Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58F8496C278211EE9C74CB1E4AD9E6FC.roa
File: 58F8496C278211EE9C74CB1E4AD9E6FC.roa (raw, json)
Hash identifier: MYJybTBSC4VBAaCkz/+oZtT2QlADbLyANBD4THdfdxQ=
Subject key identifier: B9:81:01:CD:31:3E:57:16:6F:E8:FA:7F:D9:60:E7:5D:3A:76:6C:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 339F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58F8496C278211EE9C74CB1E4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:52:09 +0000
ROA not before: Fri 21 Jul 2023 04:52:05 +0000
ROA not after: Thu 13 Jun 2024 04:52:05 +0000
asID: 5065
IP address blocks: 154.212.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13215 (0x339f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:52:05 2023 GMT
Not After : Jun 13 04:52:05 2024 GMT
Subject: CN=64ba0ef9-84ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:88:7d:70:04:ed:8d:11:39:c3:6d:ac:d2:67:
5a:25:70:d1:41:dc:08:df:e5:de:d6:a9:1f:a6:03:
a7:30:7b:65:6f:de:1f:4f:15:92:a3:6e:a5:64:eb:
80:2f:5b:70:4d:fc:bd:16:38:e3:ee:e7:62:df:de:
2c:c4:10:19:dd:09:17:59:6f:84:51:3f:02:3a:76:
e9:4f:86:93:23:f4:8a:86:f2:54:aa:c9:c0:de:81:
17:eb:ea:41:f8:ba:78:5d:ff:a7:1a:9e:5d:8b:77:
10:95:ca:25:67:52:06:26:05:ae:d4:a3:c3:1d:b5:
ab:99:84:c0:26:f3:cf:4f:57:37:69:ff:47:d0:09:
da:73:6b:34:93:8d:05:7c:bf:02:77:29:8c:5c:57:
ea:61:00:a4:5e:e5:07:3c:ad:4a:14:3d:70:0f:ba:
eb:cb:77:11:6c:8e:ac:b0:ec:77:8f:84:f9:65:a3:
f9:90:41:ea:0c:27:f8:dd:8b:66:64:4f:f0:9e:ae:
9f:68:1f:bf:4f:41:9c:4a:a3:bb:8d:23:26:e7:4c:
59:bd:e7:f0:03:0d:67:1e:9e:b4:11:ae:a2:f3:59:
3e:36:a9:35:4d:b0:0a:56:05:53:85:f0:c8:7a:b5:
b8:30:1b:eb:97:81:41:72:14:dd:b3:33:40:b7:53:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:01:CD:31:3E:57:16:6F:E8:FA:7F:D9:60:E7:5D:3A:76:6C:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58F8496C278211EE9C74CB1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7a:78:be:4d:ef:5d:b4:b7:92:3e:c3:ef:c9:04:01:c1:77:
45:c3:88:0b:55:fb:e6:d3:71:3a:48:54:8a:d3:eb:c8:66:9c:
3e:3a:66:5c:ec:16:9f:10:7b:85:f5:c8:04:f1:1f:64:16:8b:
59:a1:b2:7f:28:ac:4b:9a:ca:0e:bc:f7:7b:49:d8:21:db:6b:
a5:74:82:f5:25:4c:32:87:12:72:16:f7:02:e5:61:24:c1:b4:
fa:ac:55:1a:fa:0c:3e:6d:41:b5:50:44:f9:a8:f8:dd:1f:f0:
2e:3a:de:b7:1a:47:f8:a1:0a:67:12:10:ff:ad:dd:c9:cf:79:
a7:ca:da:65:c3:26:bb:5c:0a:d7:d0:cc:44:9a:41:d8:fd:4e:
b1:1b:99:ee:67:a2:3d:89:c8:2c:c4:32:c0:28:a0:8c:0b:77:
32:5d:4f:7b:1b:fb:c2:9a:19:f5:2a:e9:5b:ee:33:4a:61:4c:
30:ae:29:aa:03:bf:66:4b:e2:0c:8d:4a:c9:cc:ad:0e:20:df:
63:ee:ed:dd:29:c9:5e:af:16:f5:80:81:75:e9:cb:bd:6f:c5:
01:5a:5b:47:7f:55:20:2d:bf:96:4e:3c:15:4d:72:7a:39:b6:
2d:ce:00:a9:26:5c:b5:b9:8a:5c:21:67:6e:cf:8d:fd:5f:f9:
59:93:de:ad
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICM58wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA3MjEwNDUyMDVaFw0yNDA2MTMwNDUyMDVaMBgxFjAU
BgNVBAMTDTY0YmEwZWY5LTg0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1iH1wBO2NETnDbazSZ1olcNFB3Ajf5d7WqR+mA6cwe2Vv3h9PFZKjbqVk
64AvW3BN/L0WOOPu52Lf3izEEBndCRdZb4RRPwI6dulPhpMj9IqG8lSqycDegRfr
6kH4unhd/6canl2LdxCVyiVnUgYmBa7Uo8MdtauZhMAm889PVzdp/0fQCdpzazST
jQV8vwJ3KYxcV+phAKRe5Qc8rUoUPXAPuuvLdxFsjqyw7HePhPllo/mQQeoMJ/jd
i2ZkT/Cerp9oH79PQZxKo7uNIybnTFm95/ADDWcenrQRrqLzWT42qTVNsApWBVOF
8Mh6tbgwG+uXgUFyFN2zM0C3UzunAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUuYEB
zTE+VxZv6Pp/2WDnXTp2bDYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzU4Rjg0OTZDMjc4MjExRUU5Qzc0Q0IxRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa1BYwDQYJKoZIhvcNAQEL
BQADggEBAB96eL5N7120t5I+w+/JBAHBd0XDiAtV++bTcTpIVIrT68hmnD46Zlzs
Fp8Qe4X1yATxH2QWi1mhsn8orEuayg6893tJ2CHba6V0gvUlTDKHEnIW9wLlYSTB
tPqsVRr6DD5tQbVQRPmo+N0f8C463rcaR/ihCmcSEP+t3cnPeafK2mXDJrtcCtfQ
zESaQdj9TrEbme5noj2JyCzEMsAooIwLdzJdT3sb+8KaGfUq6VvuM0phTDCuKaoD
v2ZL4gyNSsnMrQ4g32Pu7d0pyV6vFvWAgXXpy71vxQFaW0d/VSAtv5ZOPBVNcno5
ti3OAKkmXLW5ilwhZ27Pjf1f+VmT3q0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org