Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53BE621882BA11EEA1BD3A304AD9E6FC.roa
File: 53BE621882BA11EEA1BD3A304AD9E6FC.roa (raw, json)
Hash identifier: gSN2HTYo2mJO0HDx0S45iRcwIQN/f8vRDbYb4WUycqI=
Subject key identifier: 3C:DA:AA:4D:A3:FD:B3:CA:BF:35:41:8E:DD:FA:05:73:AF:36:20:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53BE621882BA11EEA1BD3A304AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:52:07 +0000
ROA not before: Tue 14 Nov 2023 06:52:04 +0000
ROA not after: Tue 12 Nov 2024 06:52:04 +0000
asID: 397630
IP address blocks: 154.202.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20444 (0x4fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:52:04 2023 GMT
Not After : Nov 12 06:52:04 2024 GMT
Subject: CN=65531917-9ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:b7:55:d6:51:d7:fa:52:a1:a9:01:7a:9d:
f6:9b:68:b7:23:74:92:ea:ec:c8:02:ea:0f:1c:d5:
bd:a2:bb:ae:ed:59:71:d5:28:9b:3b:3d:fc:4c:ca:
8b:e4:a7:6b:49:e9:77:63:ce:2c:72:c2:10:45:c7:
ff:c5:6f:f6:b5:e7:8a:73:11:89:67:c7:68:3a:09:
73:a6:a6:c7:be:40:f2:31:6c:31:39:06:16:9c:55:
6e:4f:e4:9f:bb:ca:8e:54:31:c7:be:89:58:c8:36:
74:b0:3c:ae:a8:9e:67:3f:12:56:0b:e7:f6:bb:14:
b0:e0:39:3c:18:55:41:c3:57:ef:de:04:bd:83:89:
79:eb:4b:6d:4d:bb:20:9d:a9:f1:24:b5:1b:f6:55:
b7:8c:03:54:a3:58:c2:fc:d2:e4:35:dd:81:f0:78:
39:4f:39:c3:38:24:d0:a1:ec:e7:25:b5:37:3d:21:
3a:27:6a:df:61:c3:61:96:8a:7d:68:83:a4:b4:25:
5e:54:f7:1b:8b:76:30:72:56:c0:89:2d:04:28:2c:
a4:d6:54:aa:1a:a7:81:52:7f:44:c0:84:b5:28:c7:
8b:4b:b6:40:60:3f:90:43:4e:4f:f4:80:5a:31:1c:
54:35:cc:3e:96:c4:df:02:51:d9:53:9e:bc:e3:41:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:AA:4D:A3:FD:B3:CA:BF:35:41:8E:DD:FA:05:73:AF:36:20:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53BE621882BA11EEA1BD3A304AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.97.0/24
Signature Algorithm: sha256WithRSAEncryption
12:70:ca:21:2d:1a:a8:78:8c:e1:0a:81:23:da:cb:0d:38:ba:
76:68:e4:29:a9:31:4f:6a:bc:5b:f4:dc:ba:59:ea:5c:42:36:
56:59:62:5b:2b:03:94:66:21:42:d1:78:33:d1:b2:c5:22:97:
02:95:7b:6b:ad:95:dd:e8:65:a7:b4:21:ec:0b:3b:96:96:0c:
ed:05:dd:1d:6d:21:cb:c9:b3:d4:8c:d8:be:5e:8d:e0:9b:96:
4b:e6:bd:64:b6:72:d7:68:85:a5:40:d2:6c:59:8a:5f:90:c0:
ea:48:3b:13:a9:d6:b7:67:b7:6b:5f:02:9e:15:5a:da:ef:10:
9c:ee:58:ad:cf:aa:f9:fd:3c:48:fa:76:bc:53:0d:bf:fe:fa:
85:a2:85:57:17:82:ff:a6:99:38:ba:94:d5:52:29:f2:b6:b7:
3d:42:60:a9:18:01:0d:da:34:da:ce:41:2a:1a:7f:27:d6:74:
63:bd:fa:c6:63:33:f4:e2:13:23:c4:ce:87:a5:c0:f6:80:f4:
ef:76:82:da:59:b2:a7:a9:58:9e:0b:84:51:a0:1c:74:80:e3:
5a:38:f2:4e:7b:8a:d0:c9:7d:49:b6:f9:95:b6:b7:59:a0:3e:
c5:3f:b0:1d:e7:b8:d5:fa:84:f9:e0:5c:2f:a3:af:35:c3:74:
bb:89:1c:fa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICT9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNjUyMDRaFw0yNDExMTIwNjUyMDRaMBgxFjAU
BgNVBAMTDTY1NTMxOTE3LTllZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFzbdV1lHX+lKhqQF6nfabaLcjdJLq7MgC6g8c1b2iu67tWXHVKJs7PfxM
yovkp2tJ6XdjzixywhBFx//Fb/a154pzEYlnx2g6CXOmpse+QPIxbDE5BhacVW5P
5J+7yo5UMce+iVjINnSwPK6onmc/ElYL5/a7FLDgOTwYVUHDV+/eBL2DiXnrS21N
uyCdqfEktRv2VbeMA1SjWML80uQ13YHweDlPOcM4JNCh7OcltTc9ITonat9hw2GW
in1og6S0JV5U9xuLdjByVsCJLQQoLKTWVKoap4FSf0TAhLUox4tLtkBgP5BDTk/0
gFoxHFQ1zD6WxN8CUdlTnrzjQTyZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUPNqq
TaP9s8q/NUGO3foFc682IMkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzUzQkU2MjE4ODJCQTExRUVBMUJEM0EzMDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaymEwDQYJKoZIhvcNAQEL
BQADggEBABJwyiEtGqh4jOEKgSPayw04unZo5CmpMU9qvFv03LpZ6lxCNlZZYlsr
A5RmIULReDPRssUilwKVe2utld3oZae0IewLO5aWDO0F3R1tIcvJs9SM2L5ejeCb
lkvmvWS2ctdohaVA0mxZil+QwOpIOxOp1rdnt2tfAp4VWtrvEJzuWK3Pqvn9PEj6
drxTDb/++oWihVcXgv+mmTi6lNVSKfK2tz1CYKkYAQ3aNNrOQSoafyfWdGO9+sZj
M/TiEyPEzoelwPaA9O92gtpZsqepWJ4LhFGgHHSA41o48k57itDJfUm2+ZW2t1mg
PsU/sB3nuNX6hPngXC+jrzXDdLuJHPo=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org