Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/407A0BB010DE11EE9BD9D42E4AD9E6FC.roa
File: 407A0BB010DE11EE9BD9D42E4AD9E6FC.roa (raw, json)
Hash identifier: k+iHGeZ9bU+svpOHnmpeQTAk3Haik92D7Z6Q7OEH/1A=
Subject key identifier: 3D:B3:92:E3:11:2A:E6:39:73:DD:0E:6B:2C:B9:BB:06:DD:A9:AB:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/407A0BB010DE11EE9BD9D42E4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:22:05 +0000
ROA not before: Thu 22 Jun 2023 09:22:01 +0000
ROA not after: Fri 05 Jul 2024 09:22:01 +0000
asID: 146993
IP address blocks: 154.203.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11648 (0x2d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:22:01 2023 GMT
Not After : Jul 5 09:22:01 2024 GMT
Subject: CN=649412bc-53ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:01:52:c8:17:e7:12:99:c4:ce:be:5c:10:
81:aa:d2:4c:91:54:53:ad:6f:6a:b8:76:25:6c:c3:
ea:5b:53:f4:67:20:d0:e2:07:a6:b2:65:b7:c2:74:
39:e2:b4:a6:44:7c:0e:ec:80:89:36:0b:07:5f:7b:
21:b1:91:bd:59:4e:4c:ca:af:2c:64:8c:d3:e1:c5:
6b:ff:ba:a7:96:1a:49:b7:89:44:92:f2:a9:cd:b0:
9b:aa:2f:b8:86:0e:58:62:4b:d1:59:b7:c8:6b:90:
57:8c:c4:9b:07:29:40:7f:56:a8:ef:07:26:5b:c7:
f1:85:61:5d:4d:fe:e5:97:6d:77:ba:27:e6:a5:1b:
51:2a:18:51:91:4e:2d:4b:de:db:dc:d2:04:ec:12:
5c:bd:3f:98:6e:93:11:66:ad:ff:8d:df:22:81:0e:
34:ed:27:d2:af:b8:e5:83:6a:3c:47:29:cf:4c:b7:
1e:48:85:d9:9b:94:7a:0b:88:a1:28:c9:20:2d:cf:
75:af:d3:e4:74:65:13:cd:4f:17:09:3a:cb:38:2b:
9e:2d:91:fe:cf:80:ce:a4:77:47:9e:86:05:99:a0:
a3:93:e6:37:d3:89:9b:79:75:75:fb:bc:62:dd:06:
6b:4c:3b:e9:5e:74:55:16:a5:65:e3:4b:84:21:24:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:92:E3:11:2A:E6:39:73:DD:0E:6B:2C:B9:BB:06:DD:A9:AB:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/407A0BB010DE11EE9BD9D42E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.26.0/24
Signature Algorithm: sha256WithRSAEncryption
87:64:99:ee:6e:86:c6:9f:d5:a0:ca:c2:11:82:83:a9:5f:0a:
2f:d2:fc:8e:f0:51:29:f0:1c:0a:29:b8:9c:fa:ce:8e:c4:77:
b5:78:3f:dd:85:61:09:a6:6b:02:6d:08:5c:8f:f6:51:22:b1:
b6:b1:14:8a:6b:ba:32:46:4f:0c:ae:0b:71:a8:08:ca:4d:cf:
e3:98:2a:44:de:9f:53:b7:da:91:6d:cb:e2:a2:93:a3:09:a0:
42:1d:3c:45:31:a8:55:a5:3e:64:fe:a6:95:3d:c6:68:41:be:
e8:12:48:7c:bd:16:1a:38:aa:1c:34:20:4f:50:0e:8f:06:80:
ee:37:b6:21:ed:dc:cb:33:5a:92:42:92:95:ed:76:24:bd:89:
f5:f8:27:1e:37:95:03:fa:12:0b:8b:84:89:d8:cf:2f:91:09:
f2:05:e8:d0:69:57:66:66:c5:22:3d:3f:ee:91:9a:2c:2d:dc:
58:7b:d7:8a:86:70:1e:f3:41:d0:b2:9f:73:d8:07:21:c2:fd:
aa:93:a3:b5:13:3e:24:d7:15:fc:7b:58:6e:66:4b:78:d4:e3:
b5:e7:58:a8:18:ce:08:28:ee:46:9f:4b:1e:4e:18:0a:fd:16:
56:fc:56:74:d4:22:49:5e:7e:e4:3f:c5:73:0f:df:ed:f5:6b:
f8:92:ea:40
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLYAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjIwOTIyMDFaFw0yNDA3MDUwOTIyMDFaMBgxFjAU
BgNVBAMTDTY0OTQxMmJjLTUzYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQvgFSyBfnEpnEzr5cEIGq0kyRVFOtb2q4diVsw+pbU/RnINDiB6ayZbfC
dDnitKZEfA7sgIk2CwdfeyGxkb1ZTkzKryxkjNPhxWv/uqeWGkm3iUSS8qnNsJuq
L7iGDlhiS9FZt8hrkFeMxJsHKUB/VqjvByZbx/GFYV1N/uWXbXe6J+alG1EqGFGR
Ti1L3tvc0gTsEly9P5hukxFmrf+N3yKBDjTtJ9KvuOWDajxHKc9Mtx5IhdmblHoL
iKEoySAtz3Wv0+R0ZRPNTxcJOss4K54tkf7PgM6kd0eehgWZoKOT5jfTiZt5dXX7
vGLdBmtMO+ledFUWpWXjS4QhJMCXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPbOS
4xEq5jlz3Q5rLLm7Bt2pqxUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQwN0EwQkIwMTBERTExRUU5QkQ5RDQyRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayxowDQYJKoZIhvcNAQEL
BQADggEBAIdkme5uhsaf1aDKwhGCg6lfCi/S/I7wUSnwHAopuJz6zo7Ed7V4P92F
YQmmawJtCFyP9lEisbaxFIprujJGTwyuC3GoCMpNz+OYKkTen1O32pFty+Kik6MJ
oEIdPEUxqFWlPmT+ppU9xmhBvugSSHy9Fho4qhw0IE9QDo8GgO43tiHt3MszWpJC
kpXtdiS9ifX4Jx43lQP6EguLhInYzy+RCfIF6NBpV2ZmxSI9P+6Rmiwt3Fh714qG
cB7zQdCyn3PYByHC/aqTo7UTPiTXFfx7WG5mS3jU47XnWKgYzggo7kafSx5OGAr9
Flb8VnTUIklefuQ/xXMP3+31a/iS6kA=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org