Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4ECF54FE1A11EEB2029D6E017001B1.roa
File: 6B4ECF54FE1A11EEB2029D6E017001B1.roa (raw, json)
Hash identifier: oooNz0iuI5PJo3SzIf4wQkt3QNDYu4YQqpTSFQ97H0Y=
Subject key identifier: 5F:D7:8B:9F:88:DF:9D:2D:6B:F0:A4:16:56:2A:8C:9D:48:68:3F:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4ECF54FE1A11EEB2029D6E017001B1.roa
Signing time: Fri 19 Apr 2024 06:59:52 +0000
ROA not before: Fri 19 Apr 2024 06:59:49 +0000
ROA not after: Wed 22 May 2024 06:59:49 +0000
asID: 26383
IP address blocks: 154.91.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44622 (0xae4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 06:59:49 2024 GMT
Not After : May 22 06:59:49 2024 GMT
Subject: CN=66221668-50f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:ed:cd:92:54:84:02:67:19:ff:b9:98:c1:
1d:18:f1:d0:be:1e:a5:59:1c:95:51:f4:99:e4:f5:
50:44:78:e4:50:5a:bc:62:02:af:5d:40:30:4e:bc:
6b:57:8a:26:65:22:fc:75:b2:61:35:5b:38:8e:52:
05:ff:f4:51:cb:93:cf:83:89:46:ae:22:14:3c:8e:
49:54:20:c9:56:41:20:3b:56:c6:83:da:89:a0:28:
30:f9:3c:a7:c2:b9:2a:ad:7e:f6:ed:1a:3f:93:78:
68:ea:50:5d:0f:ab:8b:f4:1e:cf:37:32:02:ed:7c:
2e:5e:b4:62:20:00:21:b4:e4:11:1a:50:79:23:58:
60:54:67:ca:9b:eb:50:1a:18:47:38:dc:f5:0d:6d:
b9:76:92:80:18:72:97:00:d7:26:7a:6b:cc:29:70:
4e:52:dc:06:17:7e:bc:4f:f4:f6:1e:86:74:9f:5b:
6a:3d:63:f0:04:e2:8b:cf:3b:7c:6e:33:87:2a:ba:
8a:d7:0e:16:58:29:f5:ef:25:60:69:1a:88:22:cd:
2c:33:c2:fd:a2:c4:a9:25:d9:dd:cf:94:e8:44:0a:
9c:ad:c5:a2:27:56:ee:a1:8e:2f:f4:3a:cf:b7:ec:
8d:90:47:dd:9f:f7:6e:61:a3:e2:bf:92:f6:4f:13:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:8B:9F:88:DF:9D:2D:6B:F0:A4:16:56:2A:8C:9D:48:68:3F:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B4ECF54FE1A11EEB2029D6E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.171.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0d:8e:42:e6:b7:16:69:51:3a:57:1e:21:90:bc:26:22:d0:
16:70:e4:72:5c:31:e7:bb:40:66:31:8d:a5:c4:ba:b1:55:57:
04:6f:ac:14:96:bd:a0:18:60:1a:b4:5a:6c:bd:9a:71:b6:d9:
57:ac:8a:bc:d0:9e:da:90:a8:d1:99:a8:64:70:1d:db:89:a6:
b3:8a:3d:42:9d:fc:c1:e2:00:a7:ef:1d:65:6c:17:7b:ad:94:
3c:84:b7:a2:61:8b:57:f8:40:8c:f9:4d:9d:8a:06:22:c3:f5:
33:ad:1e:86:92:9d:a8:ac:7e:02:56:95:25:64:88:a1:4d:f9:
4c:b2:e6:33:5a:c6:83:8d:1c:ec:77:49:5e:c5:10:5a:4e:3c:
76:56:7a:cf:ab:22:a6:52:8d:de:34:d8:5d:2e:af:53:3f:d0:
4b:71:8f:65:09:65:1a:53:b4:b9:f5:14:7e:49:0c:68:41:5b:
e9:87:a7:25:ae:6d:b8:97:76:c1:a8:b7:bb:54:e7:31:9b:a4:
63:b5:4a:ba:27:24:51:70:95:f1:54:08:55:e2:61:04:aa:86:
55:cf:66:65:f0:7f:c4:49:37:b0:ea:39:97:df:02:af:c0:e4:
bd:d3:6e:cb:1a:dc:43:b7:61:ea:c6:20:9d:16:5a:83:6c:ae:
ff:48:a6:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK5OMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE5MDY1OTQ5WhcNMjQwNTIyMDY1OTQ5WjAYMRYw
FAYDVQQDEw02NjIyMTY2OC01MGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4TftzZJUhAJnGf+5mMEdGPHQvh6lWRyVUfSZ5PVQRHjkUFq8YgKvXUAw
TrxrV4omZSL8dbJhNVs4jlIF//RRy5PPg4lGriIUPI5JVCDJVkEgO1bGg9qJoCgw
+TynwrkqrX727Ro/k3ho6lBdD6uL9B7PNzIC7XwuXrRiIAAhtOQRGlB5I1hgVGfK
m+tQGhhHONz1DW25dpKAGHKXANcmemvMKXBOUtwGF368T/T2HoZ0n1tqPWPwBOKL
zzt8bjOHKrqK1w4WWCn17yVgaRqIIs0sM8L9osSpJdndz5ToRAqcrcWiJ1buoY4v
9DrPt+yNkEfdn/duYaPiv5L2TxMnTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF/X
i5+I350ta/CkFlYqjJ1IaD8yMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82QjRFQ0Y1NEZFMUExMUVFQjIwMjlENkUwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlurMA0GCSqGSIb3DQEB
CwUAA4IBAQBpDY5C5rcWaVE6Vx4hkLwmItAWcORyXDHnu0BmMY2lxLqxVVcEb6wU
lr2gGGAatFpsvZpxttlXrIq80J7akKjRmahkcB3biaazij1CnfzB4gCn7x1lbBd7
rZQ8hLeiYYtX+ECM+U2digYiw/UzrR6Gkp2orH4CVpUlZIihTflMsuYzWsaDjRzs
d0lexRBaTjx2VnrPqyKmUo3eNNhdLq9TP9BLcY9lCWUaU7S59RR+SQxoQVvph6cl
rm24l3bBqLe7VOcxm6RjtUq6JyRRcJXxVAhV4mEEqoZVz2Zl8H/ESTew6jmX3wKv
wOS9027LGtxDt2HqxiCdFlqDbK7/SKb8
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:11 2024 by rpki-client on console-ams.rpki-client.org