW910mgVCwaylLLv1BMinOZGm5F4ZInDXmPq4
c/uYqK9NjYfLinNMwenHs0+7O3jcTwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFW8
QG8/UsF+AM/In8a/0gCbFB1tMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNUY5RDgwNEZCQUQxMUVFQkUxNzUwMkMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5kMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ6wgfHQow8zt+EJULU2FJXF0rNRvDNZLAQhUyCRqark6bz+rxkBgt
UTfVOp3C78jwG8hGG5AZwpw9hj/9Xu+cGfWHY6DVEGcxPCfPrPJy6fpxED1HGFOZ
TUvvAqvV9dRth3GIhaYgLwQH1A4LYZ0HXDe38CTdRAx9stICmFDdfxasy+gKbKxD
YCCUsSNqPUkkmMTxuzws47deiupUdiFFFKbWOoBU9WVFExwPaE8/nifH+GSAMk0L
faxJfsdNfG67Rjuh/XV+Sp5yPabdoO8lRx5ZnsCAzkdHchgqrLRliDQj+KMiurEt
D+uSKfR8h2G860ufQEWCavwqV2gMB55/
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:06 2024 by rpki-client on console-ams.rpki-client.org