Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52CEADC4E75311EEAB4E65A7775412E6.roa
File: 52CEADC4E75311EEAB4E65A7775412E6.roa (raw, json)
Hash identifier: vM/kfjk3+k4ux6bhEiJaTWkDqIHZ2jOWWaWpNSzHyIs=
Subject key identifier: 56:70:9A:68:29:69:C4:B3:8B:88:D5:67:E1:F5:E4:2B:B9:D7:51:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A487
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52CEADC4E75311EEAB4E65A7775412E6.roa
Signing time: Thu 21 Mar 2024 07:19:15 +0000
ROA not before: Thu 21 Mar 2024 07:19:12 +0000
ROA not after: Tue 23 Apr 2024 07:19:12 +0000
asID: 44559
IP address blocks: 154.218.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42119 (0xa487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:19:12 2024 GMT
Not After : Apr 23 07:19:12 2024 GMT
Subject: CN=65fbdf73-3af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:fb:cd:fe:6e:db:91:d2:6b:64:68:be:d1:
04:75:15:02:de:d0:b6:e0:d3:67:a6:6a:36:ef:57:
14:e1:bc:d5:b3:1a:5f:b7:c2:72:2c:2d:c5:fa:3c:
6b:0a:5f:0f:68:9b:b6:02:c8:cb:7d:21:6b:90:39:
a0:5d:fb:19:15:4a:ab:53:05:0e:6a:b2:0c:7d:44:
0c:04:97:c4:b8:2f:37:4e:27:5b:ef:f3:ab:fc:0f:
14:67:4d:8a:60:da:01:90:cb:67:64:8d:5a:63:b6:
68:4c:88:e1:55:53:13:f1:ae:30:ba:41:07:a4:d9:
29:d2:07:c0:fc:17:26:84:75:3d:a9:58:d9:9a:b2:
89:4d:02:45:73:71:c3:30:28:f2:2e:91:ef:07:a2:
12:a0:e4:3e:ce:08:e4:46:c4:fa:6b:3f:f9:18:04:
48:38:7f:ad:42:9e:7a:78:45:7d:d1:fb:8e:03:22:
17:74:02:a1:b3:47:6c:ae:9d:d8:2f:c7:8b:11:37:
28:bf:3b:d9:44:68:93:f5:ec:e5:72:46:17:8f:77:
5f:e4:c8:82:f7:34:b7:a4:66:dc:36:31:e2:08:8f:
a7:ae:fd:cc:37:a4:8d:cc:73:3f:d1:cb:b6:e6:df:
0a:19:ec:fc:91:c3:3f:52:4e:ee:36:3e:bc:df:2a:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:9A:68:29:69:C4:B3:8B:88:D5:67:E1:F5:E4:2B:B9:D7:51:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52CEADC4E75311EEAB4E65A7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.53.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3b:17:bd:dd:45:b4:d1:c5:79:46:ca:c8:23:2a:da:f3:71:
16:c1:b0:05:8c:ea:51:ee:09:c3:a2:66:ad:c2:f2:e6:de:d5:
99:dc:ef:69:eb:55:93:da:06:65:43:e7:f9:a6:37:60:48:b2:
47:50:8f:f3:9b:e9:ac:c5:d5:d9:a7:57:08:47:d6:fa:fc:dc:
2f:b6:42:43:7c:94:07:a8:a1:ef:d8:0d:61:2b:48:d1:0e:c8:
de:20:d0:2b:b5:ca:35:88:4c:2e:7b:cc:d5:2a:d6:93:58:bc:
d7:f2:c1:d3:42:ef:b2:60:0c:eb:57:f8:53:64:b5:7f:60:5b:
3c:a9:54:d9:60:bf:57:6f:7a:c8:0c:1e:1a:7c:fe:15:d6:a4:
67:82:9d:3f:b3:bd:67:53:cd:49:f9:cf:ab:be:6f:ad:38:31:
72:ed:90:1e:0d:e4:15:d8:40:dc:2c:f7:8c:fa:3b:ec:96:5d:
d0:00:d9:87:dc:5f:97:1d:28:3a:fb:65:d1:ca:0a:61:c4:dd:
80:15:ce:1f:b6:51:2d:d0:de:1b:b6:29:f5:82:a0:22:e5:cb:
94:17:61:22:af:25:f0:1a:e7:e1:78:5c:ae:c6:03:4f:ba:84:
ae:ca:6c:23:02:cd:27:04:07:9c:17:8e:ff:63:4b:03:1a:01:
06:46:e0:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKSHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDcxOTEyWhcNMjQwNDIzMDcxOTEyWjAYMRYw
FAYDVQQDEw02NWZiZGY3My0zYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7J37zf5u25HSa2RovtEEdRUC3tC24NNnpmo271cU4bzVsxpft8JyLC3F
+jxrCl8PaJu2AsjLfSFrkDmgXfsZFUqrUwUOarIMfUQMBJfEuC83Tidb7/Or/A8U
Z02KYNoBkMtnZI1aY7ZoTIjhVVMT8a4wukEHpNkp0gfA/BcmhHU9qVjZmrKJTQJF
c3HDMCjyLpHvB6ISoOQ+zgjkRsT6az/5GARIOH+tQp56eEV90fuOAyIXdAKhs0ds
rp3YL8eLETcovzvZRGiT9ezlckYXj3df5MiC9zS3pGbcNjHiCI+nrv3MN6SNzHM/
0cu25t8KGez8kcM/Uk7uNj683ypkdwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFZw
mmgpacSzi4jVZ+H15Cu511EsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MkNFQURDNEU3NTMxMUVFQUI0RTY1QTc3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmto1MA0GCSqGSIb3DQEB
CwUAA4IBAQBWOxe93UW00cV5RsrIIyra83EWwbAFjOpR7gnDomatwvLm3tWZ3O9p
61WT2gZlQ+f5pjdgSLJHUI/zm+msxdXZp1cIR9b6/NwvtkJDfJQHqKHv2A1hK0jR
DsjeINArtco1iEwue8zVKtaTWLzX8sHTQu+yYAzrV/hTZLV/YFs8qVTZYL9Xb3rI
DB4afP4V1qRngp0/s71nU81J+c+rvm+tODFy7ZAeDeQV2EDcLPeM+jvsll3QANmH
3F+XHSg6+2XRygphxN2AFc4ftlEt0N4btin1gqAi5cuUF2EiryXwGufheFyuxgNP
uoSuymwjAs0nBAecF47/Y0sDGgEGRuCx
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:20 2024 by rpki-client on console-ams.rpki-client.org