Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D8D881C1FE511EE888BA5534AD9E6FC.roa
File: 8D8D881C1FE511EE888BA5534AD9E6FC.roa (raw, json)
Hash identifier: muu6xpiTjydmT64uViJ55fDFJCzIiZsoOil/vWz3n4g=
Subject key identifier: 54:3A:6D:95:16:48:50:FF:96:FC:86:8C:1F:58:74:F3:71:C6:C3:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 31AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D8D881C1FE511EE888BA5534AD9E6FC.roa
Signing time: Tue 11 Jul 2023 12:22:08 +0000
ROA not before: Tue 11 Jul 2023 12:22:04 +0000
ROA not after: Thu 13 Jun 2024 12:22:04 +0000
asID: 139811
IP address blocks: 154.205.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12714 (0x31aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 12:22:04 2023 GMT
Not After : Jun 13 12:22:04 2024 GMT
Subject: CN=64ad4970-3c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:41:be:b6:81:84:e7:7f:40:1e:af:38:f0:
36:4e:67:9b:65:24:e5:a9:2b:18:fc:36:97:87:37:
8a:20:2f:5a:3d:fc:08:f0:ff:94:da:ea:57:c9:45:
1a:26:03:22:d0:69:11:24:6e:1e:94:eb:69:3b:c9:
b1:fc:3e:e9:81:96:44:54:48:a4:d5:a4:98:65:58:
74:58:67:31:15:db:0a:17:03:ca:de:d5:48:96:80:
78:94:05:ee:5b:f1:0e:b2:55:c0:ae:9a:d9:1c:e0:
6e:9c:9e:45:53:ef:64:90:9f:a3:53:75:a0:ec:0a:
b7:fe:ee:5f:c9:e4:fe:10:1f:14:a7:6d:fc:f8:19:
fc:71:5d:6e:8d:3f:64:27:a5:42:fa:ce:1d:4c:11:
0d:e2:3b:dc:cd:ee:a5:e1:e6:0b:a4:df:d6:53:0e:
d7:05:80:7d:1f:e8:d5:30:4d:97:c3:92:a6:a8:d2:
98:9f:00:80:5e:e6:47:a3:28:6c:2d:14:d9:f5:9a:
63:e7:41:29:0e:f7:be:c1:bf:24:ec:64:17:9b:e4:
ed:58:08:be:12:7a:9a:67:88:b5:d7:76:10:dc:d5:
61:5c:3d:cc:77:b1:4e:77:2d:66:16:d3:7c:5c:5d:
9b:1a:96:f0:bb:e2:f3:eb:23:1c:b2:44:80:5d:1d:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3A:6D:95:16:48:50:FF:96:FC:86:8C:1F:58:74:F3:71:C6:C3:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D8D881C1FE511EE888BA5534AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.4.0/24
Signature Algorithm: sha256WithRSAEncryption
94:16:a8:13:58:30:0e:05:42:d4:ed:b4:2d:e1:52:09:ac:c5:
06:d3:f1:76:5b:71:28:ae:9e:c5:c5:4b:8b:57:e9:64:91:bf:
a0:44:c7:45:38:fe:89:3e:df:93:c6:5b:71:6b:e9:92:66:fe:
99:7b:4e:c6:80:3f:8c:80:7d:7c:27:ad:c4:e4:75:c7:df:80:
c7:51:78:6c:99:60:67:c1:88:64:36:37:fe:df:0c:b0:b6:36:
0f:d5:10:04:cf:63:77:25:d6:62:5c:42:4d:ed:35:96:02:b5:
72:6a:a6:1d:4e:24:79:68:32:7d:14:4d:89:9c:18:97:7a:24:
49:57:f3:50:5e:4b:cb:3b:d2:13:5c:a8:7d:ae:35:cd:68:62:
41:d6:4f:c4:94:a9:9f:01:19:e7:55:a5:f1:f2:b3:c8:ca:37:
ec:98:c2:f1:43:0c:25:09:1c:d8:75:a5:5b:7b:ea:82:80:e1:
e1:50:1e:21:4c:81:70:b5:36:19:0d:5d:fd:3a:2d:01:1b:06:
52:f7:8f:cc:28:9c:c2:20:07:ea:ee:53:7f:c7:24:a1:55:39:
6a:df:f4:d8:58:d8:6f:87:81:51:27:a9:d8:9e:f4:ff:e1:f7:
96:09:59:a9:9f:5b:5b:c4:c0:1f:0e:ec:42:e9:bb:d5:01:9c:
56:0a:0f:bb
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICMaowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA3MTExMjIyMDRaFw0yNDA2MTMxMjIyMDRaMBgxFjAU
BgNVBAMTDTY0YWQ0OTcwLTNjMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCydUG+toGE539AHq848DZOZ5tlJOWpKxj8NpeHN4ogL1o9/Ajw/5Ta6lfJ
RRomAyLQaREkbh6U62k7ybH8PumBlkRUSKTVpJhlWHRYZzEV2woXA8re1UiWgHiU
Be5b8Q6yVcCumtkc4G6cnkVT72SQn6NTdaDsCrf+7l/J5P4QHxSnbfz4GfxxXW6N
P2QnpUL6zh1MEQ3iO9zN7qXh5guk39ZTDtcFgH0f6NUwTZfDkqao0pifAIBe5kej
KGwtFNn1mmPnQSkO977BvyTsZBeb5O1YCL4SeppniLXXdhDc1WFcPcx3sU53LWYW
03xcXZsalvC74vPrIxyyRIBdHamhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVDpt
lRZIUP+W/IaMH1h083HGw18wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzhEOEQ4ODFDMUZFNTExRUU4ODhCQTU1MzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazQQwDQYJKoZIhvcNAQEL
BQADggEBAJQWqBNYMA4FQtTttC3hUgmsxQbT8XZbcSiunsXFS4tX6WSRv6BEx0U4
/ok+35PGW3Fr6ZJm/pl7TsaAP4yAfXwnrcTkdcffgMdReGyZYGfBiGQ2N/7fDLC2
Ng/VEATPY3cl1mJcQk3tNZYCtXJqph1OJHloMn0UTYmcGJd6JElX81BeS8s70hNc
qH2uNc1oYkHWT8SUqZ8BGedVpfHys8jKN+yYwvFDDCUJHNh1pVt76oKA4eFQHiFM
gXC1NhkNXf06LQEbBlL3j8wonMIgB+ruU3/HJKFVOWrf9NhY2G+HgVEnqdie9P/h
95YJWamfW1vEwB8O7ELpu9UBnFYKD7s=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org