Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60CBA6B6FD3311EE90216E11017001B1.roa
File: 60CBA6B6FD3311EE90216E11017001B1.roa (raw, json)
Hash identifier: crc7Rl3Y+nYKIdUGRlaVrfhYaBlywoqROlaxGec1ofA=
Subject key identifier: A0:62:BE:07:E3:5C:0A:CE:23:99:50:D8:C0:A2:C3:3A:96:C8:7A:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADF9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60CBA6B6FD3311EE90216E11017001B1.roa
Signing time: Thu 18 Apr 2024 03:26:01 +0000
ROA not before: Thu 18 Apr 2024 03:25:57 +0000
ROA not after: Sun 19 May 2024 03:25:57 +0000
asID: 29802
IP address blocks: 154.203.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44537 (0xadf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 03:25:57 2024 GMT
Not After : May 19 03:25:57 2024 GMT
Subject: CN=662092c9-2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:92:41:86:96:9f:11:33:75:48:b5:5a:73:
5a:e3:64:8d:35:4c:26:7a:90:cf:d6:53:6f:94:b9:
ec:55:fb:b5:0b:0f:80:a1:63:44:5e:4f:d4:c1:c8:
e9:a7:5a:5c:db:dc:b3:2b:db:1c:1e:f1:32:74:78:
d3:7e:6e:2e:b0:75:5d:1b:b6:e3:ac:2b:2d:83:c2:
d8:14:01:b2:4d:48:48:f5:7c:86:fb:cf:5c:f6:88:
09:08:b2:7f:8d:77:37:46:01:74:f5:cf:ef:33:d8:
55:a2:e8:d3:d9:65:54:f3:79:17:e6:32:90:22:8c:
15:c1:77:f9:32:b6:4f:bd:e3:09:5c:2e:71:71:93:
fd:46:9b:2e:67:51:51:bc:27:d9:65:e7:64:bd:90:
3c:bd:c6:43:dc:d6:9e:6c:77:48:2d:4f:0c:92:8f:
ad:de:fd:f6:a5:98:2a:ca:ea:eb:37:e3:61:ef:53:
e5:b6:30:44:41:90:be:1a:ed:26:2a:18:f7:d0:93:
77:74:f8:68:10:28:88:9e:d1:f9:eb:64:06:f0:11:
a1:db:72:72:d8:d6:1e:7d:f6:29:a2:20:eb:53:61:
0d:a4:1a:4b:17:ec:69:8d:fe:d3:76:c9:04:e9:db:
e9:b4:c6:7b:b2:5c:2d:c8:00:d3:77:99:ac:ce:fd:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:62:BE:07:E3:5C:0A:CE:23:99:50:D8:C0:A2:C3:3A:96:C8:7A:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60CBA6B6FD3311EE90216E11017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.40.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:82:c6:ae:ac:69:f2:49:b1:05:a5:61:53:fe:1b:bf:7b:ff:
7e:88:5e:47:e2:03:d1:40:cf:66:ba:0c:99:0b:85:9e:be:7f:
b3:25:ba:8c:e2:3c:7e:28:12:63:3b:3f:c3:5d:30:69:ed:cb:
da:3e:90:0c:6d:ed:8a:ea:d8:3e:4c:30:98:eb:ba:50:05:0f:
9b:68:7a:de:38:dd:29:42:97:2c:ff:c9:b6:7e:40:1c:68:20:
cc:1f:b9:17:f6:2b:83:5d:a6:00:22:e0:78:9e:6f:d7:8f:0c:
cb:72:65:f6:bc:9f:42:d6:0f:1f:e8:a0:55:e7:81:91:43:d0:
c2:bc:04:f1:71:04:5b:1b:0b:de:a2:7b:4f:fd:2f:d1:80:9f:
92:82:a0:d7:4f:68:92:7c:69:67:3d:f7:c0:c0:bb:e8:3b:8c:
35:f8:e9:2b:9e:7c:73:56:f1:b5:5c:3f:6e:6d:f9:31:e4:d2:
6f:53:6c:bf:54:c7:4a:c6:1b:40:ba:e4:7e:b0:8f:92:0e:9c:
6c:a0:3f:ef:94:bd:8c:6b:e4:42:4b:d1:15:94:5e:33:36:62:
bc:60:39:a4:10:af:d3:32:40:00:17:86:c1:1e:39:45:ad:49:
a2:43:d9:8e:bb:df:2d:af:e0:d8:de:3a:31:9e:00:10:e6:8d:
d3:4b:c5:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK35MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE4MDMyNTU3WhcNMjQwNTE5MDMyNTU3WjAYMRYw
FAYDVQQDEw02NjIwOTJjOS0yMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyPGSQYaWnxEzdUi1WnNa42SNNUwmepDP1lNvlLnsVfu1Cw+AoWNEXk/U
wcjpp1pc29yzK9scHvEydHjTfm4usHVdG7bjrCstg8LYFAGyTUhI9XyG+89c9ogJ
CLJ/jXc3RgF09c/vM9hVoujT2WVU83kX5jKQIowVwXf5MrZPveMJXC5xcZP9Rpsu
Z1FRvCfZZedkvZA8vcZD3NaebHdILU8Mko+t3v32pZgqyurrN+Nh71PltjBEQZC+
Gu0mKhj30JN3dPhoECiIntH562QG8BGh23Jy2NYeffYpoiDrU2ENpBpLF+xpjf7T
dskE6dvptMZ7slwtyADTd5mszv0ZhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKBi
vgfjXArOI5lQ2MCiwzqWyHpbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MENCQTZCNkZEMzMxMUVFOTAyMTZFMTEwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmssoMA0GCSqGSIb3DQEB
CwUAA4IBAQAqgsaurGnySbEFpWFT/hu/e/9+iF5H4gPRQM9mugyZC4Wevn+zJbqM
4jx+KBJjOz/DXTBp7cvaPpAMbe2K6tg+TDCY67pQBQ+baHreON0pQpcs/8m2fkAc
aCDMH7kX9iuDXaYAIuB4nm/XjwzLcmX2vJ9C1g8f6KBV54GRQ9DCvATxcQRbGwve
ontP/S/RgJ+SgqDXT2iSfGlnPffAwLvoO4w1+OkrnnxzVvG1XD9ubfkx5NJvU2y/
VMdKxhtAuuR+sI+SDpxsoD/vlL2Ma+RCS9EVlF4zNmK8YDmkEK/TMkAAF4bBHjlF
rUmiQ9mOu98tr+DY3joxngAQ5o3TS8U/
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org