Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F7D5ECB34911EEAFFE2478775412E6.roa
File: 53F7D5ECB34911EEAFFE2478775412E6.roa (raw, json)
Hash identifier: 1A5Zipc13F0S/YYeVW70bp3JJBa0Lrd20ggQATViyjo=
Subject key identifier: BC:04:F8:E1:ED:FF:15:76:2D:E9:A2:71:EF:4C:F4:9B:36:62:88:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7540
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F7D5ECB34911EEAFFE2478775412E6.roa
Signing time: Mon 15 Jan 2024 01:56:42 +0000
ROA not before: Mon 15 Jan 2024 01:56:38 +0000
ROA not after: Fri 13 Dec 2024 01:56:38 +0000
asID: 8796
IP address blocks: 154.205.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30016 (0x7540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:56:38 2024 GMT
Not After : Dec 13 01:56:38 2024 GMT
Subject: CN=65a490da-a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:ad:69:1c:2d:68:c7:d4:aa:84:54:17:fa:
f3:1d:a0:41:d6:a3:2c:3f:18:2f:12:47:8b:51:8c:
b6:b7:a5:64:32:f2:3c:64:8b:0a:a8:fd:ef:34:d3:
73:be:f8:cd:51:9a:27:af:86:b8:0f:1a:f4:a5:20:
78:42:0c:6c:ef:ed:d1:1d:69:82:9d:1a:6d:7b:3c:
d9:4e:05:86:96:bb:99:56:db:e5:9a:a2:b9:3c:53:
39:83:46:dc:de:74:89:51:9a:2b:d3:fa:8b:a3:ec:
1e:d2:27:0f:28:2c:f9:75:8a:b7:28:01:3b:44:8a:
bc:ab:7c:27:69:f5:ee:25:75:27:2a:17:ab:90:00:
73:7c:71:b8:07:14:d8:03:6e:b2:d6:92:b4:8c:ae:
7e:1b:80:72:0f:7b:89:da:27:6f:8a:52:8e:7a:7a:
74:8c:29:24:59:c4:33:9b:a8:4e:2f:02:f4:95:68:
9b:33:53:f3:60:6c:00:56:2d:8c:79:96:a6:80:a7:
a8:ea:65:df:aa:b6:2b:62:83:a0:2c:cf:6d:b1:34:
04:19:38:bf:6c:d1:7c:36:cb:14:02:34:9d:38:94:
10:7e:e8:3a:08:29:a1:9b:4e:4b:1f:44:8a:64:04:
85:3c:5f:88:21:16:76:1f:02:19:7d:b0:7f:b9:a0:
7a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:04:F8:E1:ED:FF:15:76:2D:E9:A2:71:EF:4C:F4:9B:36:62:88:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F7D5ECB34911EEAFFE2478775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.202.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4e:86:76:37:26:fb:67:60:c5:da:ca:5b:ce:1f:30:07:e8:
47:61:8c:82:b9:6c:47:ce:45:c1:51:6b:5d:e6:26:a4:2c:0f:
35:4a:21:0e:da:d1:54:85:fe:74:17:bc:61:ab:0d:9d:94:58:
52:db:b3:5b:74:c5:e7:07:87:0b:18:47:55:ca:e1:0e:9e:eb:
e2:bf:82:14:d1:c2:c3:55:22:4c:1b:72:c0:e2:c0:6e:6b:b0:
ef:ef:a6:dc:2e:7a:41:b9:69:77:e4:72:b6:07:33:e7:5f:74:
81:d4:87:f8:8f:25:32:6c:ba:01:ee:16:13:c1:f7:13:5e:12:
ec:c9:cc:46:b4:b4:c3:47:24:9e:95:ab:2d:76:38:8e:4a:a1:
cc:bd:89:f3:96:5d:c1:79:89:51:3a:56:e0:a1:48:9f:2b:1f:
58:47:03:82:5e:1e:f2:c3:28:c2:ee:f6:5a:aa:dd:64:87:bb:
bc:df:f7:2a:a8:12:6c:16:f4:ac:95:43:f8:a9:2c:48:42:69:
2a:17:56:1e:b1:62:a7:d6:31:ed:d4:eb:2d:c5:eb:ed:01:b1:
ef:ed:ee:c4:f1:66:38:19:e4:f0:71:04:94:6f:ec:ac:e3:0f:
db:70:0a:40:8d:86:6c:97:79:05:06:34:7f:bb:8e:86:a1:b0:
6c:81:8e:df
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdUAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTUwMTU2MzhaFw0yNDEyMTMwMTU2MzhaMBgxFjAU
BgNVBAMTDTY1YTQ5MGRhLWE0ZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCu161pHC1ox9SqhFQX+vMdoEHWoyw/GC8SR4tRjLa3pWQy8jxkiwqo/e80
03O++M1RmievhrgPGvSlIHhCDGzv7dEdaYKdGm17PNlOBYaWu5lW2+Waork8UzmD
RtzedIlRmivT+ouj7B7SJw8oLPl1ircoATtEiryrfCdp9e4ldScqF6uQAHN8cbgH
FNgDbrLWkrSMrn4bgHIPe4naJ2+KUo56enSMKSRZxDObqE4vAvSVaJszU/NgbABW
LYx5lqaAp6jqZd+qtitig6Asz22xNAQZOL9s0Xw2yxQCNJ04lBB+6DoIKaGbTksf
RIpkBIU8X4ghFnYfAhl9sH+5oHpDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvAT4
4e3/FXYt6aJx70z0mzZiiAswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzUzRjdENUVDQjM0OTExRUVBRkZFMjQ3ODc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazcowDQYJKoZIhvcNAQEL
BQADggEBAHBOhnY3JvtnYMXaylvOHzAH6EdhjIK5bEfORcFRa13mJqQsDzVKIQ7a
0VSF/nQXvGGrDZ2UWFLbs1t0xecHhwsYR1XK4Q6e6+K/ghTRwsNVIkwbcsDiwG5r
sO/vptwuekG5aXfkcrYHM+dfdIHUh/iPJTJsugHuFhPB9xNeEuzJzEa0tMNHJJ6V
qy12OI5Kocy9ifOWXcF5iVE6VuChSJ8rH1hHA4JeHvLDKMLu9lqq3WSHu7zf9yqo
EmwW9KyVQ/ipLEhCaSoXVh6xYqfWMe3U6y3F6+0Bse/t7sTxZjgZ5PBxBJRv7Kzj
D9twCkCNhmyXeQUGNH+7joahsGyBjt8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org