Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53EE95FEAE1C11EE84E32B9C775412E6.roa
File: 53EE95FEAE1C11EE84E32B9C775412E6.roa (raw, json)
Hash identifier: SBK7URGV7KvDCl8Aktt0u3l5RAzSkTJfb7tNtSKYwYo=
Subject key identifier: E1:EA:DE:28:B5:C5:9C:C2:6F:AB:74:97:E1:0B:4F:0A:75:80:D6:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53EE95FEAE1C11EE84E32B9C775412E6.roa
Signing time: Mon 08 Jan 2024 11:51:58 +0000
ROA not before: Mon 08 Jan 2024 11:51:55 +0000
ROA not after: Tue 14 Jan 2025 11:51:55 +0000
asID: 138965
IP address blocks: 154.223.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29360 (0x72b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 11:51:55 2024 GMT
Not After : Jan 14 11:51:55 2025 GMT
Subject: CN=659be1de-24c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:96:de:5f:1e:ed:36:49:7d:17:af:8e:77:
c4:0d:df:97:2e:0d:fe:5f:b5:66:89:ed:dc:8c:17:
df:7d:1c:c5:c1:c6:1e:e1:c5:fc:58:18:cc:57:a4:
c3:27:72:0f:38:4d:32:ba:7f:75:e3:4f:89:ac:5a:
6a:e6:15:38:fb:02:8c:76:0d:6c:e7:82:b1:86:8a:
43:a1:e3:e0:2a:63:8f:2d:fd:92:c8:02:e5:f2:87:
92:75:5d:5e:b3:fd:3b:49:0c:95:cc:f1:1b:9d:51:
11:e2:db:f3:7b:93:67:ab:d8:00:f2:87:13:5c:4a:
5e:b1:3c:1b:ca:0b:48:a4:82:20:51:f3:5a:b4:97:
6f:a5:5e:25:a5:f4:02:80:1c:7d:d0:66:ae:a5:c7:
21:7e:a9:91:22:e2:23:b4:c0:10:f2:e7:b9:aa:4e:
40:fa:4a:3f:bd:d6:0c:d2:ab:d4:b9:09:b1:62:ce:
a7:8f:af:7b:91:76:62:a3:84:f7:92:6d:5b:b1:79:
03:b2:1b:00:8e:26:2f:26:b4:03:e4:c4:ba:b1:02:
dc:51:e6:38:af:cc:69:2a:ab:93:38:27:71:7d:b2:
09:c2:b7:ec:62:be:34:de:fb:08:23:8c:2b:5c:ac:
fd:b5:0e:c6:71:34:20:7c:df:3e:f1:cd:7e:c4:05:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:DE:28:B5:C5:9C:C2:6F:AB:74:97:E1:0B:4F:0A:75:80:D6:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53EE95FEAE1C11EE84E32B9C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:d6:29:42:e9:55:12:d6:7d:6a:cd:82:66:e7:c2:32:0a:82:
0b:ef:c5:dc:0e:34:6c:c2:b7:c7:80:8d:82:ba:3e:de:ad:d0:
12:1f:8d:12:4c:ea:ed:e8:46:43:8d:b2:58:ef:9a:51:e0:93:
b7:14:e4:81:16:42:98:4b:38:60:ea:94:6f:e1:05:43:73:b1:
06:8a:e9:32:13:d5:b2:30:73:0e:aa:01:1d:4a:1b:23:d3:57:
a9:52:80:9d:56:bc:c8:d6:d5:f0:ad:73:d9:a0:6f:63:85:af:
43:83:54:35:81:b5:60:66:81:9b:d2:8f:42:a0:fc:e5:c5:92:
f5:47:1a:29:e0:92:66:03:78:d0:4a:8f:6a:d9:4b:71:d9:c5:
19:6e:61:ac:b8:54:d4:9a:12:a1:c2:5c:9f:57:fc:2d:73:8d:
8f:f1:c5:98:a3:4b:ec:3a:88:1e:60:b0:8d:42:9b:2c:d2:f1:
ad:39:db:e5:12:fa:cf:e6:de:15:93:da:0a:97:ba:58:8e:8a:
8b:c2:fb:e8:c6:43:03:b0:7a:9e:82:e1:2a:3b:a8:ab:d1:71:
0c:76:e0:37:94:bd:a2:12:bf:1c:87:09:8f:b8:00:7b:ed:b3:
ae:5d:78:d7:e6:9e:1b:2a:b6:d2:d3:8e:9f:1c:f1:f6:b9:44:
6a:80:49:08
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICcrAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMDgxMTUxNTVaFw0yNTAxMTQxMTUxNTVaMBgxFjAU
BgNVBAMTDTY1OWJlMWRlLTI0YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrxpbeXx7tNkl9F6+Od8QN35cuDf5ftWaJ7dyMF999HMXBxh7hxfxYGMxX
pMMncg84TTK6f3XjT4msWmrmFTj7Aox2DWzngrGGikOh4+AqY48t/ZLIAuXyh5J1
XV6z/TtJDJXM8RudURHi2/N7k2er2ADyhxNcSl6xPBvKC0ikgiBR81q0l2+lXiWl
9AKAHH3QZq6lxyF+qZEi4iO0wBDy57mqTkD6Sj+91gzSq9S5CbFizqePr3uRdmKj
hPeSbVuxeQOyGwCOJi8mtAPkxLqxAtxR5jivzGkqq5M4J3F9sgnCt+xivjTe+wgj
jCtcrP21DsZxNCB83z7xzX7EBUhTAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU4ere
KLXFnMJvq3SX4QtPCnWA1rYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzUzRUU5NUZFQUUxQzExRUU4NEUzMkI5Qzc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3wswDQYJKoZIhvcNAQEL
BQADggEBANDWKULpVRLWfWrNgmbnwjIKggvvxdwONGzCt8eAjYK6Pt6t0BIfjRJM
6u3oRkONsljvmlHgk7cU5IEWQphLOGDqlG/hBUNzsQaK6TIT1bIwcw6qAR1KGyPT
V6lSgJ1WvMjW1fCtc9mgb2OFr0ODVDWBtWBmgZvSj0Kg/OXFkvVHGingkmYDeNBK
j2rZS3HZxRluYay4VNSaEqHCXJ9X/C1zjY/xxZijS+w6iB5gsI1CmyzS8a052+US
+s/m3hWT2gqXuliOiovC++jGQwOwep6C4So7qKvRcQx24DeUvaISvxyHCY+4AHvt
s65deNfmnhsqttLTjp8c8fa5RGqASQg=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org