Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/459CB06EE74A11EEAA809162775412E6.roa
File: 459CB06EE74A11EEAA809162775412E6.roa (raw, json)
Hash identifier: QKQeq2B6aDYpY+CcaWssGCuf2LFiLx0VCXsbDk0MyOE=
Subject key identifier: 12:96:54:F5:D2:EE:85:28:2B:5A:0E:54:A3:91:E3:1F:AE:BB:84:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A42D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/459CB06EE74A11EEAA809162775412E6.roa
Signing time: Thu 21 Mar 2024 06:14:28 +0000
ROA not before: Thu 21 Mar 2024 06:14:24 +0000
ROA not after: Tue 23 Apr 2024 06:14:24 +0000
asID: 44559
IP address blocks: 154.220.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42029 (0xa42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:14:24 2024 GMT
Not After : Apr 23 06:14:24 2024 GMT
Subject: CN=65fbd044-b335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:c2:a0:13:17:63:3b:d0:a7:4e:83:26:66:
59:40:7d:93:e5:0e:58:a0:6d:9e:3b:91:ce:45:da:
27:4e:3a:6d:c3:4b:20:92:ce:56:f4:32:69:42:24:
89:dc:a1:47:39:71:16:32:9b:2c:2c:71:3a:a6:17:
ce:6b:a3:c0:66:af:d3:38:f4:39:0c:b0:60:78:66:
cb:f9:ca:ae:c0:80:82:90:ca:58:9a:d8:ad:4a:7e:
0f:34:f4:c3:53:b8:8d:31:0d:28:7e:00:1f:12:fc:
f4:27:91:73:a6:fb:a0:c9:86:db:bd:27:a2:1c:16:
f3:2f:7c:34:4d:24:d9:1f:92:85:dd:57:48:e1:dd:
55:a5:3f:5b:a1:4b:ac:c9:6e:ab:1b:88:b9:61:2a:
71:61:26:52:77:03:38:cc:a5:d6:f8:7f:8c:1e:a6:
b2:c0:2b:e2:e5:86:f4:2c:2f:73:4f:9f:f5:a4:69:
d4:c0:b9:16:b9:12:8f:20:1e:c8:9d:02:bd:79:03:
31:6c:57:c4:1c:ef:15:2e:9a:d0:72:c0:b4:1a:11:
0f:29:80:3c:14:9a:c3:79:73:d1:3b:a1:6e:06:57:
97:5c:c6:34:f0:a0:6b:25:8f:94:3c:51:da:d8:81:
c9:57:21:c0:1e:10:7f:d8:58:79:3e:8e:19:c7:bf:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:96:54:F5:D2:EE:85:28:2B:5A:0E:54:A3:91:E3:1F:AE:BB:84:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/459CB06EE74A11EEAA809162775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5d:a8:d4:d1:a8:cb:b8:88:f0:af:06:74:42:a3:31:d4:7a:
a1:13:03:66:3f:d0:a6:b2:ce:ed:35:74:ca:24:50:80:33:84:
35:81:a4:2f:c2:f1:86:8b:75:9f:b7:18:db:4a:e4:e6:7c:bf:
c8:df:32:65:8e:7d:0a:f3:a5:a1:4f:95:6b:47:cd:1c:0d:3d:
64:ed:b4:ee:7a:3c:6e:85:b6:58:3e:15:73:aa:0d:d7:d3:f1:
7f:c4:af:96:80:44:bf:62:9f:dd:2d:16:4a:ce:30:52:a7:d1:
7b:b7:c6:c8:d6:43:67:02:fa:66:34:83:a7:5d:41:4b:c9:3d:
a0:9f:b4:19:94:77:0d:79:33:e2:ed:94:91:2b:99:60:4d:61:
da:9e:e2:9a:45:1f:3e:30:c8:bf:43:22:de:cd:1d:57:de:36:
60:c7:f7:68:05:a4:ef:e3:c5:86:cc:a7:19:1e:8f:88:9b:1f:
60:09:1b:8a:5d:81:11:63:06:0b:cb:2b:99:fc:18:48:01:c3:
1c:53:0c:66:ca:8d:b4:a7:78:d5:e0:0b:a8:84:3a:c9:d4:dc:
7d:c5:3a:a7:56:6c:f0:73:b8:4a:1b:d1:59:49:0f:9d:d2:c9:
5d:b4:09:96:46:bf:09:7c:c8:ea:90:5c:8c:61:5c:63:ba:2e:
3b:73:f9:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKQtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDYxNDI0WhcNMjQwNDIzMDYxNDI0WjAYMRYw
FAYDVQQDEw02NWZiZDA0NC1iMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw8/CoBMXYzvQp06DJmZZQH2T5Q5YoG2eO5HORdonTjptw0sgks5W9DJp
QiSJ3KFHOXEWMpssLHE6phfOa6PAZq/TOPQ5DLBgeGbL+cquwICCkMpYmtitSn4P
NPTDU7iNMQ0ofgAfEvz0J5FzpvugyYbbvSeiHBbzL3w0TSTZH5KF3VdI4d1VpT9b
oUusyW6rG4i5YSpxYSZSdwM4zKXW+H+MHqaywCvi5Yb0LC9zT5/1pGnUwLkWuRKP
IB7InQK9eQMxbFfEHO8VLprQcsC0GhEPKYA8FJrDeXPRO6FuBleXXMY08KBrJY+U
PFHa2IHJVyHAHhB/2Fh5Po4Zx79QbQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBKW
VPXS7oUoK1oOVKOR4x+uu4TKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NTlDQjA2RUU3NEExMUVFQUE4MDkxNjI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtyiMA0GCSqGSIb3DQEB
CwUAA4IBAQA+XajU0ajLuIjwrwZ0QqMx1HqhEwNmP9Cmss7tNXTKJFCAM4Q1gaQv
wvGGi3WftxjbSuTmfL/I3zJljn0K86WhT5VrR80cDT1k7bTuejxuhbZYPhVzqg3X
0/F/xK+WgES/Yp/dLRZKzjBSp9F7t8bI1kNnAvpmNIOnXUFLyT2gn7QZlHcNeTPi
7ZSRK5lgTWHanuKaRR8+MMi/QyLezR1X3jZgx/doBaTv48WGzKcZHo+Imx9gCRuK
XYERYwYLyyuZ/BhIAcMcUwxmyo20p3jV4AuohDrJ1Nx9xTqnVmzwc7hKG9FZSQ+d
0sldtAmWRr8JfMjqkFyMYVxjui47c/na
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:18 2024 by rpki-client on console-ams.rpki-client.org