Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C59F2CC50611EE8E3F79B5775412E6.roa
File: 53C59F2CC50611EE8E3F79B5775412E6.roa (raw, json)
Hash identifier: q8cVpY0o9iOAY3rpmL+ayBCMhXMVpJD7nbfqH5Epa30=
Subject key identifier: D8:9C:52:0C:C0:75:C9:9B:25:D1:8A:88:CC:DB:62:4A:45:87:B7:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8643
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C59F2CC50611EE8E3F79B5775412E6.roa
Signing time: Tue 06 Feb 2024 15:42:26 +0000
ROA not before: Tue 06 Feb 2024 15:42:23 +0000
ROA not after: Thu 13 Jun 2024 15:42:23 +0000
asID: 212238
IP address blocks: 154.202.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34371 (0x8643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 6 15:42:23 2024 GMT
Not After : Jun 13 15:42:23 2024 GMT
Subject: CN=65c25362-ca33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:dc:21:95:5d:fd:5a:17:d6:f7:b7:fd:7b:
58:c9:9e:68:cf:18:55:86:bd:ed:dd:58:6d:48:9a:
15:be:c2:cd:b6:60:85:54:7f:75:c2:2d:16:20:7e:
db:83:d0:ff:7b:13:d7:a8:46:f9:83:bf:50:3d:14:
65:8c:f8:d6:1e:9f:82:9c:b1:db:ef:9c:d3:82:e8:
5f:77:e8:70:e2:b4:81:09:2c:8f:5f:29:44:d5:0e:
31:a3:12:a9:b0:b0:70:8a:58:ef:4b:5d:e0:60:5c:
62:52:47:fd:a3:2e:5e:3f:d1:20:c9:46:b7:e5:66:
3a:70:2e:19:31:40:ac:07:27:03:d9:9f:43:91:f3:
7e:66:fd:b1:ad:85:dc:d3:8d:c5:6e:81:42:e6:99:
4b:8d:a8:12:d1:38:8c:fc:76:3d:d4:0f:60:bf:df:
68:7a:ed:32:cc:5e:0e:4d:30:ad:e9:41:dd:29:ba:
33:e2:d5:e0:34:35:b4:54:c2:94:a7:c5:fc:d5:70:
52:87:10:57:fb:e9:3a:fd:12:54:12:84:f0:79:e4:
f1:ba:0f:4a:24:43:32:c4:ab:1e:18:3c:2e:9b:80:
54:31:05:cb:e7:21:9b:39:35:4f:1f:ec:ea:0e:b2:
b9:38:d9:3b:2b:5e:f7:35:c3:0a:7c:4b:5f:d8:e6:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:52:0C:C0:75:C9:9B:25:D1:8A:88:CC:DB:62:4A:45:87:B7:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C59F2CC50611EE8E3F79B5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.30.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9a:03:7d:c5:84:25:4d:23:b1:4b:e0:f2:c4:43:b3:12:6b:
7e:a2:9c:d1:0e:36:1e:33:9b:22:90:a1:44:86:43:9f:d0:eb:
f5:cb:46:42:81:26:82:c9:3d:5a:bc:2f:8c:01:29:c9:c8:2b:
96:65:62:0e:52:2d:24:30:5c:3f:0c:37:3e:af:23:20:0e:59:
bf:0a:81:1a:d1:b0:43:31:44:b8:7d:34:7e:72:a8:8e:65:c2:
de:9f:e8:a0:1b:f9:5a:fb:e3:05:bd:43:90:80:fa:6a:58:1f:
a2:8b:93:40:95:ca:70:32:ff:96:85:6a:c2:4d:2a:c4:b6:b6:
00:ea:f6:31:cb:da:32:5b:18:f6:ce:9b:23:81:e8:1a:c6:af:
69:c0:87:5e:8b:97:62:2c:5b:c9:3b:76:07:15:c6:a2:e6:e7:
05:a1:fe:a2:01:b5:0a:11:24:ae:d9:96:88:68:ed:45:c4:c1:
fb:95:05:95:3e:80:58:42:d2:27:97:ae:68:ab:c3:62:17:d1:
8e:96:43:24:3f:5a:3d:e3:59:63:16:87:ad:66:68:a3:b1:ff:
be:78:5d:a3:e4:4a:f9:ad:80:4a:30:a4:a4:2c:56:2c:56:cb:
06:80:ef:98:53:7d:d3:1f:10:f5:7a:9d:f1:c5:60:75:4e:79:
21:9a:cc:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAIZDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjA2MTU0MjIzWhcNMjQwNjEzMTU0MjIzWjAYMRYw
FAYDVQQDEw02NWMyNTM2Mi1jYTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1iHcIZVd/VoX1ve3/XtYyZ5ozxhVhr3t3VhtSJoVvsLNtmCFVH91wi0W
IH7bg9D/exPXqEb5g79QPRRljPjWHp+CnLHb75zTguhfd+hw4rSBCSyPXylE1Q4x
oxKpsLBwiljvS13gYFxiUkf9oy5eP9EgyUa35WY6cC4ZMUCsBycD2Z9DkfN+Zv2x
rYXc043FboFC5plLjagS0TiM/HY91A9gv99oeu0yzF4OTTCt6UHdKboz4tXgNDW0
VMKUp8X81XBShxBX++k6/RJUEoTweeTxug9KJEMyxKseGDwum4BUMQXL5yGbOTVP
H+zqDrK5ONk7K173NcMKfEtf2OZjtQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNic
UgzAdcmbJdGKiMzbYkpFh7cBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81M0M1OUYyQ0M1MDYxMUVFOEUzRjc5QjU3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsoeMA0GCSqGSIb3DQEB
CwUAA4IBAQCJmgN9xYQlTSOxS+DyxEOzEmt+opzRDjYeM5sikKFEhkOf0Ov1y0ZC
gSaCyT1avC+MASnJyCuWZWIOUi0kMFw/DDc+ryMgDlm/CoEa0bBDMUS4fTR+cqiO
ZcLen+igG/la++MFvUOQgPpqWB+ii5NAlcpwMv+WhWrCTSrEtrYA6vYxy9oyWxj2
zpsjgegaxq9pwIdei5diLFvJO3YHFcai5ucFof6iAbUKESSu2ZaIaO1FxMH7lQWV
PoBYQtInl65oq8NiF9GOlkMkP1o941ljFoetZmijsf++eF2j5Er5rYBKMKSkLFYs
VssGgO+YU33THxD1ep3xxWB1Tnkhmsxk
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:43 2024 by rpki-client on console-ams.rpki-client.org