Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583CF502155511EE96921C2F4AD9E6FC.roa
File: 583CF502155511EE96921C2F4AD9E6FC.roa (raw, json)
Hash identifier: htvDA1+uXiOweE7AFozjF0CMDWYgx/YNchISuOTWork=
Subject key identifier: DB:E7:3E:AF:DA:E5:71:6F:34:90:52:04:C4:23:FA:2C:13:FE:6D:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583CF502155511EE96921C2F4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 01:44:39 +0000
ROA not before: Wed 28 Jun 2023 01:44:36 +0000
ROA not after: Sat 29 Jun 2024 01:44:36 +0000
asID: 9304
IP address blocks: 154.223.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11809 (0x2e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 01:44:36 2023 GMT
Not After : Jun 29 01:44:36 2024 GMT
Subject: CN=649b9087-95b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:86:26:4f:a1:18:3a:24:a3:de:dd:f1:6f:
86:f4:4d:7c:98:cd:b8:34:32:c3:e6:f2:96:9a:aa:
b2:a1:7c:cf:fd:60:41:1c:95:28:14:91:b7:81:40:
c2:db:9b:b6:14:04:02:c9:2f:3a:36:ca:aa:a3:89:
41:33:56:aa:62:10:90:70:82:73:9f:ab:a2:d3:6d:
d1:a1:e1:79:d8:30:d2:44:e1:24:bb:b6:8b:d1:10:
eb:d3:ff:bd:22:7e:41:1c:61:82:f6:44:1c:3e:9d:
11:bc:f1:2e:ba:60:e6:56:5f:99:1d:ed:af:ce:10:
19:e8:a2:52:9b:18:54:6a:d1:f4:fa:dc:10:3c:eb:
86:1e:83:6b:49:24:55:c5:f7:d2:88:5b:72:cc:c7:
4a:50:7d:95:35:e5:3f:5f:45:2a:9f:59:33:e2:29:
36:87:80:1d:c6:c6:2a:22:15:74:b7:f2:1d:66:34:
b7:5c:b2:8e:c4:ee:f3:73:73:87:40:de:a3:7a:75:
45:68:fe:bb:c7:f3:e1:5a:f1:d0:06:ab:d5:12:25:
6d:c6:27:72:13:01:cc:19:ac:de:b3:28:02:c0:ae:
a0:ba:31:21:96:3e:f3:e7:84:56:54:f6:9e:8a:cf:
19:d5:7e:6f:d2:99:e5:7f:7d:2e:a0:83:d9:87:78:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:3E:AF:DA:E5:71:6F:34:90:52:04:C4:23:FA:2C:13:FE:6D:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/583CF502155511EE96921C2F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:14:9d:50:44:fe:7c:a9:3d:51:e0:75:ef:5c:c8:ca:6e:22:
8b:1c:b9:ad:28:53:ba:37:8c:16:0c:b6:0d:6b:24:aa:df:bc:
e5:38:b4:41:fa:f0:fd:67:6a:b6:a2:8d:b7:b1:4d:29:cb:4c:
df:ce:7a:de:22:9c:30:3e:bf:dc:3e:a2:38:0b:33:2d:d7:49:
17:b0:4f:df:fa:ec:8b:12:4c:f6:b4:f6:1f:ce:ce:21:60:8b:
91:ff:aa:1a:81:01:6c:66:63:aa:1d:98:e2:e6:d1:a4:b2:d8:
59:dc:8f:44:ba:a3:20:7b:97:41:ea:f6:49:5c:2e:8b:91:d4:
d0:45:44:41:26:30:1e:0f:d5:9d:64:f6:5f:50:89:35:13:9a:
86:54:d4:4e:13:57:0d:35:58:57:14:e3:39:f5:e3:df:fb:e5:
30:61:51:47:33:a3:30:ce:9d:26:97:c4:a8:ef:6e:ff:1c:a4:
9f:a9:e9:cc:0a:db:ca:ec:a5:86:30:e5:9d:b0:76:c5:5b:14:
70:97:3c:9c:f4:5b:db:9c:09:3f:40:11:7b:c2:6a:a2:b2:86:
68:f5:88:0e:cc:5e:6a:2e:24:16:f1:55:af:7d:0f:b2:fa:8e:
5b:1b:9c:e5:a7:54:bc:49:3b:18:90:08:87:88:67:74:02:d2:
65:6e:a3:0d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjgwMTQ0MzZaFw0yNDA2MjkwMTQ0MzZaMBgxFjAU
BgNVBAMTDTY0OWI5MDg3LTk1YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvoYYmT6EYOiSj3t3xb4b0TXyYzbg0MsPm8paaqrKhfM/9YEEclSgUkbeB
QMLbm7YUBALJLzo2yqqjiUEzVqpiEJBwgnOfq6LTbdGh4XnYMNJE4SS7tovREOvT
/70ifkEcYYL2RBw+nRG88S66YOZWX5kd7a/OEBnoolKbGFRq0fT63BA864Yeg2tJ
JFXF99KIW3LMx0pQfZU15T9fRSqfWTPiKTaHgB3GxioiFXS38h1mNLdcso7E7vNz
c4dA3qN6dUVo/rvH8+Fa8dAGq9USJW3GJ3ITAcwZrN6zKALArqC6MSGWPvPnhFZU
9p6KzxnVfm/SmeV/fS6gg9mHePd7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU2+c+
r9rlcW80kFIExCP6LBP+bfYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU4M0NGNTAyMTU1NTExRUU5NjkyMUMyRjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3wAwDQYJKoZIhvcNAQEL
BQADggEBAKcUnVBE/nypPVHgde9cyMpuIoscua0oU7o3jBYMtg1rJKrfvOU4tEH6
8P1naraijbexTSnLTN/Oet4inDA+v9w+ojgLMy3XSRewT9/67IsSTPa09h/OziFg
i5H/qhqBAWxmY6odmOLm0aSy2Fncj0S6oyB7l0Hq9klcLouR1NBFREEmMB4P1Z1k
9l9QiTUTmoZU1E4TVw01WFcU4zn149/75TBhUUczozDOnSaXxKjvbv8cpJ+p6cwK
28rspYYw5Z2wdsVbFHCXPJz0W9ucCT9AEXvCaqKyhmj1iA7MXmouJBbxVa99D7L6
jlsbnOWnVLxJOxiQCIeIZ3QC0mVuow0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org