Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B2210F4EFF211EEB7D589A1775412E6.roa
File: 5B2210F4EFF211EEB7D589A1775412E6.roa (raw, json)
Hash identifier: iNJQ7jhZo0rdA176pqTlTfbgYWB7iRGDo3nzPp/r+HU=
Subject key identifier: 8B:0E:4A:1C:4D:2A:80:EF:52:30:64:22:BC:67:9E:2B:B8:FB:44:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B2210F4EFF211EEB7D589A1775412E6.roa
Signing time: Mon 01 Apr 2024 06:37:49 +0000
ROA not before: Mon 01 Apr 2024 06:37:45 +0000
ROA not after: Tue 07 May 2024 06:37:45 +0000
asID: 138915
IP address blocks: 154.223.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42954 (0xa7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:37:45 2024 GMT
Not After : May 7 06:37:45 2024 GMT
Subject: CN=660a563c-ce54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:0e:50:32:52:3b:57:7e:4b:20:db:d2:12:
b6:f9:9d:7a:c8:c6:c6:52:35:5b:1b:d5:53:a7:55:
41:c8:fc:0a:f0:ba:94:2a:bf:ef:27:1e:dc:ff:45:
21:ad:43:e4:2e:ad:52:aa:29:b3:73:fe:37:bf:92:
5b:5b:d3:8f:b1:1e:02:4e:47:93:83:9c:48:e2:28:
c3:ca:49:5c:3d:5c:cd:35:4d:66:46:43:18:e8:fa:
74:1d:ef:91:05:6c:c6:da:e4:4e:23:a4:41:7c:e5:
9a:08:c8:81:9e:f3:ce:22:4e:8e:96:d1:62:6d:a0:
42:8c:b4:48:3c:2c:ca:d4:fa:eb:d3:df:9b:75:fd:
11:e7:b1:a4:eb:4e:50:29:df:5f:66:a4:81:cc:0f:
e6:75:0f:91:78:e9:62:84:65:26:65:8d:a3:06:8e:
d1:63:5f:15:b0:b7:98:8a:13:49:4a:b7:f9:53:9a:
94:0b:52:b8:21:1e:fe:b6:1c:9f:bf:9a:67:a1:6b:
f5:30:55:9c:1d:8f:38:26:35:fc:97:91:41:04:92:
4a:f6:9b:8c:61:31:2e:f3:40:a0:75:1c:9e:14:30:
32:5a:f7:00:b4:0d:8b:da:87:4b:0b:4c:94:c1:ed:
5c:65:3b:e7:48:2e:1d:a5:81:ad:f7:dd:f7:8e:f3:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0E:4A:1C:4D:2A:80:EF:52:30:64:22:BC:67:9E:2B:B8:FB:44:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B2210F4EFF211EEB7D589A1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.56.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:af:f9:1b:06:7c:d0:10:d7:88:21:7a:05:cf:e9:9f:5d:aa:
15:9a:31:b6:e5:b5:6b:98:53:86:44:d0:92:5d:1f:d3:09:e5:
bc:34:9b:3c:f3:1b:5e:4e:b8:f6:27:50:bc:19:6d:1d:20:96:
53:15:bd:33:8e:80:4e:21:5a:3b:4a:02:b1:7a:3a:09:c0:0d:
38:49:08:f7:81:07:32:51:f2:3b:a0:87:7a:26:e6:89:97:03:
b1:95:75:f8:b3:08:d1:d8:55:d8:0b:9a:3c:0a:56:78:44:b5:
5b:cf:58:d9:1c:5d:82:a7:16:5e:ba:0c:10:8e:20:cd:14:d0:
e4:f9:f3:3f:9c:eb:5c:a4:94:76:90:fa:fa:d8:e3:bf:64:72:
85:78:67:46:2c:77:1b:e7:fe:be:2f:e3:f4:cb:86:a3:46:da:
3c:0f:b0:c7:0a:a5:e3:e4:26:49:14:eb:aa:bd:37:86:52:6d:
8d:94:80:e0:9a:69:fc:1d:2c:0f:fa:70:68:26:12:6a:59:69:
1b:bc:eb:e1:11:c1:0a:a5:3e:e2:f7:7b:44:b5:5c:57:31:39:
b2:07:71:e6:40:64:5c:f2:de:54:7a:c5:90:03:da:c7:fd:65:
6f:f0:a1:5b:d9:22:14:1a:3c:0c:5f:63:25:44:73:9a:12:b2:
94:a9:d0:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKfKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDYzNzQ1WhcNMjQwNTA3MDYzNzQ1WjAYMRYw
FAYDVQQDEw02NjBhNTYzYy1jZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0BsOUDJSO1d+SyDb0hK2+Z16yMbGUjVbG9VTp1VByPwK8LqUKr/vJx7c
/0UhrUPkLq1Sqimzc/43v5JbW9OPsR4CTkeTg5xI4ijDyklcPVzNNU1mRkMY6Pp0
He+RBWzG2uROI6RBfOWaCMiBnvPOIk6OltFibaBCjLRIPCzK1Prr09+bdf0R57Gk
605QKd9fZqSBzA/mdQ+ReOlihGUmZY2jBo7RY18VsLeYihNJSrf5U5qUC1K4IR7+
thyfv5pnoWv1MFWcHY84JjX8l5FBBJJK9puMYTEu80CgdRyeFDAyWvcAtA2L2odL
C0yUwe1cZTvnSC4dpYGt9933jvMh4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIsO
ShxNKoDvUjBkIrxnniu4+0SHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81QjIyMTBGNEVGRjIxMUVFQjdENTg5QTE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt84MA0GCSqGSIb3DQEB
CwUAA4IBAQA9r/kbBnzQENeIIXoFz+mfXaoVmjG25bVrmFOGRNCSXR/TCeW8NJs8
8xteTrj2J1C8GW0dIJZTFb0zjoBOIVo7SgKxejoJwA04SQj3gQcyUfI7oId6JuaJ
lwOxlXX4swjR2FXYC5o8ClZ4RLVbz1jZHF2CpxZeugwQjiDNFNDk+fM/nOtcpJR2
kPr62OO/ZHKFeGdGLHcb5/6+L+P0y4ajRto8D7DHCqXj5CZJFOuqvTeGUm2NlIDg
mmn8HSwP+nBoJhJqWWkbvOvhEcEKpT7i93tEtVxXMTmyB3HmQGRc8t5UesWQA9rH
/WVv8KFb2SIUGjwMX2MlRHOaErKUqdAz
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org