Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4661E6187EB811EE85521E584AD9E6FC.roa
File: 4661E6187EB811EE85521E584AD9E6FC.roa (raw, json)
Hash identifier: /w+yU5wn6OkE4m2hTTQMoprfmIq1MKOR0Al4Lu/j57c=
Subject key identifier: 04:93:F9:CC:20:17:7A:89:2E:C9:E6:93:AF:A1:78:78:17:FA:CE:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4661E6187EB811EE85521E584AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:27:22 +0000
ROA not before: Thu 09 Nov 2023 04:27:18 +0000
ROA not after: Thu 08 Aug 2024 04:27:18 +0000
asID: 133861
IP address blocks: 154.204.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19889 (0x4db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:27:18 2023 GMT
Not After : Aug 8 04:27:18 2024 GMT
Subject: CN=654c5fa9-8a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:b4:8d:5e:eb:e8:d1:3b:e3:28:df:ea:b0:
17:8c:58:63:8b:d4:dc:d3:a3:fb:b4:eb:9e:c7:31:
81:29:14:e3:75:a2:1f:85:5a:c0:41:38:28:39:43:
1d:d3:f7:9e:b2:08:6e:c7:7b:b4:2b:cb:36:ca:7a:
55:22:b9:86:31:d2:b9:d2:b2:e8:2d:16:32:12:be:
2e:b5:0a:3e:5b:f0:75:81:a6:9f:67:66:42:6c:a0:
c7:fb:af:f2:67:b6:d6:f8:76:5d:d6:e5:1a:d8:1b:
64:43:21:37:70:7c:5e:c4:06:e7:33:a9:89:09:eb:
11:b2:cc:83:cc:86:65:81:6e:9c:c7:2a:08:f0:f6:
72:ef:0c:97:a2:f5:96:84:c7:0b:0e:5f:64:d9:22:
d6:e5:3c:97:eb:96:85:a9:b3:2c:a5:3a:f4:fe:ff:
07:15:e1:ff:4b:c3:21:fe:b7:71:c7:c4:6f:c5:96:
93:64:31:ab:a3:10:bd:7b:23:c5:38:c1:df:94:89:
a4:99:b3:2f:f3:10:ef:2b:01:7f:62:ef:ad:bb:85:
b6:27:08:34:3a:b8:e9:eb:c4:54:3e:37:81:7e:12:
9b:de:a3:58:60:89:ab:34:13:65:80:3e:bb:a7:7b:
75:09:d7:9b:52:24:54:0e:e3:87:66:02:20:b8:f9:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:93:F9:CC:20:17:7A:89:2E:C9:E6:93:AF:A1:78:78:17:FA:CE:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4661E6187EB811EE85521E584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.46.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bc:a2:70:ea:eb:7b:b4:7f:c3:47:6f:51:d2:43:3e:87:b5:
83:b7:7b:96:88:a6:7c:fd:98:9b:9f:b5:98:e9:00:6e:64:74:
a8:31:5e:c5:9a:0a:2c:4a:e2:ad:d6:b2:36:1f:43:ad:0d:74:
b7:31:72:be:05:5f:a5:22:08:fa:c2:ef:7a:e1:05:66:07:13:
e2:cf:87:d1:9a:7c:c4:b7:ae:39:99:c7:2f:2d:c3:5c:42:a4:
c0:db:91:d4:55:09:fa:55:3c:34:af:b9:6b:a5:da:ce:3f:90:
8c:df:d7:f4:ca:31:57:40:4e:bb:94:55:f5:91:f4:13:db:47:
88:95:05:16:35:42:67:60:00:8b:11:3e:4d:41:4c:79:6d:f5:
e0:2e:41:2a:09:58:79:be:3d:b7:ea:eb:ea:8e:c6:8e:5b:51:
7f:5b:c8:55:87:c9:9b:58:60:74:0c:cc:fd:1c:54:dd:e8:9e:
a4:ed:a2:e6:78:83:86:ba:73:d9:b7:7f:02:7f:a5:e4:f4:25:
d7:b1:23:f2:4d:ec:9e:c3:d0:e7:dc:3a:ee:e0:2e:92:c8:5b:
ec:9f:0f:49:ce:83:0f:8b:de:a4:2c:64:6e:63:65:a7:1c:27:
31:07:25:02:d6:b7:18:f4:d4:fd:e6:a0:63:15:2b:01:c2:7e:
59:47:03:11
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICTbEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDkwNDI3MThaFw0yNDA4MDgwNDI3MThaMBgxFjAU
BgNVBAMTDTY1NGM1ZmE5LThhNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIM7SNXuvo0TvjKN/qsBeMWGOL1NzTo/u0657HMYEpFON1oh+FWsBBOCg5
Qx3T956yCG7He7QryzbKelUiuYYx0rnSsugtFjISvi61Cj5b8HWBpp9nZkJsoMf7
r/Jnttb4dl3W5RrYG2RDITdwfF7EBuczqYkJ6xGyzIPMhmWBbpzHKgjw9nLvDJei
9ZaExwsOX2TZItblPJfrloWpsyylOvT+/wcV4f9LwyH+t3HHxG/FlpNkMaujEL17
I8U4wd+UiaSZsy/zEO8rAX9i7627hbYnCDQ6uOnrxFQ+N4F+Epveo1hgias0E2WA
Prune3UJ15tSJFQO44dmAiC4+ZsFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUBJP5
zCAXeokuyeaTr6F4eBf6zlAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzQ2NjFFNjE4N0VCODExRUU4NTUyMUU1ODRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazC4wDQYJKoZIhvcNAQEL
BQADggEBAI28onDq63u0f8NHb1HSQz6HtYO3e5aIpnz9mJuftZjpAG5kdKgxXsWa
CixK4q3WsjYfQ60NdLcxcr4FX6UiCPrC73rhBWYHE+LPh9GafMS3rjmZxy8tw1xC
pMDbkdRVCfpVPDSvuWul2s4/kIzf1/TKMVdATruUVfWR9BPbR4iVBRY1QmdgAIsR
Pk1BTHlt9eAuQSoJWHm+Pbfq6+qOxo5bUX9byFWHyZtYYHQMzP0cVN3onqTtouZ4
g4a6c9m3fwJ/peT0JdexI/JN7J7D0OfcOu7gLpLIW+yfD0nOgw+L3qQsZG5jZacc
JzEHJQLWtxj01P3moGMVKwHCfllHAxE=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org