Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76C49570E73C11EEB3D5FD74775412E6.roa
File: 76C49570E73C11EEB3D5FD74775412E6.roa (raw, json)
Hash identifier: i9O/B21Zkv6fe8nZ8gmqs1jy4BjK/WZAUx+B39tCtFo=
Subject key identifier: B3:AC:39:67:76:4D:1B:0D:F6:44:13:FF:80:CE:9C:1C:44:1B:CE:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76C49570E73C11EEB3D5FD74775412E6.roa
Signing time: Thu 21 Mar 2024 04:35:37 +0000
ROA not before: Thu 21 Mar 2024 04:35:34 +0000
ROA not after: Tue 23 Apr 2024 04:35:34 +0000
asID: 44559
IP address blocks: 154.221.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41896 (0xa3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:35:34 2024 GMT
Not After : Apr 23 04:35:34 2024 GMT
Subject: CN=65fbb919-5d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:a0:82:b3:d6:b0:c7:45:fb:27:55:53:0e:
d6:77:03:12:ad:75:d8:5f:8e:4c:7f:d9:10:a5:e3:
f6:46:22:07:08:18:f4:f7:02:d9:cd:8b:3b:01:1c:
35:cf:9b:d5:f6:01:33:ac:41:fe:21:b7:1b:a2:29:
d7:40:d0:15:c1:0e:01:8f:77:d1:b8:fe:09:dc:2b:
ad:83:a1:a1:e4:b0:f6:97:a5:59:4b:ed:f9:1a:37:
03:75:e8:e6:15:40:7d:d1:ca:4e:c4:23:83:02:f4:
4a:32:0f:3c:4e:23:33:7d:31:35:13:77:ef:06:d1:
58:71:94:b2:58:0c:7f:af:64:8c:4d:37:9d:93:41:
90:a9:1d:30:d9:b4:0a:9f:8c:23:5a:18:1d:86:60:
4a:00:1b:c0:a6:c9:20:4c:10:56:ea:fe:5c:91:9c:
b3:51:89:c6:5b:3b:70:91:9f:81:f1:24:d0:a5:15:
2e:80:bb:98:7b:3b:8d:0d:0a:6e:27:25:4a:5b:d2:
2f:d0:f4:78:71:15:39:51:ea:09:40:41:6a:23:36:
c7:c2:cd:fc:5f:6d:3e:df:d3:0f:43:90:a5:c0:5e:
31:2b:b0:c8:62:a8:84:d6:db:a6:ea:3a:23:d9:ce:
35:e2:c7:45:0d:de:b5:4e:7c:d5:76:29:6a:f2:29:
c4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:39:67:76:4D:1B:0D:F6:44:13:FF:80:CE:9C:1C:44:1B:CE:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/76C49570E73C11EEB3D5FD74775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.229.0/24
Signature Algorithm: sha256WithRSAEncryption
05:96:40:a5:04:ef:f5:b3:6a:bf:b2:fc:57:c6:da:2d:d1:7c:
83:3c:07:10:f5:9c:76:61:38:97:21:28:26:3e:b7:1b:5d:ba:
49:83:ae:b8:ef:67:c9:d3:ba:01:bb:ea:a5:10:7b:72:cf:60:
1b:0a:52:fe:14:de:42:fe:f4:c1:4c:c4:89:97:90:4c:35:a0:
07:d5:d5:1a:24:18:3f:5e:e5:fe:af:23:54:b3:00:c8:8c:32:
32:ad:b1:34:65:38:38:e0:f1:97:51:2a:bc:f1:0a:5b:a6:cd:
58:77:15:b4:e2:cb:d1:c6:f1:07:ae:27:28:51:58:35:5c:72:
15:00:4c:05:c5:36:03:39:cc:a1:0a:09:71:a8:dd:0e:43:bd:
dc:1c:37:c9:87:41:fb:d3:3d:c6:84:1e:09:0f:00:52:0d:0b:
ee:92:66:6d:76:e0:95:a3:04:ea:71:85:7e:a9:21:77:a5:97:
c5:cc:4e:eb:9c:63:54:e9:00:25:d0:d3:3b:a4:e6:21:a6:6e:
40:44:73:60:ce:e3:89:9c:7a:fa:2d:45:41:db:a7:95:4e:77:
d3:0d:0b:07:a2:f1:22:d3:3e:c9:88:16:1c:da:43:bd:99:34:
37:69:dc:f2:65:ae:69:3a:cb:2f:a5:d9:9b:57:32:43:86:fe:
1b:96:4f:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKOoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDQzNTM0WhcNMjQwNDIzMDQzNTM0WjAYMRYw
FAYDVQQDEw02NWZiYjkxOS01ZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwlqggrPWsMdF+ydVUw7WdwMSrXXYX45Mf9kQpeP2RiIHCBj09wLZzYs7
ARw1z5vV9gEzrEH+IbcboinXQNAVwQ4Bj3fRuP4J3Cutg6Gh5LD2l6VZS+35GjcD
dejmFUB90cpOxCODAvRKMg88TiMzfTE1E3fvBtFYcZSyWAx/r2SMTTedk0GQqR0w
2bQKn4wjWhgdhmBKABvApskgTBBW6v5ckZyzUYnGWztwkZ+B8STQpRUugLuYezuN
DQpuJyVKW9Iv0PR4cRU5UeoJQEFqIzbHws38X20+39MPQ5ClwF4xK7DIYqiE1tum
6joj2c414sdFDd61TnzVdilq8inEawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLOs
OWd2TRsN9kQT/4DOnBxEG86PMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NkM0OTU3MEU3M0MxMUVFQjNENUZENzQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt3lMA0GCSqGSIb3DQEB
CwUAA4IBAQAFlkClBO/1s2q/svxXxtot0XyDPAcQ9Zx2YTiXISgmPrcbXbpJg664
72fJ07oBu+qlEHtyz2AbClL+FN5C/vTBTMSJl5BMNaAH1dUaJBg/XuX+ryNUswDI
jDIyrbE0ZTg44PGXUSq88Qpbps1YdxW04svRxvEHricoUVg1XHIVAEwFxTYDOcyh
CglxqN0OQ73cHDfJh0H70z3GhB4JDwBSDQvukmZtduCVowTqcYV+qSF3pZfFzE7r
nGNU6QAl0NM7pOYhpm5ARHNgzuOJnHr6LUVB26eVTnfTDQsHovEi0z7JiBYc2kO9
mTQ3adzyZa5pOssvpdmbVzJDhv4blk+Y
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org