Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DA180C6B44411EE8B3C72AF775412E6.roa
File: 3DA180C6B44411EE8B3C72AF775412E6.roa (raw, json)
Hash identifier: 0z57dE9D7+pwK+iBZkWWTyuouyVtpJRR2IPhFrI7zmU=
Subject key identifier: AE:25:93:93:CA:30:06:A1:37:C9:7A:5F:96:7F:BC:DF:DA:5F:96:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 75A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DA180C6B44411EE8B3C72AF775412E6.roa
Signing time: Tue 16 Jan 2024 07:52:48 +0000
ROA not before: Tue 16 Jan 2024 07:52:45 +0000
ROA not after: Tue 14 Jan 2025 07:52:45 +0000
asID: 138456
IP address blocks: 154.211.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30116 (0x75a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 07:52:45 2024 GMT
Not After : Jan 14 07:52:45 2025 GMT
Subject: CN=65a635d0-4175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:82:39:8c:64:ef:3e:48:fa:db:31:e0:aa:
3d:ed:85:a7:ce:5c:9e:ee:24:ff:85:f7:72:a8:48:
5f:ec:fe:0f:8c:a7:6f:d3:6d:24:22:fb:af:b9:24:
30:20:e1:bb:93:fd:ad:4b:c5:8b:ac:a1:62:1e:a3:
8d:fb:98:e4:71:a5:32:63:a8:09:58:25:ae:bb:aa:
57:bc:16:c8:db:9c:05:9f:1a:1b:a4:ce:c2:c5:99:
9a:2b:b7:4a:32:f1:fd:c6:66:5b:38:16:7b:89:18:
55:2d:1c:7b:ea:cc:57:0e:2c:07:55:ee:54:57:d3:
69:a6:a2:3c:e7:1c:5e:63:eb:93:e8:c5:4f:0f:4d:
4b:5c:88:ad:4d:91:72:36:1e:c1:6d:8b:13:a2:1a:
ba:4b:e2:9b:92:9f:46:5e:39:9f:bb:f6:17:55:29:
bc:c4:69:a2:79:a6:1a:25:0d:44:b8:7b:f0:0e:13:
18:a5:b6:a3:32:2d:79:c1:d0:8f:7e:9f:7c:44:6e:
27:ae:ec:9d:95:dc:a9:fa:75:75:85:9c:9b:0e:b3:
9b:6b:6d:98:60:cf:ee:3d:26:25:b3:92:a3:71:ea:
a8:dc:f2:4a:71:ae:9b:9c:7b:a5:ac:72:8c:d9:7c:
a5:ed:49:77:0e:cd:90:b4:b1:76:a7:ec:09:1e:cd:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:93:93:CA:30:06:A1:37:C9:7A:5F:96:7F:BC:DF:DA:5F:96:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DA180C6B44411EE8B3C72AF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.3.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:cb:e3:95:e7:d3:60:af:70:94:1d:fe:9e:10:25:37:f9:f9:
b1:46:14:92:19:17:f3:9c:a7:5b:29:2f:27:78:cd:6a:af:e4:
c6:a6:df:03:9f:13:30:3d:ad:98:d4:50:e5:f1:7e:36:56:88:
3a:86:dd:b5:19:d3:c7:81:b5:51:5b:c1:04:31:bb:df:73:1b:
93:d9:00:59:03:79:7b:17:0c:e5:e6:8b:d0:30:0b:92:73:0f:
53:1e:b4:6c:b5:37:9c:b9:9c:b5:31:f1:b2:dc:ca:81:45:ac:
ee:5c:6a:2b:8f:73:ae:13:ea:fc:e4:d1:98:67:d8:a5:08:68:
33:20:22:60:75:9b:e3:67:5f:88:21:c7:1f:b1:00:cb:8a:2b:
1a:b8:da:7d:fb:37:6f:61:17:38:66:b6:2a:57:5e:2d:8c:be:
0a:33:15:41:e9:e0:93:1f:71:eb:4a:df:55:ba:f2:59:00:1f:
c5:e2:c1:2c:7f:70:27:74:84:de:4f:d7:99:b5:3f:ac:01:46:
44:8a:26:3b:62:8f:c8:f4:30:10:e0:29:24:78:2b:5a:59:9b:
65:b4:7c:08:87:32:10:b8:9e:41:9a:42:1e:7a:eb:2f:fa:2c:
60:1c:c7:29:09:ef:f6:9c:c2:0c:f7:d8:9c:a6:6e:85:ee:e2:
63:af:5c:38
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdaQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTYwNzUyNDVaFw0yNTAxMTQwNzUyNDVaMBgxFjAU
BgNVBAMTDTY1YTYzNWQwLTQxNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpL4I5jGTvPkj62zHgqj3thafOXJ7uJP+F93KoSF/s/g+Mp2/TbSQi+6+5
JDAg4buT/a1LxYusoWIeo437mORxpTJjqAlYJa67qle8FsjbnAWfGhukzsLFmZor
t0oy8f3GZls4FnuJGFUtHHvqzFcOLAdV7lRX02mmojznHF5j65PoxU8PTUtciK1N
kXI2HsFtixOiGrpL4puSn0ZeOZ+79hdVKbzEaaJ5pholDUS4e/AOExiltqMyLXnB
0I9+n3xEbieu7J2V3Kn6dXWFnJsOs5trbZhgz+49JiWzkqNx6qjc8kpxrpuce6Ws
cozZfKXtSXcOzZC0sXan7Akezb29AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUriWT
k8owBqE3yXpfln+839pflpAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzNEQTE4MEM2QjQ0NDExRUU4QjNDNzJBRjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0wMwDQYJKoZIhvcNAQEL
BQADggEBANfL45Xn02CvcJQd/p4QJTf5+bFGFJIZF/Ocp1spLyd4zWqv5Mam3wOf
EzA9rZjUUOXxfjZWiDqG3bUZ08eBtVFbwQQxu99zG5PZAFkDeXsXDOXmi9AwC5Jz
D1MetGy1N5y5nLUx8bLcyoFFrO5caiuPc64T6vzk0Zhn2KUIaDMgImB1m+NnX4gh
xx+xAMuKKxq42n37N29hFzhmtipXXi2MvgozFUHp4JMfcetK31W68lkAH8XiwSx/
cCd0hN5P15m1P6wBRkSKJjtij8j0MBDgKSR4K1pZm2W0fAiHMhC4nkGaQh566y/6
LGAcxykJ7/acwgz32JymboXu4mOvXDg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:01 2024 by rpki-client on console-ams.rpki-client.org