Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80C3E1C6E75911EEB8E20E59775412E6.roa
File: 80C3E1C6E75911EEB8E20E59775412E6.roa (raw, json)
Hash identifier: ugL8OVWsRiAgANcv44CfpmRV10uwMcEXX+QSBKB2xw8=
Subject key identifier: 26:EF:18:4F:49:D4:7B:69:9B:FD:EA:2C:DE:A4:34:17:BE:83:36:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80C3E1C6E75911EEB8E20E59775412E6.roa
Signing time: Thu 21 Mar 2024 08:03:29 +0000
ROA not before: Thu 21 Mar 2024 08:03:26 +0000
ROA not after: Tue 23 Apr 2024 08:03:26 +0000
asID: 44559
IP address blocks: 154.211.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42179 (0xa4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:03:26 2024 GMT
Not After : Apr 23 08:03:26 2024 GMT
Subject: CN=65fbe9d1-7d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:78:89:f4:70:5e:14:49:ac:43:be:fb:e4:
29:02:81:39:75:35:b0:46:7d:dc:13:8b:3d:8f:6f:
e8:27:1a:34:91:8c:12:33:d2:f5:4a:bb:64:2d:b6:
8b:31:a1:99:12:77:11:fa:19:41:d6:d9:34:ee:8a:
08:82:be:9e:64:f2:5e:db:8c:a3:e1:8a:a6:ea:d3:
23:8e:d7:e0:7a:db:d2:9e:44:bd:14:45:64:41:45:
46:df:b4:b4:c4:24:38:a8:8c:fe:a7:38:8f:71:67:
ae:5f:9d:31:35:3e:5e:b1:54:0a:c6:e0:16:21:1d:
20:34:f5:a9:4a:d9:bb:73:d8:5a:73:26:50:42:f3:
54:30:d4:7f:be:9b:f0:5d:31:7c:af:c8:30:6d:61:
d4:46:7e:f1:38:b1:9e:3c:df:96:1c:36:d8:dc:c5:
b0:d5:84:5b:99:87:0c:5c:6b:33:aa:ab:b4:e2:bc:
59:54:11:32:9f:5c:ef:2f:91:60:52:ac:65:23:a9:
9d:a0:3b:05:ca:0f:86:75:2d:c3:50:3e:d7:2f:b4:
d9:5f:8d:94:02:80:b9:02:96:4d:1f:12:c8:c8:50:
e3:8d:b8:30:d4:20:8e:8a:ec:b6:ad:2d:31:d7:96:
e7:79:47:07:70:d3:a4:22:4a:3e:95:c8:a2:8d:66:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:18:4F:49:D4:7B:69:9B:FD:EA:2C:DE:A4:34:17:BE:83:36:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80C3E1C6E75911EEB8E20E59775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.55.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b7:37:e8:23:53:b4:8a:0f:3a:4e:3c:10:2e:00:3e:d4:42:
db:15:a7:33:39:28:38:58:bb:2d:42:69:d6:36:f2:cd:45:f2:
99:65:c2:23:da:cb:b2:c8:c2:57:2a:ae:5b:88:a4:65:e5:b6:
97:ac:bb:04:c7:db:91:d7:3e:ff:7a:98:2b:dd:43:d5:31:34:
00:66:ed:88:14:e2:db:35:8f:e0:c8:11:e3:4f:be:3a:6c:9b:
42:81:1b:06:52:19:2e:1b:06:dd:ca:cf:09:2e:b0:4f:57:39:
fa:e6:a4:db:05:48:1c:2f:5d:0f:d0:81:3c:b6:87:e8:24:56:
62:3a:32:37:ac:9a:6f:08:a0:d2:79:86:c0:74:1b:8a:0f:17:
cd:bb:01:d1:cc:fd:a7:84:04:36:45:40:e3:e4:e1:ec:8b:70:
05:b4:0b:f6:f1:fb:46:7e:25:27:66:59:07:7a:4a:0b:87:82:
ad:50:4d:9a:9b:79:08:d3:1c:0b:ed:fd:f5:ff:f5:84:83:a0:
bb:be:e7:72:a1:8a:7f:fa:b0:2b:10:a9:9c:4f:c6:cd:7d:05:
86:c5:1b:f1:21:76:ff:cb:d4:cc:21:5d:c8:28:47:63:e4:85:
a8:f4:b7:2a:32:ea:50:78:66:71:4d:57:eb:b0:9c:40:a7:8f:
60:05:56:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKTDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDgwMzI2WhcNMjQwNDIzMDgwMzI2WjAYMRYw
FAYDVQQDEw02NWZiZTlkMS03ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAseV4ifRwXhRJrEO+++QpAoE5dTWwRn3cE4s9j2/oJxo0kYwSM9L1Srtk
LbaLMaGZEncR+hlB1tk07ooIgr6eZPJe24yj4Yqm6tMjjtfgetvSnkS9FEVkQUVG
37S0xCQ4qIz+pziPcWeuX50xNT5esVQKxuAWIR0gNPWpStm7c9hacyZQQvNUMNR/
vpvwXTF8r8gwbWHURn7xOLGePN+WHDbY3MWw1YRbmYcMXGszqqu04rxZVBEyn1zv
L5FgUqxlI6mdoDsFyg+GdS3DUD7XL7TZX42UAoC5ApZNHxLIyFDjjbgw1CCOiuy2
rS0x15bneUcHcNOkIko+lciijWbRAQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCbv
GE9J1Htpm/3qLN6kNBe+gzYUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MEMzRTFDNkU3NTkxMUVFQjhFMjBFNTk3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtM3MA0GCSqGSIb3DQEB
CwUAA4IBAQAztzfoI1O0ig86TjwQLgA+1ELbFaczOSg4WLstQmnWNvLNRfKZZcIj
2suyyMJXKq5biKRl5baXrLsEx9uR1z7/epgr3UPVMTQAZu2IFOLbNY/gyBHjT746
bJtCgRsGUhkuGwbdys8JLrBPVzn65qTbBUgcL10P0IE8tofoJFZiOjI3rJpvCKDS
eYbAdBuKDxfNuwHRzP2nhAQ2RUDj5OHsi3AFtAv28ftGfiUnZlkHekoLh4KtUE2a
m3kI0xwL7f31//WEg6C7vudyoYp/+rArEKmcT8bNfQWGxRvxIXb/y9TMIV3IKEdj
5IWo9LcqMupQeGZxTVfrsJxAp49gBVbH
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org