Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/819D014CEFEF11EE9E3ACA88775412E6.roa
File: 819D014CEFEF11EE9E3ACA88775412E6.roa (raw, json)
Hash identifier: vUC4Bi1QmLcStdVF6+P8LFzNArcg4XIPOFjNU1xIsWU=
Subject key identifier: 77:00:08:A5:BA:54:E6:C4:21:1F:0D:C8:51:82:76:8E:90:FF:71:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/819D014CEFEF11EE9E3ACA88775412E6.roa
Signing time: Mon 01 Apr 2024 06:17:25 +0000
ROA not before: Mon 01 Apr 2024 06:17:21 +0000
ROA not after: Mon 06 May 2024 06:17:21 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42922 (0xa7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:17:21 2024 GMT
Not After : May 6 06:17:21 2024 GMT
Subject: CN=660a5175-dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:bf:1a:d5:03:73:86:55:53:10:99:51:fc:
6c:f5:c7:42:54:5f:bd:d4:04:9e:65:a0:90:c7:cf:
d6:a5:c7:39:0d:26:92:f4:ab:ba:ca:bd:38:e5:61:
94:eb:d0:c4:b0:53:9e:80:3d:ac:b7:77:9a:01:5c:
b8:d9:85:d7:56:bc:ae:94:c1:19:a7:26:87:a2:39:
1f:f0:50:15:fe:dd:31:fb:7e:13:da:32:2a:3b:8f:
d9:e4:a5:b6:27:78:4f:0e:ae:09:a5:8b:5f:9f:d2:
94:ba:2d:8a:2b:5b:86:85:9f:9b:69:ef:07:1c:aa:
8c:d8:0c:37:7c:11:6e:1e:21:4f:77:c4:bb:52:df:
fc:a1:1e:1c:8f:78:1a:cc:07:a8:1d:a1:00:22:f3:
d3:c5:9a:7c:f8:d4:e4:ca:00:7b:87:72:ed:ab:97:
3e:69:48:fb:4d:a2:5d:88:28:f5:0f:17:be:89:c9:
76:13:0c:db:87:a5:4f:fd:a3:47:b1:38:25:1f:7c:
2d:ef:67:1b:20:1e:cf:c4:84:1d:d2:f6:dd:24:4d:
08:8f:ed:2d:86:87:ec:60:82:b9:5e:67:28:df:94:
0c:8b:7b:fc:dd:06:ce:bc:8f:65:85:b7:d9:1c:47:
6b:ba:49:de:c9:ad:7a:9e:71:7a:49:2d:d9:61:29:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:08:A5:BA:54:E6:C4:21:1F:0D:C8:51:82:76:8E:90:FF:71:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/819D014CEFEF11EE9E3ACA88775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
50:90:68:68:fc:fa:c6:eb:f5:8d:16:7b:1b:db:7c:5e:05:c0:
cf:38:a1:e0:b9:07:64:0d:a4:eb:96:d3:6c:09:7e:f0:57:09:
7c:61:cc:a8:08:5a:55:42:44:a9:ac:37:54:f4:ea:c8:0b:2d:
8f:f9:d0:d7:38:5f:ce:5f:e2:c2:c8:ac:77:45:90:0e:83:3d:
c1:bb:c4:00:ce:9d:ad:5b:37:ed:c8:24:d0:ca:c6:e2:03:bc:
7a:53:36:d6:4f:1d:0b:92:2b:87:a1:c3:60:8e:f6:ab:76:9f:
71:7a:76:f4:94:11:8c:a4:a3:ba:36:7f:45:3a:b9:75:0d:29:
db:66:4e:d0:00:52:93:48:74:28:4f:e0:97:06:b0:1a:7c:10:
61:ec:d3:64:fe:dc:b9:c4:8e:49:1c:b0:93:0c:57:bf:b2:3f:
f0:41:09:ee:9a:e9:ba:28:39:d3:75:b5:83:b8:6b:2b:b7:90:
eb:da:94:15:35:c5:6e:0a:69:cb:dd:af:40:d5:cd:1d:99:df:
3f:ec:04:22:06:f6:0c:af:1a:0e:1b:04:ae:78:e6:24:fe:2c:
af:89:b1:61:4d:63:d6:f7:ce:db:c3:3c:75:b1:90:44:dd:1b:
20:1e:19:5a:81:3f:e1:ff:2f:f8:08:b1:c9:a9:a8:0a:11:16:
45:a6:21:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKeqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDYxNzIxWhcNMjQwNTA2MDYxNzIxWjAYMRYw
FAYDVQQDEw02NjBhNTE3NS1kZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwOu/GtUDc4ZVUxCZUfxs9cdCVF+91ASeZaCQx8/Wpcc5DSaS9Ku6yr04
5WGU69DEsFOegD2st3eaAVy42YXXVryulMEZpyaHojkf8FAV/t0x+34T2jIqO4/Z
5KW2J3hPDq4JpYtfn9KUui2KK1uGhZ+bae8HHKqM2Aw3fBFuHiFPd8S7Ut/8oR4c
j3gazAeoHaEAIvPTxZp8+NTkygB7h3Ltq5c+aUj7TaJdiCj1Dxe+icl2Ewzbh6VP
/aNHsTglH3wt72cbIB7PxIQd0vbdJE0Ij+0thofsYIK5Xmco35QMi3v83QbOvI9l
hbfZHEdrukneya16nnF6SS3ZYSkiMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHcA
CKW6VObEIR8NyFGCdo6Q/3GgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84MTlEMDE0Q0VGRUYxMUVFOUUzQUNBODg3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlMdMA0GCSqGSIb3DQEB
CwUAA4IBAQBQkGho/PrG6/WNFnsb23xeBcDPOKHguQdkDaTrltNsCX7wVwl8Ycyo
CFpVQkSprDdU9OrICy2P+dDXOF/OX+LCyKx3RZAOgz3Bu8QAzp2tWzftyCTQysbi
A7x6UzbWTx0LkiuHocNgjvardp9xenb0lBGMpKO6Nn9FOrl1DSnbZk7QAFKTSHQo
T+CXBrAafBBh7NNk/ty5xI5JHLCTDFe/sj/wQQnumum6KDnTdbWDuGsrt5Dr2pQV
NcVuCmnL3a9A1c0dmd8/7AQiBvYMrxoOGwSueOYk/iyvibFhTWPW987bwzx1sZBE
3RsgHhlagT/h/y/4CLHJqagKERZFpiEA
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:14 2024 by rpki-client on console-ams.rpki-client.org