Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DFFD3CF00011EEB84ECB8E775412E6.roa
File: 78DFFD3CF00011EEB84ECB8E775412E6.roa (raw, json)
Hash identifier: kqEujc3XNLVTDqTO+1x+ftTNtDA38iB7aNxXD0CIwwY=
Subject key identifier: FF:3B:1C:05:D0:52:9B:4B:09:AD:48:FC:0F:20:82:07:CB:46:3B:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A80E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DFFD3CF00011EEB84ECB8E775412E6.roa
Signing time: Mon 01 Apr 2024 08:18:51 +0000
ROA not before: Mon 01 Apr 2024 08:18:48 +0000
ROA not after: Tue 07 May 2024 08:18:48 +0000
asID: 138915
IP address blocks: 154.223.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43022 (0xa80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 08:18:48 2024 GMT
Not After : May 7 08:18:48 2024 GMT
Subject: CN=660a6deb-fdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:53:e7:30:81:76:6b:70:54:bf:5e:ad:2e:
67:61:b3:20:4a:f6:01:9a:6f:4b:0e:53:8b:02:e3:
06:aa:8f:b0:b2:af:f4:81:c9:db:44:57:fb:ab:88:
a4:15:9f:a7:23:14:26:56:ee:06:35:41:ed:b8:a0:
99:4e:a7:95:08:2f:0f:ed:aa:b3:d4:dc:1f:a0:13:
30:06:cd:d4:fc:7a:a0:b7:e3:06:a7:2a:c8:e9:1a:
7e:e7:e1:63:7d:db:50:3a:49:8f:c2:9b:c3:63:8b:
5d:7d:1d:3f:a2:a0:c9:67:9c:e1:0c:d1:1d:cc:34:
77:8d:13:15:21:22:0f:74:1b:f7:a3:19:45:a1:63:
f9:80:40:d2:82:74:8d:93:be:dc:00:01:74:c2:e8:
58:68:46:d1:a6:dc:76:c5:79:50:51:35:a9:be:96:
a3:e6:a5:e5:2f:ea:36:b6:a1:1d:ab:0a:fe:d5:2f:
49:ee:6d:7c:a4:9d:e1:68:a7:9d:dc:85:8d:73:68:
bb:34:9d:1b:e8:12:83:b4:85:78:4f:16:40:f7:b0:
b2:41:02:d1:09:fd:94:fb:8a:d3:1a:6b:dc:27:cc:
ac:0f:7e:fd:35:01:34:42:16:ea:fb:d7:ba:93:dc:
79:f2:c0:53:d0:e0:0b:c8:2f:65:5d:30:85:ea:b9:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3B:1C:05:D0:52:9B:4B:09:AD:48:FC:0F:20:82:07:CB:46:3B:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78DFFD3CF00011EEB84ECB8E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ad:43:31:3f:62:83:73:63:cc:b8:93:ca:a0:d1:bf:33:cf:
c0:7c:b6:03:b3:e1:7e:9e:f4:e2:e1:b8:3c:68:a7:c6:3f:9c:
65:bf:0c:d9:0c:01:48:a9:ee:63:db:29:be:b3:d8:a9:19:26:
11:2c:59:cb:5e:7f:43:13:e4:f0:d2:88:eb:ab:2a:74:a4:51:
c1:e9:99:35:9b:4f:94:43:aa:1f:28:9e:8c:a4:da:ac:ed:6d:
d7:35:58:fe:09:ba:8d:11:23:e0:f3:ff:bc:f9:3c:74:75:47:
c8:8a:7f:2a:9e:28:2b:3f:1e:ec:0d:5c:7a:62:e5:01:77:13:
f0:92:a7:bf:86:1e:e8:6b:df:db:07:f8:e7:63:b9:cd:e6:91:
34:aa:87:30:dd:9b:58:63:6e:6b:65:19:e2:3c:53:ac:f5:a6:
d6:ea:cc:c8:76:65:d1:8f:b6:f8:eb:f0:5f:44:60:e2:32:7b:
53:ea:80:23:d8:70:54:60:16:c2:b7:f7:2b:10:32:7e:7d:bb:
e6:0b:09:f1:85:63:a8:e7:b4:cb:01:b4:68:61:ef:98:16:86:
fd:e3:4e:6c:bd:2f:3c:17:b3:75:f3:4d:66:db:41:82:ff:c7:
16:dd:b0:b8:33:67:3c:72:fd:c6:c2:1c:b4:89:b7:16:d7:ce:
56:14:da:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKgOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDgxODQ4WhcNMjQwNTA3MDgxODQ4WjAYMRYw
FAYDVQQDEw02NjBhNmRlYi1mZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2z9T5zCBdmtwVL9erS5nYbMgSvYBmm9LDlOLAuMGqo+wsq/0gcnbRFf7
q4ikFZ+nIxQmVu4GNUHtuKCZTqeVCC8P7aqz1NwfoBMwBs3U/Hqgt+MGpyrI6Rp+
5+FjfdtQOkmPwpvDY4tdfR0/oqDJZ5zhDNEdzDR3jRMVISIPdBv3oxlFoWP5gEDS
gnSNk77cAAF0wuhYaEbRptx2xXlQUTWpvpaj5qXlL+o2tqEdqwr+1S9J7m18pJ3h
aKed3IWNc2i7NJ0b6BKDtIV4TxZA97CyQQLRCf2U+4rTGmvcJ8ysD379NQE0Qhbq
+9e6k9x58sBT0OALyC9lXTCF6rk2+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP87
HAXQUptLCa1I/A8gggfLRjvbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83OERGRkQzQ0YwMDAxMUVFQjg0RUNCOEU3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8vMA0GCSqGSIb3DQEB
CwUAA4IBAQA4rUMxP2KDc2PMuJPKoNG/M8/AfLYDs+F+nvTi4bg8aKfGP5xlvwzZ
DAFIqe5j2ym+s9ipGSYRLFnLXn9DE+Tw0ojrqyp0pFHB6Zk1m0+UQ6ofKJ6MpNqs
7W3XNVj+CbqNESPg8/+8+Tx0dUfIin8qnigrPx7sDVx6YuUBdxPwkqe/hh7oa9/b
B/jnY7nN5pE0qocw3ZtYY25rZRniPFOs9abW6szIdmXRj7b46/BfRGDiMntT6oAj
2HBUYBbCt/crEDJ+fbvmCwnxhWOo57TLAbRoYe+YFob9405svS88F7N1801m20GC
/8cW3bC4M2c8cv3Gwhy0ibcW185WFNpY
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org