Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C63D934B10011EEB49C665F775412E6.roa
File: 4C63D934B10011EEB49C665F775412E6.roa (raw, json)
Hash identifier: Sm4BwaGVlpXbvNfxtmK0owlX4bhaUGrho0n6uR8CJLo=
Subject key identifier: D5:12:82:0B:20:5B:31:04:28:4A:C9:91:2E:CB:71:66:5E:96:1C:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 748D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C63D934B10011EEB49C665F775412E6.roa
Signing time: Fri 12 Jan 2024 04:08:54 +0000
ROA not before: Fri 12 Jan 2024 04:08:50 +0000
ROA not after: Fri 13 Dec 2024 04:08:50 +0000
asID: 140224
IP address blocks: 154.205.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29837 (0x748d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:08:50 2024 GMT
Not After : Dec 13 04:08:50 2024 GMT
Subject: CN=65a0bb55-9d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:e6:f6:50:3c:53:04:05:b3:e4:db:e3:dd:
16:43:65:3a:50:a8:4b:7a:c9:f6:98:89:7a:c4:da:
98:88:65:16:67:d9:62:60:07:92:32:33:2f:50:4a:
93:0f:99:b8:06:ef:92:ca:dc:e5:51:46:11:53:ef:
9a:fe:e0:51:1e:a4:cb:a5:3e:5f:0f:de:3c:f1:d2:
87:ae:ed:b1:e3:9f:08:64:2c:b9:c2:21:8a:20:d6:
02:45:1e:17:2f:f6:c5:ab:98:93:b5:c5:7b:ba:fc:
db:9e:1e:b8:77:b0:66:9e:52:11:a3:ee:07:d0:56:
a9:d7:81:0d:21:f5:a0:b4:33:21:93:db:0d:be:6d:
b5:a2:f3:a3:36:8f:d9:ca:74:34:24:aa:d1:c7:80:
aa:0b:32:c2:82:9d:17:78:09:b2:67:84:dc:7f:14:
67:97:ad:03:3d:53:1f:6d:b1:2a:7a:24:a0:91:a6:
22:e2:70:2e:0f:65:91:ba:0b:0f:60:7f:1f:b3:8e:
17:de:b9:87:1c:32:db:9c:34:20:bc:d0:aa:ea:b0:
51:3c:2c:f7:e9:61:a7:16:18:89:22:f0:76:29:ee:
28:de:da:5a:c8:a8:d6:f6:71:83:fb:6d:c2:0c:0b:
aa:85:19:cc:9e:eb:ab:13:9b:02:11:3e:2f:b4:b2:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:82:0B:20:5B:31:04:28:4A:C9:91:2E:CB:71:66:5E:96:1C:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C63D934B10011EEB49C665F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.209.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e5:4c:bb:8e:7a:e5:99:ac:87:0d:aa:f3:de:7e:8e:d8:80:
d0:67:6c:3d:4c:e8:0f:50:4b:1a:b6:db:d3:ae:43:47:6d:75:
a8:77:53:d7:65:56:b1:2e:12:0f:96:22:10:83:e1:48:89:40:
e2:fc:f8:b6:2b:89:2b:aa:d0:31:90:9f:30:1c:67:13:84:f0:
99:97:be:3a:f9:72:cd:8d:d0:83:d6:7b:34:0b:47:21:ae:01:
e5:e8:2b:b9:fd:ff:8c:c4:73:cb:3d:0b:f0:38:51:32:20:35:
6e:94:54:dd:b2:ec:21:f7:12:dc:b8:ce:bb:2c:7c:5b:bf:53:
ca:ab:9b:75:b7:b6:68:bd:3d:9f:c7:9a:ba:78:10:15:18:51:
7b:fc:e2:b8:86:3e:08:95:84:46:d0:7a:68:a6:20:60:91:38:
ab:24:53:eb:f2:99:6a:35:e3:f3:07:16:e4:43:2e:d6:0b:05:
c9:7a:8d:d5:23:e8:28:3c:18:9b:92:d8:97:33:2c:ac:20:ac:
ce:7e:b3:81:f9:48:97:e4:02:61:b9:75:0a:79:73:33:a0:ad:
46:a3:e8:ff:0b:c2:47:4c:a0:82:b1:ed:8d:fc:42:ae:6b:39:
7f:35:0b:e9:5f:27:ef:6a:f4:8e:72:ee:ee:32:ee:ab:70:8f:
63:0e:d2:f3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdI0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTIwNDA4NTBaFw0yNDEyMTMwNDA4NTBaMBgxFjAU
BgNVBAMTDTY1YTBiYjU1LTlkMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+reb2UDxTBAWz5Nvj3RZDZTpQqEt6yfaYiXrE2piIZRZn2WJgB5IyMy9Q
SpMPmbgG75LK3OVRRhFT75r+4FEepMulPl8P3jzx0oeu7bHjnwhkLLnCIYog1gJF
Hhcv9sWrmJO1xXu6/NueHrh3sGaeUhGj7gfQVqnXgQ0h9aC0MyGT2w2+bbWi86M2
j9nKdDQkqtHHgKoLMsKCnRd4CbJnhNx/FGeXrQM9Ux9tsSp6JKCRpiLicC4PZZG6
Cw9gfx+zjhfeuYccMtucNCC80KrqsFE8LPfpYacWGIki8HYp7ije2lrIqNb2cYP7
bcIMC6qFGcye66sTmwIRPi+0sq77AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU1RKC
CyBbMQQoSsmRLstxZl6WHIMwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzRDNjNEOTM0QjEwMDExRUVCNDlDNjY1Rjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazdEwDQYJKoZIhvcNAQEL
BQADggEBAL7lTLuOeuWZrIcNqvPefo7YgNBnbD1M6A9QSxq229OuQ0dtdah3U9dl
VrEuEg+WIhCD4UiJQOL8+LYriSuq0DGQnzAcZxOE8JmXvjr5cs2N0IPWezQLRyGu
AeXoK7n9/4zEc8s9C/A4UTIgNW6UVN2y7CH3Ety4zrssfFu/U8qrm3W3tmi9PZ/H
mrp4EBUYUXv84riGPgiVhEbQemimIGCROKskU+vymWo14/MHFuRDLtYLBcl6jdUj
6Cg8GJuS2JczLKwgrM5+s4H5SJfkAmG5dQp5czOgrUaj6P8LwkdMoIKx7Y38Qq5r
OX81C+lfJ+9q9I5y7u4y7qtwj2MO0vM=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org