Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3930972AAE1D11EEAE3CDD9D775412E6.roa
File: 3930972AAE1D11EEAE3CDD9D775412E6.roa (raw, json)
Hash identifier: IrFRHjaHBW1FnwmkSpcr+hsnozW3Lv3/OV9w06uqlNc=
Subject key identifier: 49:42:B5:84:B7:DC:DF:A3:E5:40:E7:3E:32:E6:C8:79:CE:2D:88:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3930972AAE1D11EEAE3CDD9D775412E6.roa
Signing time: Mon 08 Jan 2024 11:58:23 +0000
ROA not before: Mon 08 Jan 2024 11:58:20 +0000
ROA not after: Tue 14 Jan 2025 11:58:20 +0000
asID: 138965
IP address blocks: 154.222.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29368 (0x72b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 11:58:20 2024 GMT
Not After : Jan 14 11:58:20 2025 GMT
Subject: CN=659be35f-7f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:a0:24:03:f0:d9:a1:aa:18:e8:b4:13:f6:
04:6c:4b:91:c8:b1:0f:de:ab:29:57:c4:3c:81:d0:
38:56:91:79:5c:e1:b1:95:a7:97:72:e8:cf:2f:1d:
69:a3:f4:37:1d:04:2f:fe:da:5d:21:91:45:2e:88:
c7:d6:8a:38:ce:fb:4b:33:17:7e:e5:05:5a:8a:bd:
8e:c3:96:64:9d:a7:35:b2:33:1e:9d:91:13:6d:8e:
c1:8b:ed:f7:0d:15:bf:6e:0d:38:e6:6f:0d:52:84:
5e:da:f8:5a:36:88:2f:9f:01:b5:22:a4:a3:05:d2:
78:16:c3:eb:1c:f8:03:63:b6:41:08:fb:bf:4e:d5:
75:50:48:49:7f:64:2c:c2:aa:2a:00:be:f7:d2:f6:
ad:74:23:58:85:21:d1:e2:ea:d5:a9:76:94:85:c6:
27:04:00:10:cf:54:be:80:ee:da:d5:c9:22:a4:fc:
90:0c:46:2d:3e:f1:64:ae:cb:c7:6e:cd:22:85:c5:
f9:43:32:90:b5:e7:22:3a:30:b6:2f:a8:cf:23:45:
4d:0c:cd:3c:0f:ef:b9:2d:12:12:44:dd:50:0e:68:
e6:41:5e:6a:7a:5f:ca:3e:d1:39:6d:4a:02:fb:3f:
05:eb:a1:2b:91:51:3e:55:7f:4d:5c:bd:9c:31:d9:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:B5:84:B7:DC:DF:A3:E5:40:E7:3E:32:E6:C8:79:CE:2D:88:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3930972AAE1D11EEAE3CDD9D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.63.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0a:ca:ac:1c:53:89:78:c3:a7:5f:f8:01:ca:14:1a:36:b0:
44:5c:aa:ae:d6:32:88:15:f8:24:1d:0d:87:43:13:e7:a3:37:
b1:17:e5:88:e5:00:b4:d7:3f:97:2d:49:f0:88:5f:ab:60:ed:
a9:6b:e3:b0:d9:5b:e7:36:13:30:49:76:39:48:94:6a:53:fd:
d5:d5:f5:40:ea:34:60:06:88:d2:9b:8e:a5:88:64:3c:06:b6:
67:70:a9:33:99:b5:23:6b:bc:c3:38:9a:88:ed:75:a5:6d:25:
12:d8:24:64:ce:f0:4b:40:26:59:18:12:45:bf:0a:d2:0d:7a:
dc:20:b5:82:81:a4:fd:0b:f5:03:45:c0:2a:e7:fa:ae:15:3e:
02:99:13:4b:fa:0d:de:09:52:ef:32:93:82:b1:3f:3f:fc:07:
bc:05:dc:39:84:1f:92:68:ac:0c:c3:0c:98:19:77:a8:bd:70:
81:52:6d:6f:6f:b1:b2:83:05:f2:55:03:20:cb:1f:5a:64:62:
ee:de:ab:bd:1e:58:69:9a:e4:f9:68:15:d1:da:b2:9f:7c:d9:
cc:36:d4:02:bc:ed:b7:01:6c:99:7b:10:9f:38:49:c5:a1:6b:
9b:a3:67:0b:c1:b5:e6:7e:a0:9e:5a:82:78:e3:1e:cf:db:0b:
61:6d:47:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICcrgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMDgxMTU4MjBaFw0yNTAxMTQxMTU4MjBaMBgxFjAU
BgNVBAMTDTY1OWJlMzVmLTdmMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDisKAkA/DZoaoY6LQT9gRsS5HIsQ/eqylXxDyB0DhWkXlc4bGVp5dy6M8v
HWmj9DcdBC/+2l0hkUUuiMfWijjO+0szF37lBVqKvY7DlmSdpzWyMx6dkRNtjsGL
7fcNFb9uDTjmbw1ShF7a+Fo2iC+fAbUipKMF0ngWw+sc+ANjtkEI+79O1XVQSEl/
ZCzCqioAvvfS9q10I1iFIdHi6tWpdpSFxicEABDPVL6A7trVySKk/JAMRi0+8WSu
y8duzSKFxflDMpC15yI6MLYvqM8jRU0MzTwP77ktEhJE3VAOaOZBXmp6X8o+0Tlt
SgL7PwXroSuRUT5Vf01cvZwx2QZDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSUK1
hLfc36PlQOc+MubIec4tiKwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzM5MzA5NzJBQUUxRDExRUVBRTNDREQ5RDc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3j8wDQYJKoZIhvcNAQEL
BQADggEBAK8KyqwcU4l4w6df+AHKFBo2sERcqq7WMogV+CQdDYdDE+ejN7EX5Yjl
ALTXP5ctSfCIX6tg7alr47DZW+c2EzBJdjlIlGpT/dXV9UDqNGAGiNKbjqWIZDwG
tmdwqTOZtSNrvMM4mojtdaVtJRLYJGTO8EtAJlkYEkW/CtINetwgtYKBpP0L9QNF
wCrn+q4VPgKZE0v6Dd4JUu8yk4KxPz/8B7wF3DmEH5JorAzDDJgZd6i9cIFSbW9v
sbKDBfJVAyDLH1pkYu7eq70eWGma5PloFdHasp982cw21AK87bcBbJl7EJ84ScWh
a5ujZwvBteZ+oJ5agnjjHs/bC2FtR4c=
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:17 2024 by rpki-client on console-ams.rpki-client.org