Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997DBCAEA5DF11EC93B001875A40D577.roa
File: 997DBCAEA5DF11EC93B001875A40D577.roa (raw, json)
Hash identifier: pLkCU+Xq/XYZNNK2t1w/Qhl+ZO/q3k7f5/5C13rAJoc=
Subject key identifier: 39:8E:12:CF:84:37:33:31:82:2F:94:63:0F:37:C6:8D:BB:86:73:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1553
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997DBCAEA5DF11EC93B001875A40D577.roa
Signing time: Thu 17 Mar 2022 10:47:11 +0000
ROA not before: Thu 17 Mar 2022 10:47:08 +0000
ROA not after: Sat 31 May 2025 10:47:08 +0000
asID: 22411
IP address blocks: 154.212.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 00:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5459 (0x1553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 17 10:47:08 2022 GMT
Not After : May 31 10:47:08 2025 GMT
Subject: CN=623311af-edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:44:e8:1a:0c:a7:47:1c:0d:28:59:96:0a:
7a:17:b9:c4:c0:6c:dc:e5:8f:c3:a7:12:cf:85:f2:
cf:1a:c8:7c:04:ca:62:6e:5a:08:6b:50:3c:a5:57:
54:4e:df:02:56:51:92:a0:35:4d:b7:2a:5b:67:07:
9b:7d:60:a3:e9:32:00:6c:39:ae:64:a0:fc:9e:69:
22:b5:ff:88:b6:88:cf:01:d4:86:d3:da:79:94:01:
f6:11:39:bf:88:e8:96:1b:be:c6:48:0a:54:2f:04:
20:08:4f:bb:ce:37:a5:eb:3f:83:d9:6c:71:45:3a:
35:64:de:8e:e7:c3:6d:09:e3:64:3e:1f:5b:77:fa:
af:f1:b8:91:dc:03:4b:ad:ac:4c:49:ac:7d:47:37:
c5:ea:ba:96:5e:57:b1:d0:e0:38:73:6a:fb:66:a8:
b0:d7:89:90:86:f2:f8:7a:8d:77:d9:9b:68:fc:e7:
93:62:cf:86:c0:f4:92:1b:d6:0b:56:2f:0c:cd:93:
49:47:a0:18:2c:7e:35:3c:84:ed:04:4d:85:39:cc:
6d:fe:e2:08:f4:cb:3a:92:13:ae:ca:45:ea:43:18:
3f:ac:64:33:5c:dc:72:5f:c3:dd:60:af:10:07:55:
45:ba:35:da:75:ac:ba:97:4f:78:df:5c:30:96:13:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:12:CF:84:37:33:31:82:2F:94:63:0F:37:C6:8D:BB:86:73:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997DBCAEA5DF11EC93B001875A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:2d:7a:ac:85:7c:43:9e:09:83:9f:d0:6d:76:81:a1:4b:2a:
93:f9:61:fe:58:ba:d7:4d:2c:48:06:9a:96:ff:6f:b6:b5:01:
09:2b:5b:ea:bb:eb:4b:1a:21:6d:20:54:10:75:60:ec:2d:24:
cc:6a:d2:5c:05:49:c7:8e:f0:c4:3f:4a:98:73:de:4d:67:19:
43:f2:58:25:9c:83:d3:b0:72:33:33:6e:ab:7b:27:f7:0c:2f:
6d:30:13:aa:9e:f0:12:a5:c9:48:44:cb:5e:b2:24:88:dc:ea:
23:4a:a0:d4:1a:40:24:fd:55:16:21:cf:0b:15:78:76:a5:23:
1a:96:2a:5e:78:5f:b3:98:56:34:5f:83:12:f7:5e:41:a7:64:
4d:8e:aa:61:06:8b:c7:05:18:e2:3e:ad:3c:ae:04:08:47:24:
79:bc:a1:b7:5a:9c:34:6c:48:b5:7c:7f:42:3a:f4:25:8c:76:
03:32:a1:c5:13:3f:4d:d8:52:6c:19:c1:9b:fb:71:14:52:d1:
d4:35:a8:cb:84:ec:cc:ba:e1:97:e5:83:2e:74:ac:58:ac:ed:
61:55:0b:fa:79:d0:f4:74:5d:12:56:fa:d5:71:15:c1:18:ce:
75:b9:f7:8c:1e:10:04:ee:08:c0:d6:d7:20:fb:af:74:06:85:
19:9c:a1:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICFVMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjAzMTcxMDQ3MDhaFw0yNTA1MzExMDQ3MDhaMBgxFjAU
BgNVBAMMDTYyMzMxMWFmLWVkYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtyUToGgynRxwNKFmWCnoXucTAbNzlj8OnEs+F8s8ayHwEymJuWghrUDyl
V1RO3wJWUZKgNU23KltnB5t9YKPpMgBsOa5koPyeaSK1/4i2iM8B1IbT2nmUAfYR
Ob+I6JYbvsZIClQvBCAIT7vON6XrP4PZbHFFOjVk3o7nw20J42Q+H1t3+q/xuJHc
A0utrExJrH1HN8XqupZeV7HQ4DhzavtmqLDXiZCG8vh6jXfZm2j855Niz4bA9JIb
1gtWLwzNk0lHoBgsfjU8hO0ETYU5zG3+4gj0yzqSE67KRepDGD+sZDNc3HJfw91g
rxAHVUW6Ndp1rLqXT3jfXDCWE0rLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOY4S
z4Q3MzGCL5RjDzfGjbuGc+AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4Lzk5N0RCQ0FFQTVERjExRUM5M0IwMDE4NzVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGa1I4wDQYJKoZIhvcNAQEL
BQADggEBAI0teqyFfEOeCYOf0G12gaFLKpP5Yf5YutdNLEgGmpb/b7a1AQkrW+q7
60saIW0gVBB1YOwtJMxq0lwFSceO8MQ/Sphz3k1nGUPyWCWcg9OwcjMzbqt7J/cM
L20wE6qe8BKlyUhEy16yJIjc6iNKoNQaQCT9VRYhzwsVeHalIxqWKl54X7OYVjRf
gxL3XkGnZE2OqmEGi8cFGOI+rTyuBAhHJHm8obdanDRsSLV8f0I69CWMdgMyocUT
P03YUmwZwZv7cRRS0dQ1qMuE7My64Zflgy50rFis7WFVC/p50PR0XRJW+tVxFcEY
znW594weEATuCMDW1yD7r3QGhRmcoQ4=
-----END CERTIFICATE-----
Generated at Wed Apr 24 12:30:29 2024 by rpki-client on console-fra.rpki-client.org