Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60267C12F49211EEAD669A5E775412E6.roa
File: 60267C12F49211EEAD669A5E775412E6.roa (raw, json)
Hash identifier: mwy0qLcke2rF/uXse+0wKP37Htug3vYQcHM0QFrRW0o=
Subject key identifier: D3:A6:02:61:06:9C:97:FA:32:5B:B1:2E:31:79:5D:46:01:BD:A4:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60267C12F49211EEAD669A5E775412E6.roa
Signing time: Sun 07 Apr 2024 03:53:21 +0000
ROA not before: Sun 07 Apr 2024 03:53:18 +0000
ROA not after: Mon 13 May 2024 03:53:18 +0000
asID: 138915
IP address blocks: 154.206.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43462 (0xa9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 03:53:18 2024 GMT
Not After : May 13 03:53:18 2024 GMT
Subject: CN=661218b1-290f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:12:53:63:fb:52:e4:5b:b5:e5:f5:5d:71:
51:0d:67:49:9a:3d:7c:d8:5d:5a:77:94:9d:80:63:
f4:ba:0a:65:7f:08:92:7b:61:cf:58:bb:4e:c5:e5:
b7:1d:46:69:02:8c:b6:88:46:8e:47:97:57:89:a2:
d1:31:1a:e1:e2:45:66:79:59:da:86:c4:63:a5:1f:
45:33:d6:78:cc:4f:b6:7d:1a:c3:98:84:60:ec:15:
af:c1:87:59:8d:f7:48:fd:8f:a6:e6:32:f1:e5:a7:
a7:32:a2:e0:78:08:ce:c1:aa:68:ae:ad:eb:be:32:
5c:b9:a8:a4:fc:cd:2a:80:bd:2d:a3:d0:20:91:c4:
10:c7:1c:b1:85:3b:84:ce:3a:85:0f:c2:7e:9e:56:
77:7b:7e:c1:da:3d:f9:f2:67:ca:f6:e6:87:a5:0e:
87:5d:73:b3:36:33:90:33:a2:d1:01:23:35:56:84:
40:8d:60:66:42:66:3e:d3:1f:62:71:3e:3c:d9:7e:
21:45:b0:9d:e7:b0:14:7e:9f:33:1d:e3:28:e4:27:
96:95:af:e6:ee:c8:f8:f4:81:58:06:c9:2f:a0:74:
01:36:58:a5:a8:8f:4f:d3:bb:df:ec:e3:2b:44:c8:
a6:95:cb:3a:72:e1:f2:5d:85:f0:2a:22:af:dd:2e:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:02:61:06:9C:97:FA:32:5B:B1:2E:31:79:5D:46:01:BD:A4:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60267C12F49211EEAD669A5E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.80.0/23
Signature Algorithm: sha256WithRSAEncryption
05:46:03:4c:de:45:a2:b1:0b:ba:95:f6:69:f0:bb:f2:f6:48:
5d:58:98:62:39:72:bc:5e:30:bc:ee:08:9e:56:2b:ca:39:ea:
b7:b6:6a:06:e7:1b:9a:1e:c7:6d:6d:93:80:01:75:19:79:bc:
d2:e2:f7:72:be:4b:97:ec:fa:6f:ef:21:76:43:99:c5:3d:2c:
d3:a3:14:c8:40:02:e2:62:c3:6c:1f:ce:df:5c:8e:af:b6:0c:
ea:fe:89:90:78:39:5b:9e:ce:c9:eb:3d:92:83:b5:2b:12:14:
75:78:4a:a7:f0:2c:94:33:9a:24:cb:57:f3:b7:4b:76:08:1b:
2a:c9:5a:54:1c:ee:13:49:70:b4:6c:82:2e:6d:6f:36:83:7a:
ed:84:99:b0:c4:2f:de:19:ac:52:56:bd:06:db:f1:fd:13:59:
42:1d:45:20:27:7d:aa:fb:3e:e3:da:e6:bd:82:c1:31:dc:e0:
98:07:fd:8b:07:97:56:a5:75:f6:2f:25:21:ea:dc:05:41:e0:
ef:67:af:1c:20:fc:15:5a:11:d3:5b:a1:8e:69:fa:0a:4e:9b:
dc:61:fa:ee:63:c0:88:10:fa:45:8a:79:d4:76:b9:83:8b:09:
3b:1f:87:4d:2b:0c:b9:d1:64:73:b7:62:2c:cd:d2:da:e2:76:
41:5d:9b:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKnGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDA3MDM1MzE4WhcNMjQwNTEzMDM1MzE4WjAYMRYw
FAYDVQQDEw02NjEyMThiMS0yOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxZwSU2P7UuRbteX1XXFRDWdJmj182F1ad5SdgGP0ugplfwiSe2HPWLtO
xeW3HUZpAoy2iEaOR5dXiaLRMRrh4kVmeVnahsRjpR9FM9Z4zE+2fRrDmIRg7BWv
wYdZjfdI/Y+m5jLx5aenMqLgeAjOwaporq3rvjJcuaik/M0qgL0to9AgkcQQxxyx
hTuEzjqFD8J+nlZ3e37B2j358mfK9uaHpQ6HXXOzNjOQM6LRASM1VoRAjWBmQmY+
0x9icT482X4hRbCd57AUfp8zHeMo5CeWla/m7sj49IFYBskvoHQBNlilqI9P07vf
7OMrRMimlcs6cuHyXYXwKiKv3S6ymQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNOm
AmEGnJf6MluxLjF5XUYBvaQyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MDI2N0MxMkY0OTIxMUVFQUQ2NjlBNUU3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms5QMA0GCSqGSIb3DQEB
CwUAA4IBAQAFRgNM3kWisQu6lfZp8Lvy9khdWJhiOXK8XjC87gieVivKOeq3tmoG
5xuaHsdtbZOAAXUZebzS4vdyvkuX7Ppv7yF2Q5nFPSzToxTIQALiYsNsH87fXI6v
tgzq/omQeDlbns7J6z2Sg7UrEhR1eEqn8CyUM5oky1fzt0t2CBsqyVpUHO4TSXC0
bIIubW82g3rthJmwxC/eGaxSVr0G2/H9E1lCHUUgJ32q+z7j2ua9gsEx3OCYB/2L
B5dWpXX2LyUh6twFQeDvZ68cIPwVWhHTW6GOafoKTpvcYfruY8CIEPpFinnUdrmD
iwk7H4dNKwy50WRzt2IszdLa4nZBXZsE
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:21 2024 by rpki-client on console-ams.rpki-client.org