Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5482534EF47F11EE9C4563BA775412E6.roa
File: 5482534EF47F11EE9C4563BA775412E6.roa (raw, json)
Hash identifier: eLhi5PB5Ax1zU/nrinAnopvwh6hViooElZYcLeRuKZo=
Subject key identifier: 82:48:93:A4:9F:62:14:07:B0:FB:AA:BC:C7:BB:9D:CC:E4:18:39:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5482534EF47F11EE9C4563BA775412E6.roa
Signing time: Sun 07 Apr 2024 01:37:01 +0000
ROA not before: Sun 07 Apr 2024 01:36:58 +0000
ROA not after: Mon 13 May 2024 01:36:58 +0000
asID: 138915
IP address blocks: 154.206.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43426 (0xa9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:36:58 2024 GMT
Not After : May 13 01:36:58 2024 GMT
Subject: CN=6611f8bd-287b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:60:c7:74:f2:14:b1:f4:9f:73:d3:2b:f9:
aa:8c:91:d1:91:df:e0:96:7c:a0:9e:2e:d0:1a:48:
23:2f:fc:fc:51:9b:4e:1b:12:85:3c:d0:03:a9:ec:
7c:96:60:c5:36:16:58:9b:20:9b:b4:2b:a4:fe:6b:
8c:35:c5:de:bc:a0:89:22:3a:13:33:4a:91:e0:c5:
fd:9a:e9:ab:8b:47:2f:1c:a6:15:5b:88:fc:61:1b:
63:10:5e:80:cc:a7:ac:19:b4:ee:9e:0a:24:50:d1:
f0:81:37:88:c2:9b:ac:e6:df:99:13:2c:02:00:d8:
d3:89:6e:f7:b0:44:a7:74:74:cc:fd:56:a0:20:b2:
55:e2:8b:9b:a9:20:77:52:6c:6a:1e:8e:5b:fd:97:
a9:fa:1c:d1:07:89:34:47:00:cd:d2:0b:56:bf:dc:
4f:fb:d9:c0:10:0d:7a:f8:fd:c9:e7:52:78:e2:4f:
54:e2:8a:57:78:86:49:d2:af:44:ed:35:7a:c7:36:
c0:dd:82:6a:2c:7f:42:6f:27:2b:90:6d:db:22:2c:
18:6c:06:5c:af:27:09:d2:67:1e:9e:6f:19:5f:c8:
02:09:78:8e:ec:cf:83:3c:a3:ca:20:54:d8:c6:e1:
63:b9:b7:7f:e9:7d:57:08:45:30:21:36:81:f8:af:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:93:A4:9F:62:14:07:B0:FB:AA:BC:C7:BB:9D:CC:E4:18:39:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5482534EF47F11EE9C4563BA775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.114.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:03:d6:bc:b6:46:b3:45:83:49:dc:92:21:bd:c8:66:42:31:
e7:63:d7:d5:ea:0c:8f:8b:06:88:6c:c2:69:a3:55:77:e9:20:
db:c9:d7:69:e6:75:22:cc:6f:3d:e6:fd:17:e6:9a:11:6e:32:
ca:46:0b:df:5b:41:33:4c:0d:3f:a1:28:fb:11:c5:37:70:89:
b9:58:92:be:b4:c1:dd:7d:31:0c:80:d5:5f:3a:45:a7:e1:bc:
12:c6:54:93:fc:21:ec:7c:fe:56:94:8a:af:e2:f2:85:5d:e1:
35:0b:c7:c0:da:f8:86:be:ad:47:50:30:b1:36:ae:0c:7d:b8:
ba:bd:13:8f:13:32:b9:e8:36:13:0d:0c:75:35:06:2c:48:10:
41:2b:5d:5f:6c:06:04:07:1f:1a:03:30:8a:1b:32:6b:b3:7f:
a7:1a:fe:73:2f:31:d9:d5:44:38:63:13:6a:4e:be:50:f1:f2:
b9:82:35:69:00:05:9f:1f:25:7d:ec:80:de:f8:01:37:31:88:
66:19:ea:d6:fe:a4:79:1b:f7:10:11:22:29:f5:6a:3b:af:1c:
0f:ca:ea:8f:83:e3:f8:0f:70:8d:0e:01:ab:b3:0c:e5:48:1c:
e1:41:2c:4b:a2:77:1b:ef:26:c2:63:c3:70:f9:32:a9:45:94:
ef:28:33:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKmiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDA3MDEzNjU4WhcNMjQwNTEzMDEzNjU4WjAYMRYw
FAYDVQQDEw02NjExZjhiZC0yODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA06pgx3TyFLH0n3PTK/mqjJHRkd/glnygni7QGkgjL/z8UZtOGxKFPNAD
qex8lmDFNhZYmyCbtCuk/muMNcXevKCJIjoTM0qR4MX9mumri0cvHKYVW4j8YRtj
EF6AzKesGbTungokUNHwgTeIwpus5t+ZEywCANjTiW73sESndHTM/VagILJV4oub
qSB3UmxqHo5b/Zep+hzRB4k0RwDN0gtWv9xP+9nAEA16+P3J51J44k9U4opXeIZJ
0q9E7TV6xzbA3YJqLH9CbycrkG3bIiwYbAZcrycJ0mcenm8ZX8gCCXiO7M+DPKPK
IFTYxuFjubd/6X1XCEUwITaB+K/YDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIJI
k6SfYhQHsPuqvMe7nczkGDnfMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NDgyNTM0RUY0N0YxMUVFOUM0NTYzQkE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms5yMA0GCSqGSIb3DQEB
CwUAA4IBAQB+A9a8tkazRYNJ3JIhvchmQjHnY9fV6gyPiwaIbMJpo1V36SDbyddp
5nUizG895v0X5poRbjLKRgvfW0EzTA0/oSj7EcU3cIm5WJK+tMHdfTEMgNVfOkWn
4bwSxlST/CHsfP5WlIqv4vKFXeE1C8fA2viGvq1HUDCxNq4Mfbi6vROPEzK56DYT
DQx1NQYsSBBBK11fbAYEBx8aAzCKGzJrs3+nGv5zLzHZ1UQ4YxNqTr5Q8fK5gjVp
AAWfHyV97IDe+AE3MYhmGerW/qR5G/cQESIp9Wo7rxwPyuqPg+P4D3CNDgGrswzl
SBzhQSxLoncb7ybCY8Nw+TKpRZTvKDP5
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org