Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5505B0C0F00811EEBBC8914C775412E6.roa
File: 5505B0C0F00811EEBBC8914C775412E6.roa (raw, json)
Hash identifier: MkpH+I0dPvwbKOVP9LzN4Tab0BVxmHA7ZoPvmMIxZuk=
Subject key identifier: 26:01:71:D6:F1:61:10:6C:8E:A0:84:F5:B4:A6:BA:E0:A0:3E:EA:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A822
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5505B0C0F00811EEBBC8914C775412E6.roa
Signing time: Mon 01 Apr 2024 09:15:07 +0000
ROA not before: Mon 01 Apr 2024 09:15:04 +0000
ROA not after: Sat 11 May 2024 09:15:04 +0000
asID: 138915
IP address blocks: 154.205.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43042 (0xa822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:15:04 2024 GMT
Not After : May 11 09:15:04 2024 GMT
Subject: CN=660a7b1b-be2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:ed:f5:77:d3:ca:70:dd:dc:70:d3:a1:4a:
47:81:8a:5d:57:86:73:f3:4b:39:d2:5f:ac:c0:19:
ce:88:12:b3:3e:bf:11:94:76:74:8b:78:b2:e3:a0:
47:79:a6:c8:11:7d:46:31:59:9a:61:c2:b4:db:53:
48:10:5e:eb:94:a4:a3:e5:83:45:2c:6e:d5:72:0b:
ad:51:05:40:4d:2a:60:43:99:16:e8:cf:b6:89:04:
5e:7f:09:1f:8f:52:28:f2:7b:0a:5a:46:9b:29:f9:
90:c4:b0:e7:e8:b6:e0:da:df:fe:e3:8c:54:81:77:
fa:c9:79:19:ca:21:1a:88:86:5b:52:35:9d:3e:97:
c5:79:10:3c:49:fb:c1:b8:2e:4a:fd:70:f5:b1:49:
0d:3b:c8:a1:36:76:93:11:39:5e:c8:74:35:eb:a5:
bc:51:d7:07:2e:cd:cc:4e:9c:ce:a2:25:d0:c3:3d:
7e:f4:c3:c6:b7:aa:ae:8d:1a:11:0b:2d:0c:02:3e:
2a:d5:50:30:9b:87:93:d9:47:10:51:b3:ec:79:76:
0f:6a:66:85:a9:8f:fd:eb:e1:e8:8a:4e:39:9c:63:
02:de:85:ee:21:5f:35:ab:94:dc:55:88:0d:b7:6a:
49:09:8a:a2:aa:3a:cd:1f:33:b6:1f:81:6c:91:5a:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:01:71:D6:F1:61:10:6C:8E:A0:84:F5:B4:A6:BA:E0:A0:3E:EA:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5505B0C0F00811EEBBC8914C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.153.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:43:00:87:55:13:bd:09:5e:47:be:40:80:af:bf:da:69:ea:
f7:10:77:fd:34:cb:0d:07:07:ec:ea:b9:6f:e6:e2:5a:b4:99:
e5:e6:8e:d1:ae:78:08:eb:a7:66:41:1c:dd:38:f6:15:61:b6:
ab:29:dc:fd:65:6d:ac:5c:56:9e:bf:fe:3e:4e:04:59:82:37:
4c:fc:15:0f:7a:54:27:b4:2e:79:1a:51:a7:13:8b:56:df:92:
14:81:08:c9:68:5a:a0:53:55:c8:92:39:05:5f:50:3a:f6:45:
66:db:2c:3d:ac:38:4e:80:d4:66:52:d1:ed:20:8e:e6:d3:1d:
04:23:da:6f:00:bd:1b:93:9f:f4:46:bf:d1:70:60:49:6a:8f:
89:2e:14:35:eb:04:b3:f5:2d:46:8e:9d:e2:21:30:2d:ec:65:
69:90:d0:a0:99:0c:63:71:3b:58:f6:73:f9:8c:47:2a:d1:ac:
55:45:ad:6b:0e:08:62:5b:3e:3c:df:58:e7:60:07:58:cc:27:
6d:ea:1b:6d:09:ad:a5:b0:41:fa:e0:46:22:b9:f0:5a:c3:ac:
70:7b:2d:df:d5:87:8e:cc:82:40:c0:bf:d7:a2:02:9e:90:7d:
e9:e0:bb:86:fb:55:6e:bd:24:d9:93:13:fb:e8:36:22:39:eb:
9a:fb:ea:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKgiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDkxNTA0WhcNMjQwNTExMDkxNTA0WjAYMRYw
FAYDVQQDEw02NjBhN2IxYi1iZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtaTt9XfTynDd3HDToUpHgYpdV4Zz80s50l+swBnOiBKzPr8RlHZ0i3iy
46BHeabIEX1GMVmaYcK021NIEF7rlKSj5YNFLG7VcgutUQVATSpgQ5kW6M+2iQRe
fwkfj1Io8nsKWkabKfmQxLDn6Lbg2t/+44xUgXf6yXkZyiEaiIZbUjWdPpfFeRA8
SfvBuC5K/XD1sUkNO8ihNnaTETleyHQ166W8UdcHLs3MTpzOoiXQwz1+9MPGt6qu
jRoRCy0MAj4q1VAwm4eT2UcQUbPseXYPamaFqY/96+Hoik45nGMC3oXuIV81q5Tc
VYgNt2pJCYqiqjrNHzO2H4FskVrXnQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCYB
cdbxYRBsjqCE9bSmuuCgPupzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81NTA1QjBDMEYwMDgxMUVFQkJDODkxNEM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2ZMA0GCSqGSIb3DQEB
CwUAA4IBAQCeQwCHVRO9CV5HvkCAr7/aaer3EHf9NMsNBwfs6rlv5uJatJnl5o7R
rngI66dmQRzdOPYVYbarKdz9ZW2sXFaev/4+TgRZgjdM/BUPelQntC55GlGnE4tW
35IUgQjJaFqgU1XIkjkFX1A69kVm2yw9rDhOgNRmUtHtII7m0x0EI9pvAL0bk5/0
Rr/RcGBJao+JLhQ16wSz9S1Gjp3iITAt7GVpkNCgmQxjcTtY9nP5jEcq0axVRa1r
DghiWz4831jnYAdYzCdt6httCa2lsEH64EYiufBaw6xwey3f1YeOzIJAwL/XogKe
kH3p4LuG+1VuvSTZkxP76DYiOeua++qN
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org