Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65CD69CE82B811EE98BA6C2A4AD9E6FC.roa
File: 65CD69CE82B811EE98BA6C2A4AD9E6FC.roa (raw, json)
Hash identifier: BWi0m2cdnNkmo/cHfAsppwG05O6bVRhM+v1E+DxrXzA=
Subject key identifier: 5B:3F:32:C0:CB:A6:47:0E:24:E5:1B:16:B7:CB:2C:94:03:E1:52:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65CD69CE82B811EE98BA6C2A4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:38:19 +0000
ROA not before: Tue 14 Nov 2023 06:38:16 +0000
ROA not after: Tue 12 Nov 2024 06:38:16 +0000
asID: 397630
IP address blocks: 154.202.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20424 (0x4fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:38:16 2023 GMT
Not After : Nov 12 06:38:16 2024 GMT
Subject: CN=655315db-285c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:b7:4c:f7:7d:3b:11:c9:14:a3:48:8c:40:
a7:3b:ab:d0:21:77:88:1e:d3:eb:19:73:6b:aa:7d:
67:0f:b6:b4:b8:4d:45:7d:4a:92:6a:b4:c1:4e:d3:
35:52:82:f4:3f:c7:30:bd:72:60:fd:3e:7f:1f:37:
ef:04:4b:53:85:3f:08:f1:d0:93:79:be:f8:a2:08:
54:3c:c5:e3:4f:bd:74:ab:81:f7:66:2a:ca:5b:7d:
6d:76:6a:56:32:6d:52:9b:41:38:33:25:c9:2d:99:
78:23:c0:7f:54:ea:c5:01:2b:63:87:22:c2:61:4b:
1d:cb:2c:a7:46:1a:34:62:4e:e2:eb:e8:b1:78:92:
b3:48:1c:6d:0a:85:2c:c3:b4:95:be:ac:0f:11:a0:
08:15:b7:19:55:c2:00:44:81:4c:61:e1:b0:58:ec:
be:93:ec:12:0e:9f:c3:eb:c5:5e:8f:b6:fe:e4:9f:
ca:89:34:52:14:66:56:10:56:01:3b:cb:ce:95:b6:
8b:ab:b9:20:33:36:29:ac:99:48:11:76:82:59:83:
95:12:ad:72:95:16:af:cd:59:ac:6d:c0:28:46:bc:
f2:3e:39:5b:c0:13:1e:18:d3:57:c9:f6:b0:55:55:
9c:f8:71:8f:c4:07:17:35:c1:a2:a7:dc:cb:99:17:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:32:C0:CB:A6:47:0E:24:E5:1B:16:B7:CB:2C:94:03:E1:52:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65CD69CE82B811EE98BA6C2A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cd:a9:37:bf:12:c6:aa:6a:66:5c:a2:96:1e:a4:7f:a5:c9:
a7:93:ec:dd:c1:ef:21:d3:a9:a4:c3:97:06:ed:3e:4f:c3:28:
12:65:39:02:3c:1a:67:23:86:8f:59:f2:c7:6e:4d:bb:98:2e:
ee:21:4b:b9:2f:fc:74:db:30:a5:af:19:ca:0f:79:fe:42:83:
3e:7c:97:96:59:98:6e:b3:ef:18:2b:3a:b7:1d:54:a3:5e:19:
84:23:5f:9f:76:19:66:94:0c:29:ce:8c:55:de:c1:61:b3:94:
68:b1:c3:9b:14:4d:c5:d8:20:1f:b9:d4:2e:fb:46:c2:85:27:
0a:44:99:53:4b:2c:cb:35:d6:40:e0:68:d1:2b:8e:4b:7d:bf:
e2:35:71:3d:d2:23:8e:a6:9a:77:b9:35:45:23:e1:7b:91:45:
f1:ff:3a:18:af:b1:18:1c:0f:f3:e8:d5:cf:8e:73:bc:f5:34:
16:65:b2:f7:5a:fe:e3:4f:8a:a9:eb:6b:59:65:7c:17:7b:e6:
c1:e4:c5:5c:77:d2:93:2c:13:f6:c5:5d:e5:ca:2c:ff:09:d7:
64:77:b8:43:7f:75:89:a3:b8:69:f7:eb:1b:13:f4:27:e7:9d:
9e:fc:d4:cb:94:1f:55:4e:63:d0:b5:f6:57:12:87:be:fa:03:
89:98:60:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICT8gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNjM4MTZaFw0yNDExMTIwNjM4MTZaMBgxFjAU
BgNVBAMTDTY1NTMxNWRiLTI4NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAaLdM9307EckUo0iMQKc7q9Ahd4ge0+sZc2uqfWcPtrS4TUV9SpJqtMFO
0zVSgvQ/xzC9cmD9Pn8fN+8ES1OFPwjx0JN5vviiCFQ8xeNPvXSrgfdmKspbfW12
alYybVKbQTgzJcktmXgjwH9U6sUBK2OHIsJhSx3LLKdGGjRiTuLr6LF4krNIHG0K
hSzDtJW+rA8RoAgVtxlVwgBEgUxh4bBY7L6T7BIOn8PrxV6Ptv7kn8qJNFIUZlYQ
VgE7y86VtouruSAzNimsmUgRdoJZg5USrXKVFq/NWaxtwChGvPI+OVvAEx4Y01fJ
9rBVVZz4cY/EBxc1waKn3MuZF+QrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWz8y
wMumRw4k5RsWt8sslAPhUsAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzY1Q0Q2OUNFODJCODExRUU5OEJBNkMyQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaymUwDQYJKoZIhvcNAQEL
BQADggEBALXNqTe/EsaqamZcopYepH+lyaeT7N3B7yHTqaTDlwbtPk/DKBJlOQI8
Gmcjho9Z8sduTbuYLu4hS7kv/HTbMKWvGcoPef5Cgz58l5ZZmG6z7xgrOrcdVKNe
GYQjX592GWaUDCnOjFXewWGzlGixw5sUTcXYIB+51C77RsKFJwpEmVNLLMs11kDg
aNErjkt9v+I1cT3SI46mmne5NUUj4XuRRfH/OhivsRgcD/Po1c+Oc7z1NBZlsvda
/uNPiqnra1llfBd75sHkxVx30pMsE/bFXeXKLP8J12R3uEN/dYmjuGn36xsT9Cfn
nZ781MuUH1VOY9C19lcSh776A4mYYMI=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:11 2024 by rpki-client on console-ams.rpki-client.org