Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D35DF4E9FCF11EEB5EB1254D25BE465.roa
File: 8D35DF4E9FCF11EEB5EB1254D25BE465.roa (raw, json)
Hash identifier: oHx4NcnKlxv6hsPQweDI/MG7/1k247ZkFj4dKgacRi0=
Subject key identifier: A7:3E:0E:15:E0:FF:68:8C:B2:E6:79:E5:A5:65:C0:4C:E6:E4:72:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 64BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D35DF4E9FCF11EEB5EB1254D25BE465.roa
Signing time: Thu 21 Dec 2023 07:07:07 +0000
ROA not before: Thu 21 Dec 2023 07:07:04 +0000
ROA not after: Sun 22 Dec 2024 07:07:04 +0000
asID: 140867
IP address blocks: 154.197.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25790 (0x64be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 21 07:07:04 2023 GMT
Not After : Dec 22 07:07:04 2024 GMT
Subject: CN=6583e41b-62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:f0:91:d6:cf:ec:fd:e7:55:80:c4:28:42:
3f:8b:fb:e8:42:f1:41:40:26:8c:e2:c3:bc:db:82:
b1:a8:e7:7f:cd:1e:7a:97:f4:ed:cc:0e:e8:a8:7a:
02:0f:b8:ba:18:cc:47:b7:9b:42:19:f2:4d:2b:f9:
30:a8:bb:1d:e9:78:76:3e:75:f2:eb:d2:3d:75:85:
f7:58:ce:f3:47:f2:f7:91:69:82:83:be:9c:54:a6:
9a:53:92:f2:54:20:08:b2:be:20:e3:8b:cf:b2:2f:
c6:fd:08:70:f1:e0:db:ba:15:29:15:49:a8:79:54:
3e:a4:c3:34:de:eb:65:00:23:58:63:79:c8:b9:9c:
ab:1d:58:b9:05:ea:54:2e:32:39:1c:cb:a4:e9:6b:
3c:48:e3:6a:ca:ea:8c:f3:24:e2:cb:70:cb:8c:80:
02:1f:5a:14:7b:34:f8:eb:d9:61:e0:5b:6e:f1:95:
b9:6c:4b:7c:a6:c8:10:13:36:4a:f4:07:d2:8d:aa:
f3:66:5e:3b:ed:15:33:1b:c9:aa:9f:15:d1:fa:86:
d2:a9:76:ad:d5:6c:f2:64:4a:9e:cf:5c:92:90:ee:
20:e8:01:35:3f:d9:4e:32:fd:2e:37:25:b8:8c:c6:
c1:51:3f:b3:ac:f2:90:6e:3d:d7:4b:02:75:11:18:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3E:0E:15:E0:FF:68:8C:B2:E6:79:E5:A5:65:C0:4C:E6:E4:72:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D35DF4E9FCF11EEB5EB1254D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.105.0/24
Signature Algorithm: sha256WithRSAEncryption
57:65:01:41:53:d5:da:c7:7d:d5:d1:74:ff:38:dc:7f:95:f5:
e9:61:c7:aa:62:d0:ed:0a:24:91:ac:50:a2:86:44:32:58:f3:
b8:b4:0d:1c:eb:9b:6e:dc:36:a3:6c:fc:7c:6c:e4:fa:86:59:
b7:cc:79:5d:df:d1:69:13:9c:b4:e9:00:93:bb:a2:d5:66:14:
44:a6:0c:cd:a5:ed:c1:9b:3b:d7:10:cf:d7:54:9f:f7:97:e4:
fd:73:57:e6:4a:07:b0:b7:da:3f:9c:7d:bd:44:95:03:70:ae:
ea:23:5b:82:6b:f4:65:9a:5a:c0:88:49:1e:c5:55:ef:ff:d4:
74:01:63:d2:57:22:22:31:4d:48:4f:f4:f4:7f:0f:60:c5:5d:
4f:47:1a:fa:d5:8e:b7:57:c5:68:bb:c0:67:a2:17:47:e0:da:
72:6f:27:7c:b6:fd:01:13:38:07:50:b6:45:7f:47:5a:45:5b:
a4:87:04:c5:a8:d2:4c:f1:c9:60:bb:4b:4b:f9:f7:f0:ac:9d:
e4:2c:2b:cc:b9:4b:76:08:d7:23:e1:4e:f7:a2:91:54:b3:c7:
10:d8:0e:3a:dd:54:e4:fd:ad:f8:45:09:88:b9:03:de:50:2d:
cc:0f:2b:15:23:76:ae:cc:d0:65:e2:d1:f3:5b:0f:a2:c9:03:
b0:bb:d4:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICZL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMjEwNzA3MDRaFw0yNDEyMjIwNzA3MDRaMBgxFjAU
BgNVBAMTDTY1ODNlNDFiLTYyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCAfCR1s/s/edVgMQoQj+L++hC8UFAJoziw7zbgrGo53/NHnqX9O3MDuio
egIPuLoYzEe3m0IZ8k0r+TCoux3peHY+dfLr0j11hfdYzvNH8veRaYKDvpxUpppT
kvJUIAiyviDji8+yL8b9CHDx4Nu6FSkVSah5VD6kwzTe62UAI1hjeci5nKsdWLkF
6lQuMjkcy6TpazxI42rK6ozzJOLLcMuMgAIfWhR7NPjr2WHgW27xlblsS3ymyBAT
Nkr0B9KNqvNmXjvtFTMbyaqfFdH6htKpdq3VbPJkSp7PXJKQ7iDoATU/2U4y/S43
JbiMxsFRP7Os8pBuPddLAnURGA0xAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUpz4O
FeD/aIyy5nnlpWXATObkcnIwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhEMzVERjRFOUZDRjExRUVCNUVCMTI1NEQyNUJFNDY1LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxWkwDQYJKoZIhvcNAQEL
BQADggEBAFdlAUFT1drHfdXRdP843H+V9elhx6pi0O0KJJGsUKKGRDJY87i0DRzr
m27cNqNs/Hxs5PqGWbfMeV3f0WkTnLTpAJO7otVmFESmDM2l7cGbO9cQz9dUn/eX
5P1zV+ZKB7C32j+cfb1ElQNwruojW4Jr9GWaWsCISR7FVe//1HQBY9JXIiIxTUhP
9PR/D2DFXU9HGvrVjrdXxWi7wGeiF0fg2nJvJ3y2/QETOAdQtkV/R1pFW6SHBMWo
0kzxyWC7S0v59/CsneQsK8y5S3YI1yPhTveikVSzxxDYDjrdVOT9rfhFCYi5A95Q
LcwPKxUjdq7M0GXi0fNbD6LJA7C71NI=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org