Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80E601FCFBAE11EEB6C0BA33017001B1.roa
File: 80E601FCFBAE11EEB6C0BA33017001B1.roa (raw, json)
Hash identifier: yS1sCaR7cVfi3vZ675I/KFjyIm6SZw17LjT2UzGLqoQ=
Subject key identifier: 90:B0:3D:C8:F3:35:EA:FB:2E:92:0E:31:3A:99:3F:52:A7:33:14:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80E601FCFBAE11EEB6C0BA33017001B1.roa
Signing time: Tue 16 Apr 2024 05:02:20 +0000
ROA not before: Tue 16 Apr 2024 05:02:17 +0000
ROA not after: Thu 30 May 2024 05:02:17 +0000
asID: 63139
IP address blocks: 154.94.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44501 (0xadd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 05:02:17 2024 GMT
Not After : May 30 05:02:17 2024 GMT
Subject: CN=661e065c-5412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:05:cd:d6:7d:9c:06:44:3b:54:43:a6:30:
9d:dc:3b:5f:bd:df:69:0c:63:d6:18:56:65:f4:cd:
03:95:87:0f:d8:8a:38:86:f2:b8:7f:2e:be:44:dc:
4f:56:ee:9a:e7:72:ea:b3:2b:70:32:8b:53:0b:45:
0e:6e:32:32:e9:82:26:16:16:96:80:13:2f:5f:c0:
44:21:fa:4b:3e:bf:97:d9:3e:fc:f9:a3:40:f3:f8:
e8:eb:15:4d:b0:10:eb:c4:aa:b9:21:70:80:0a:d9:
65:57:4a:af:7c:ea:be:dd:40:86:2e:0c:76:b3:db:
a7:6e:e9:72:08:64:83:d9:bc:27:45:8c:41:b8:c4:
9d:3a:ec:19:9c:cc:ff:00:f6:82:4a:99:0d:b2:ab:
29:92:7b:c8:63:dd:32:5b:fc:f6:fd:d8:08:09:85:
12:de:d2:36:49:f7:f1:ad:d0:f1:da:2a:e3:17:9b:
4c:0e:9f:a4:ba:85:ef:8f:b1:5a:10:3d:cc:e4:cd:
55:90:f2:26:e4:52:d0:21:ae:76:90:ba:76:cf:3f:
b6:76:c2:b5:93:a3:06:e2:cd:27:65:34:b5:ad:78:
4a:78:00:0d:f1:2e:cf:1b:29:29:1e:41:06:7a:bc:
76:34:6f:b3:d5:87:f4:7b:2e:ca:a5:05:23:a8:92:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:3D:C8:F3:35:EA:FB:2E:92:0E:31:3A:99:3F:52:A7:33:14:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/80E601FCFBAE11EEB6C0BA33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4c:06:35:e9:36:68:d2:fe:ae:32:33:8c:35:00:8b:41:1d:
3c:07:7b:ff:c6:37:79:5b:0d:a7:cf:90:d2:65:55:ec:28:8b:
1c:5f:8f:07:22:c0:5c:6b:e4:a7:09:82:f7:f6:d6:4d:7c:7e:
38:00:9a:1d:b0:06:f4:ee:23:31:bf:f2:a3:6b:0e:a8:f7:a5:
38:41:85:21:99:30:60:23:20:5f:71:0b:c8:cb:de:11:69:b1:
f6:ad:fb:40:c5:f2:05:78:50:b5:4a:23:d1:2f:e4:3a:db:02:
e1:c7:44:e6:d9:ec:97:19:fd:3f:c2:41:ee:2f:c7:d6:5c:f9:
0e:91:fe:19:17:13:b0:ce:53:7c:78:e5:19:8c:1e:fe:36:ac:
1f:83:38:8a:f8:ee:ab:b4:d7:d2:15:17:b3:b0:3a:87:49:af:
23:93:1b:e6:5b:75:eb:5d:39:1e:d9:31:c9:cb:c0:88:27:4d:
d5:71:83:4b:c8:57:92:69:98:ac:55:0f:00:bc:92:46:ee:b0:
6c:94:7d:20:66:90:ab:65:86:37:8e:80:54:f5:15:97:e8:7c:
0c:6e:f3:a3:35:33:fd:2f:5f:ed:69:63:6c:42:81:bd:8c:8b:
9c:44:d2:a4:29:3e:13:10:62:c7:84:97:df:a6:6e:63:f9:ec:
00:a5:84:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAK3VMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE2MDUwMjE3WhcNMjQwNTMwMDUwMjE3WjAYMRYw
FAYDVQQDEw02NjFlMDY1Yy01NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu2gFzdZ9nAZEO1RDpjCd3Dtfvd9pDGPWGFZl9M0DlYcP2Io4hvK4fy6+
RNxPVu6a53LqsytwMotTC0UObjIy6YImFhaWgBMvX8BEIfpLPr+X2T78+aNA8/jo
6xVNsBDrxKq5IXCACtllV0qvfOq+3UCGLgx2s9unbulyCGSD2bwnRYxBuMSdOuwZ
nMz/APaCSpkNsqspknvIY90yW/z2/dgICYUS3tI2SffxrdDx2irjF5tMDp+kuoXv
j7FaED3M5M1VkPIm5FLQIa52kLp2zz+2dsK1k6MG4s0nZTS1rXhKeAAN8S7PGykp
HkEGerx2NG+z1Yf0ey7KpQUjqJLPbwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJCw
PcjzNer7LpIOMTqZP1KnMxSzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MEU2MDFGQ0ZCQUUxMUVFQjZDMEJBMzMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5AMA0GCSqGSIb3DQEB
CwUAA4IBAQBOTAY16TZo0v6uMjOMNQCLQR08B3v/xjd5Ww2nz5DSZVXsKIscX48H
IsBca+SnCYL39tZNfH44AJodsAb07iMxv/Kjaw6o96U4QYUhmTBgIyBfcQvIy94R
abH2rftAxfIFeFC1SiPRL+Q62wLhx0Tm2eyXGf0/wkHuL8fWXPkOkf4ZFxOwzlN8
eOUZjB7+NqwfgziK+O6rtNfSFRezsDqHSa8jkxvmW3XrXTke2THJy8CIJ03VcYNL
yFeSaZisVQ8AvJJG7rBslH0gZpCrZYY3joBU9RWX6HwMbvOjNTP9L1/taWNsQoG9
jIucRNKkKT4TEGLHhJffpm5j+ewApYTP
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org