Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CD2E20BC8911EE89ABD85E775412E6.roa
File: 62CD2E20BC8911EE89ABD85E775412E6.roa (raw, json)
Hash identifier: x2EDNesMFaoQLaqNMPctXOR69C914VGRY1JXdQ+WzfA=
Subject key identifier: 9C:21:24:64:D0:71:6B:DD:B6:1D:3B:52:69:B2:12:62:7D:B9:D5:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7EB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CD2E20BC8911EE89ABD85E775412E6.roa
Signing time: Fri 26 Jan 2024 20:27:55 +0000
ROA not before: Fri 26 Jan 2024 20:27:52 +0000
ROA not after: Fri 14 Jun 2024 20:27:52 +0000
asID: 209242
IP address blocks: 154.197.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32434 (0x7eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 20:27:52 2024 GMT
Not After : Jun 14 20:27:52 2024 GMT
Subject: CN=65b415cb-990c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:da:39:03:a5:df:f6:89:be:f5:0f:05:72:
6c:74:1b:9e:d4:96:ed:28:4f:47:94:9f:26:0c:56:
14:15:c3:0c:57:f3:ac:3e:5d:c9:3a:c0:02:0f:34:
f5:c5:c7:f2:ac:f0:7a:ef:30:f7:4e:49:85:12:78:
8d:25:e1:72:ba:df:c3:d3:bb:68:42:82:c9:37:03:
f5:3a:7f:dc:28:92:7b:5a:a4:ff:e6:f3:67:3c:09:
5c:d6:81:e3:93:7d:44:65:55:b0:3a:0c:4d:62:7a:
45:b6:ac:24:9b:37:b4:fc:db:7d:aa:a1:35:53:24:
60:34:6d:70:c3:11:ac:67:c4:82:e8:55:5f:1a:1e:
b1:c5:93:8a:34:dd:85:45:8b:a3:0b:d9:8b:c3:9d:
ff:83:a5:06:94:f5:a0:3a:92:93:8f:f2:80:00:00:
31:84:46:b9:33:d6:09:47:03:8e:89:30:13:55:a4:
ad:af:e9:8e:75:e1:24:bd:61:dc:25:cb:f4:96:58:
35:1e:be:36:66:a8:59:57:81:13:61:ed:47:69:fd:
28:df:4c:58:0a:d2:36:8f:32:de:59:9b:9a:49:03:
f9:99:7a:26:40:9e:38:92:f6:e7:e8:52:2e:e7:5c:
93:14:89:bc:4f:2b:45:0d:a8:cc:5d:90:3d:6a:45:
9b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:21:24:64:D0:71:6B:DD:B6:1D:3B:52:69:B2:12:62:7D:B9:D5:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62CD2E20BC8911EE89ABD85E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:58:25:5a:95:1a:b9:b6:62:cd:bf:ae:da:70:5a:7b:29:f2:
7e:c5:d0:b1:cf:82:1f:bd:d9:ae:03:f9:8d:4c:78:9c:26:eb:
b1:8e:b5:ab:31:19:16:2b:0d:e7:35:6a:4c:32:57:3a:01:01:
cf:2e:28:7a:05:48:78:c1:dd:66:e9:d8:93:c8:34:e6:e0:24:
65:d2:ce:6d:d8:0f:4f:55:f2:3b:e6:98:55:59:db:7f:07:1b:
21:ec:2c:f7:34:ad:65:d1:46:25:5a:1e:54:05:8f:dc:aa:34:
dd:27:80:9c:b2:53:44:1d:48:ab:3e:c7:c3:4a:11:bd:52:53:
88:2e:d8:12:ba:6f:f6:78:7a:bb:ea:65:94:50:2f:27:6e:bf:
2d:0c:52:d3:7f:6e:5f:ac:ad:4f:67:56:06:f5:ed:90:00:fc:
f7:b1:35:80:4b:94:3a:0e:d7:5b:7c:85:c8:9d:2c:6e:2e:fa:
79:0c:84:3f:cf:43:ef:ee:e2:28:79:92:a4:af:92:94:d9:e3:
25:c9:72:30:04:d4:1a:d5:02:47:17:18:c3:24:8c:cc:b2:26:
3f:79:02:ea:e4:7f:8e:04:50:13:0d:80:1b:2b:28:d3:0d:42:
c5:42:97:1b:c9:45:62:9c:e0:91:b9:de:c4:98:24:f9:02:f4:
d5:63:89:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICfrIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMjYyMDI3NTJaFw0yNDA2MTQyMDI3NTJaMBgxFjAU
BgNVBAMTDTY1YjQxNWNiLTk5MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvH9o5A6Xf9om+9Q8Fcmx0G57Ulu0oT0eUnyYMVhQVwwxX86w+Xck6wAIP
NPXFx/Ks8HrvMPdOSYUSeI0l4XK638PTu2hCgsk3A/U6f9wokntapP/m82c8CVzW
geOTfURlVbA6DE1iekW2rCSbN7T8232qoTVTJGA0bXDDEaxnxILoVV8aHrHFk4o0
3YVFi6ML2YvDnf+DpQaU9aA6kpOP8oAAADGERrkz1glHA46JMBNVpK2v6Y514SS9
Ydwly/SWWDUevjZmqFlXgRNh7Udp/SjfTFgK0jaPMt5Zm5pJA/mZeiZAnjiS9ufo
Ui7nXJMUibxPK0UNqMxdkD1qRZtrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnCEk
ZNBxa922HTtSabISYn251bUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzYyQ0QyRTIwQkM4OTExRUU4OUFCRDg1RTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxWwwDQYJKoZIhvcNAQEL
BQADggEBAKlYJVqVGrm2Ys2/rtpwWnsp8n7F0LHPgh+92a4D+Y1MeJwm67GOtasx
GRYrDec1akwyVzoBAc8uKHoFSHjB3Wbp2JPINObgJGXSzm3YD09V8jvmmFVZ238H
GyHsLPc0rWXRRiVaHlQFj9yqNN0ngJyyU0QdSKs+x8NKEb1SU4gu2BK6b/Z4ervq
ZZRQLyduvy0MUtN/bl+srU9nVgb17ZAA/PexNYBLlDoO11t8hcidLG4u+nkMhD/P
Q+/u4ih5kqSvkpTZ4yXJcjAE1BrVAkcXGMMkjMyyJj95Aurkf44EUBMNgBsrKNMN
QsVClxvJRWKc4JG53sSYJPkC9NVjico=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:11 2024 by rpki-client on console-ams.rpki-client.org