Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/533B51C2F00911EEB7FEF952775412E6.roa
File: 533B51C2F00911EEB7FEF952775412E6.roa (raw, json)
Hash identifier: /ImmoTBcd6cqkA8OecmbWXkIIqWGW3os94FubEbQ4Mc=
Subject key identifier: 94:BD:76:E7:04:2C:F3:5C:1E:CC:B0:4A:90:30:A6:A3:26:84:81:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A82E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/533B51C2F00911EEB7FEF952775412E6.roa
Signing time: Mon 01 Apr 2024 09:22:14 +0000
ROA not before: Mon 01 Apr 2024 09:22:10 +0000
ROA not after: Sat 11 May 2024 09:22:10 +0000
asID: 138915
IP address blocks: 154.205.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43054 (0xa82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:22:10 2024 GMT
Not After : May 11 09:22:10 2024 GMT
Subject: CN=660a7cc6-fa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:28:b1:82:37:fb:fa:6c:27:53:0f:5b:59:
6b:84:07:07:30:d0:9f:f3:a6:15:0f:8b:a7:cf:be:
e2:0e:a2:73:29:8a:4e:fe:37:00:cb:d8:c6:3f:7d:
a1:d4:f8:9e:47:d5:b9:a3:90:71:d9:d7:e6:a8:44:
52:7a:9b:e4:99:f5:3b:8a:48:49:1c:36:84:e8:7f:
f6:1b:b7:a7:1a:1a:21:f3:f4:73:19:ac:6b:78:b1:
0e:6a:e4:21:d7:a2:7f:bf:ed:c2:4f:ef:ff:ba:30:
c8:f2:dc:66:dd:7d:e9:36:d0:8d:21:8c:9b:e6:1c:
85:10:5c:c7:2f:e3:09:b5:be:0c:a8:13:26:1d:be:
d1:f9:5c:0c:87:cd:ef:09:e8:14:00:23:ae:3d:52:
67:2a:78:cf:dd:3a:04:9a:9c:81:2d:e0:62:71:32:
e6:ec:c5:5c:74:9f:65:57:e4:4f:a3:cc:b7:22:e2:
29:53:c8:52:b2:e5:bf:1d:75:c6:c2:13:39:7f:6b:
a4:85:9a:f7:56:af:18:ea:a3:89:a5:f1:b2:85:74:
f5:65:44:d5:5a:6e:a9:dc:9b:3f:21:68:28:34:e1:
93:ab:c9:0f:8d:62:f1:8c:f5:9e:a7:48:de:10:13:
74:c5:2d:aa:f4:3d:cb:19:68:9f:fd:0a:fb:dd:b2:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:76:E7:04:2C:F3:5C:1E:CC:B0:4A:90:30:A6:A3:26:84:81:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/533B51C2F00911EEB7FEF952775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:46:25:53:c0:0f:db:32:66:0f:d8:ee:ad:8e:69:5a:da:34:
2d:40:cb:a9:97:2c:91:1b:47:a3:ba:9b:37:e7:e6:9e:3f:96:
99:13:b4:3c:a2:11:39:3c:9f:f1:62:b2:14:af:55:76:d6:50:
0e:ad:12:a4:09:d1:d8:67:4d:8f:ba:c0:b2:c9:37:1e:18:41:
3d:30:30:16:74:6d:ac:cc:53:d6:08:41:ad:7d:e7:ff:45:98:
c1:4f:45:34:af:fc:38:74:08:a3:47:12:5d:ec:6c:1d:cc:3f:
16:fb:f2:9d:12:66:1b:d1:8f:ef:6f:be:58:43:34:96:05:25:
25:78:33:96:77:30:cb:41:af:49:55:5a:15:bc:f3:1f:17:02:
64:cb:c4:cc:59:00:27:ac:96:6e:f9:08:e1:ad:19:f2:cc:99:
8a:45:1b:23:e1:be:bc:1d:13:dc:9a:e4:c8:f5:ed:32:98:92:
82:9c:7c:57:5c:10:4a:9b:8a:12:97:42:25:0c:98:17:7a:42:
e1:bc:7d:6d:f3:8d:2f:ea:13:ef:00:7a:61:42:c1:a6:f9:d1:
0a:ad:91:df:9a:49:1f:23:8c:4f:1a:8b:6a:7b:82:32:39:9a:
0e:62:cb:f6:5f:b9:4a:51:b3:ba:64:a2:74:74:b1:93:66:b4:
a1:d5:96:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKguMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDkyMjEwWhcNMjQwNTExMDkyMjEwWjAYMRYw
FAYDVQQDEw02NjBhN2NjNi1mYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbIosYI3+/psJ1MPW1lrhAcHMNCf86YVD4unz77iDqJzKYpO/jcAy9jG
P32h1PieR9W5o5Bx2dfmqERSepvkmfU7ikhJHDaE6H/2G7enGhoh8/RzGaxreLEO
auQh16J/v+3CT+//ujDI8txm3X3pNtCNIYyb5hyFEFzHL+MJtb4MqBMmHb7R+VwM
h83vCegUACOuPVJnKnjP3ToEmpyBLeBicTLm7MVcdJ9lV+RPo8y3IuIpU8hSsuW/
HXXGwhM5f2ukhZr3Vq8Y6qOJpfGyhXT1ZUTVWm6p3Js/IWgoNOGTq8kPjWLxjPWe
p0jeEBN0xS2q9D3LGWif/Qr73bIUGwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJS9
ducELPNcHsywSpAwpqMmhIFBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MzNCNTFDMkYwMDkxMUVFQjdGRUY5NTI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2SMA0GCSqGSIb3DQEB
CwUAA4IBAQDDRiVTwA/bMmYP2O6tjmla2jQtQMuplyyRG0ejups35+aeP5aZE7Q8
ohE5PJ/xYrIUr1V21lAOrRKkCdHYZ02PusCyyTceGEE9MDAWdG2szFPWCEGtfef/
RZjBT0U0r/w4dAijRxJd7GwdzD8W+/KdEmYb0Y/vb75YQzSWBSUleDOWdzDLQa9J
VVoVvPMfFwJky8TMWQAnrJZu+QjhrRnyzJmKRRsj4b68HRPcmuTI9e0ymJKCnHxX
XBBKm4oSl0IlDJgXekLhvH1t840v6hPvAHphQsGm+dEKrZHfmkkfI4xPGotqe4Iy
OZoOYsv2X7lKUbO6ZKJ0dLGTZrSh1Zax
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org