Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3C8FA85E1811EE89299A494AD9E6FC.roa
File: 4D3C8FA85E1811EE89299A494AD9E6FC.roa (raw, json)
Hash identifier: EdZbah1JyUd9qTAbRHOa0ue6n+P1qfMz7wecPh+1v1M=
Subject key identifier: 25:A5:1D:EC:56:87:3B:65:93:20:FF:D9:91:83:9A:F2:06:08:1C:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 437B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3C8FA85E1811EE89299A494AD9E6FC.roa
Signing time: Thu 28 Sep 2023 16:01:36 +0000
ROA not before: Thu 28 Sep 2023 16:01:33 +0000
ROA not after: Sat 28 Sep 2024 16:01:33 +0000
asID: 21859
IP address blocks: 154.207.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17275 (0x437b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 28 16:01:33 2023 GMT
Not After : Sep 28 16:01:33 2024 GMT
Subject: CN=6515a360-d681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:13:e2:b3:73:5f:cf:cc:77:a3:88:e2:d4:
d2:b8:7e:cf:7e:54:7b:78:46:dd:e2:d6:0d:07:66:
c6:b8:39:98:a9:07:03:b6:36:25:f2:85:62:12:7d:
8d:70:5b:b7:23:93:36:f7:d3:97:89:43:ad:0e:e4:
83:b3:4d:87:64:88:7b:5b:6b:3e:12:0f:8f:21:86:
b9:c4:f1:36:e8:a0:c8:09:4c:bc:f7:23:7a:1d:07:
8f:51:47:c4:b9:fe:66:93:76:e3:7a:6e:23:57:1d:
8f:ae:fb:7d:b3:4f:68:cc:a1:30:7d:31:fc:87:7a:
4a:2a:1f:c4:e7:6c:62:71:98:45:9c:72:9c:7d:be:
ae:11:40:34:b0:55:37:83:55:34:a2:1f:a8:7f:a1:
86:73:e4:7a:05:26:c3:43:ec:f5:d7:91:28:62:b5:
34:09:37:a3:76:91:42:16:91:c4:22:82:d2:67:b9:
11:58:dd:c8:ef:f6:0c:ac:40:2d:63:df:ab:b8:01:
b8:84:77:14:34:76:a3:c4:9c:df:1e:11:37:25:9f:
a0:55:08:70:d5:c1:c7:45:24:c1:57:bc:be:c2:0c:
9c:39:e5:80:33:e5:b1:5f:08:ce:be:3c:aa:d5:00:
52:06:60:d6:e1:45:8c:8f:a7:6e:30:c1:e7:ff:33:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:1D:EC:56:87:3B:65:93:20:FF:D9:91:83:9A:F2:06:08:1C:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3C8FA85E1811EE89299A494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.176.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:ca:85:0f:d3:c9:c6:e5:28:9c:fa:ef:2a:39:8f:2c:57:c7:
59:f5:9c:25:3a:70:69:3d:3f:5f:68:1d:62:a1:e0:78:59:54:
20:4f:e2:6c:1d:f8:55:66:9f:32:43:33:ee:69:63:02:9d:42:
38:aa:4a:2b:0d:94:ef:8c:d4:45:29:59:f1:be:06:2e:85:66:
d4:08:a8:47:58:97:51:24:ee:8e:65:93:1a:46:70:47:49:7a:
2f:af:e8:12:c8:8e:ae:db:93:46:8e:19:91:36:3a:f9:1a:a8:
2f:56:29:82:8d:fc:11:af:18:b5:97:5e:95:b5:d0:a8:f6:be:
c5:a5:69:17:13:c0:25:2d:af:f2:ed:78:6d:2c:56:37:75:25:
78:07:a6:62:f5:97:c4:20:88:db:31:d9:98:c8:4e:da:e5:1e:
ee:e4:88:91:45:09:af:aa:94:8c:ce:b7:69:db:81:50:5a:7d:
fe:b4:de:c7:3f:b2:79:ef:d5:36:1a:0d:e8:97:af:d6:b6:15:
52:bb:9c:92:21:aa:f7:8e:20:9e:67:43:35:59:e1:21:d6:83:
58:0d:60:7d:ab:87:b7:6d:e7:2d:24:c5:f2:46:3d:11:6e:c3:
eb:5b:1b:9f:d2:a6:3c:71:5f:fa:f6:46:3f:31:17:14:29:ca:
ae:34:01:5e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICQ3swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA5MjgxNjAxMzNaFw0yNDA5MjgxNjAxMzNaMBgxFjAU
BgNVBAMTDTY1MTVhMzYwLWQ2ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9OxPis3Nfz8x3o4ji1NK4fs9+VHt4Rt3i1g0HZsa4OZipBwO2NiXyhWIS
fY1wW7cjkzb305eJQ60O5IOzTYdkiHtbaz4SD48hhrnE8TbooMgJTLz3I3odB49R
R8S5/maTduN6biNXHY+u+32zT2jMoTB9MfyHekoqH8TnbGJxmEWccpx9vq4RQDSw
VTeDVTSiH6h/oYZz5HoFJsND7PXXkShitTQJN6N2kUIWkcQigtJnuRFY3cjv9gys
QC1j36u4AbiEdxQ0dqPEnN8eETcln6BVCHDVwcdFJMFXvL7CDJw55YAz5bFfCM6+
PKrVAFIGYNbhRYyPp24wwef/Mzd7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJaUd
7FaHO2WTIP/ZkYOa8gYIHMYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzREM0M4RkE4NUUxODExRUU4OTI5OUE0OTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOaz7AwDQYJKoZIhvcNAQEL
BQADggEBAMbKhQ/TycblKJz67yo5jyxXx1n1nCU6cGk9P19oHWKh4HhZVCBP4mwd
+FVmnzJDM+5pYwKdQjiqSisNlO+M1EUpWfG+Bi6FZtQIqEdYl1Ek7o5lkxpGcEdJ
ei+v6BLIjq7bk0aOGZE2OvkaqC9WKYKN/BGvGLWXXpW10Kj2vsWlaRcTwCUtr/Lt
eG0sVjd1JXgHpmL1l8QgiNsx2ZjITtrlHu7kiJFFCa+qlIzOt2nbgVBaff603sc/
snnv1TYaDeiXr9a2FVK7nJIhqveOIJ5nQzVZ4SHWg1gNYH2rh7dt5y0kxfJGPRFu
w+tbG5/SpjxxX/r2Rj8xFxQpyq40AV4=
-----END CERTIFICATE-----
Generated at Thu May 2 17:42:26 2024 by rpki-client on console-fra.rpki-client.org