Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440547DEFE9811ED87AB0C4D4AD9E6FC.roa
File: 440547DEFE9811ED87AB0C4D4AD9E6FC.roa (raw, json)
Hash identifier: F9wQRQ2Rv9HmiQ3BbvkVJVWBs8PiTOTPEZyMSxvkqgY=
Subject key identifier: 49:A3:9D:63:2A:D3:9D:44:E2:00:4C:C6:CF:75:C7:B7:D0:96:C9:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2846
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440547DEFE9811ED87AB0C4D4AD9E6FC.roa
Signing time: Tue 30 May 2023 03:15:45 +0000
ROA not before: Tue 30 May 2023 03:15:41 +0000
ROA not after: Wed 15 May 2024 03:15:41 +0000
asID: 63888
IP address blocks: 154.207.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10310 (0x2846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 03:15:41 2023 GMT
Not After : May 15 03:15:41 2024 GMT
Subject: CN=64756a61-59b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:93:5a:8a:fe:55:9a:c6:31:d5:5b:b4:89:
ff:82:86:4e:8b:92:ee:b8:24:ce:24:6b:5f:b5:36:
de:58:8a:e5:de:f3:f7:ee:9f:a1:13:ae:1a:85:1a:
58:31:d9:dc:09:cb:1f:f7:cb:4c:5d:ad:09:3c:ba:
ae:76:20:06:bf:06:94:d1:16:93:ce:39:3f:00:b4:
18:78:1b:76:53:90:25:7e:c8:db:aa:c5:b6:5f:db:
3b:e1:28:5e:a8:d2:8e:16:d7:29:11:de:12:8b:ab:
fa:44:d3:65:44:e4:a9:fa:dc:7e:76:50:82:1c:9f:
ee:c1:6c:0a:d2:0b:b4:9d:bb:4b:50:f9:45:1d:d1:
fa:06:a2:49:0d:2e:66:43:24:3a:7e:6e:14:eb:3b:
68:28:a6:a3:48:e9:04:26:3e:bd:7d:83:d5:bc:b8:
71:66:62:2d:d2:e2:40:ea:a0:b9:e0:c1:a1:1c:64:
e1:61:a0:85:bc:b9:b1:c4:e3:e1:f8:79:c6:a3:ab:
4c:58:7a:19:16:c1:2f:64:f9:27:86:3b:53:d4:d7:
d4:43:b8:43:01:eb:4d:95:d5:88:21:52:36:bf:08:
e6:6e:ae:6c:38:f5:5e:f1:32:d3:bc:99:b0:f2:f0:
b1:5a:df:58:ae:fd:07:34:bb:ee:33:69:c5:22:f2:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:9D:63:2A:D3:9D:44:E2:00:4C:C6:CF:75:C7:B7:D0:96:C9:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440547DEFE9811ED87AB0C4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.88.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fe:53:f7:85:22:19:4f:8f:13:25:8f:a6:92:19:36:e2:fe:
85:5b:87:94:ba:8f:c6:fd:f6:15:47:c6:75:d5:1b:b4:2f:6b:
16:69:fe:44:d7:c4:86:7a:cb:c1:14:19:28:36:fd:a5:d1:cc:
61:71:a0:08:51:df:38:83:50:68:55:f1:6f:90:e3:50:d4:b2:
6e:68:58:73:af:82:69:ea:ab:f7:c6:35:26:ee:d9:e8:3f:08:
9b:65:51:6d:60:89:80:b4:15:ce:11:b4:6d:f3:3e:f3:f5:b4:
73:a5:9d:f8:5c:ba:62:75:67:04:4e:9b:e1:30:9d:b3:1f:34:
3e:f6:a2:bc:4a:df:e0:71:47:6e:ff:ae:38:e1:ae:09:eb:95:
ef:63:5a:c0:f2:53:9a:40:5e:a0:5f:56:f6:5a:23:63:81:6b:
dc:ed:3a:1f:16:ac:6f:c1:9d:01:ac:38:8e:75:3b:10:1e:74:
35:c9:c6:b1:3f:fa:51:d3:52:2d:e6:eb:b8:65:f8:d3:95:42:
a7:83:43:ab:c8:6c:ca:60:a9:3a:b8:55:b6:0b:44:90:08:2d:
c3:32:23:e2:75:68:86:48:28:fb:39:9b:fb:dc:3e:b5:fe:92:
a3:75:d5:70:2c:de:bd:57:13:b6:cc:c2:d9:21:a3:af:4d:c2:
ae:e6:bc:e6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICKEYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA1MzAwMzE1NDFaFw0yNDA1MTUwMzE1NDFaMBgxFjAU
BgNVBAMTDTY0NzU2YTYxLTU5YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCai5Naiv5VmsYx1Vu0if+Chk6Lku64JM4ka1+1Nt5YiuXe8/fun6ETrhqF
Glgx2dwJyx/3y0xdrQk8uq52IAa/BpTRFpPOOT8AtBh4G3ZTkCV+yNuqxbZf2zvh
KF6o0o4W1ykR3hKLq/pE02VE5Kn63H52UIIcn+7BbArSC7Sdu0tQ+UUd0foGokkN
LmZDJDp+bhTrO2gopqNI6QQmPr19g9W8uHFmYi3S4kDqoLngwaEcZOFhoIW8ubHE
4+H4ecajq0xYehkWwS9k+SeGO1PU19RDuEMB602V1YghUja/COZurmw49V7xMtO8
mbDy8LFa31iu/Qc0u+4zacUi8rvXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSaOd
YyrTnUTiAEzGz3XHt9CWyWMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ0MDU0N0RFRkU5ODExRUQ4N0FCMEM0RDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaz1gwDQYJKoZIhvcNAQEL
BQADggEBAHD+U/eFIhlPjxMlj6aSGTbi/oVbh5S6j8b99hVHxnXVG7QvaxZp/kTX
xIZ6y8EUGSg2/aXRzGFxoAhR3ziDUGhV8W+Q41DUsm5oWHOvgmnqq/fGNSbu2eg/
CJtlUW1giYC0Fc4RtG3zPvP1tHOlnfhcumJ1ZwROm+EwnbMfND72orxK3+BxR27/
rjjhrgnrle9jWsDyU5pAXqBfVvZaI2OBa9ztOh8WrG/BnQGsOI51OxAedDXJxrE/
+lHTUi3m67hl+NOVQqeDQ6vIbMpgqTq4VbYLRJAILcMyI+J1aIZIKPs5m/vcPrX+
kqN11XAs3r1XE7bMwtkho69Nwq7mvOY=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org