Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEBBA2CE78111EE8F1BF990775412E6.roa
File: 9CEBBA2CE78111EE8F1BF990775412E6.roa (raw, json)
Hash identifier: ubv0jkljyVB1mLfFwb9LkEF7RhSLY2DtMkj6gBjashE=
Subject key identifier: 37:04:B2:E0:5F:FC:EA:2C:8F:D2:97:22:08:3F:F3:9B:A7:B8:E7:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A577
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEBBA2CE78111EE8F1BF990775412E6.roa
Signing time: Thu 21 Mar 2024 12:50:37 +0000
ROA not before: Thu 21 Mar 2024 12:50:33 +0000
ROA not after: Tue 23 Apr 2024 12:50:33 +0000
asID: 44559
IP address blocks: 154.210.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42359 (0xa577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:50:33 2024 GMT
Not After : Apr 23 12:50:33 2024 GMT
Subject: CN=65fc2d1c-ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:db:e9:42:84:0d:b3:e1:37:f6:08:75:26:
8f:3a:c5:b3:0e:2e:06:46:5f:95:eb:48:47:18:cd:
59:33:aa:7c:fb:ba:ea:a5:ad:36:69:33:cc:92:91:
b4:fa:eb:b3:3b:af:12:b8:45:c6:43:5e:ca:4d:a0:
9b:08:b5:a4:75:7e:ee:d6:cf:1d:9f:c1:4e:d5:05:
c7:6b:f3:c9:97:fc:d5:f1:e9:7d:ff:85:9e:b8:ad:
57:c6:9e:a1:a0:19:c4:22:9a:cd:47:46:82:71:0d:
41:d2:0a:d3:7a:16:b5:f9:04:74:2f:e4:ac:b9:09:
11:d7:50:a6:73:07:1c:39:60:ac:ca:65:eb:53:c1:
40:04:ad:5c:77:30:3b:ab:8f:99:83:36:98:b4:95:
6f:ae:9a:58:49:be:d7:bc:6b:38:b7:af:79:89:10:
7d:fa:a6:7f:a8:04:a6:0c:02:c9:33:a8:8b:87:7d:
8b:ab:1f:bc:03:0e:e9:17:df:f5:d2:d4:56:87:00:
68:08:4b:1e:67:71:15:7b:33:20:47:a8:59:f5:c9:
02:f7:a5:7d:97:3f:f9:df:73:91:28:09:88:a9:b0:
88:c5:dd:28:62:ee:fa:b6:04:69:e6:4c:fc:be:bc:
9c:3e:72:0e:6a:05:f8:2a:38:ba:d2:ab:c8:ae:c5:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:B2:E0:5F:FC:EA:2C:8F:D2:97:22:08:3F:F3:9B:A7:B8:E7:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CEBBA2CE78111EE8F1BF990775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:84:41:f9:bc:34:d5:c4:f9:88:25:b5:24:64:47:5f:34:db:
b1:89:8b:10:d6:03:05:5e:16:e5:cc:e5:4c:7f:f0:6e:16:a1:
c3:75:0e:66:cf:32:c6:1c:62:73:dd:ad:67:1f:db:33:0f:3f:
30:2f:ed:e6:8b:aa:fc:6b:a3:7e:c3:33:cc:c1:fc:55:15:e2:
ec:5c:d5:5f:36:68:33:9f:f9:7b:c1:3c:88:df:66:c2:23:75:
18:1b:99:d0:17:e0:e1:e0:e8:e1:84:45:72:f9:6d:2c:c4:18:
0a:0d:70:83:7c:6e:c8:0c:e1:08:f4:17:bf:04:e2:f8:7f:6b:
c3:51:24:7d:ac:eb:1f:4b:41:c6:15:44:d4:e9:8f:83:25:35:
7b:1d:ec:5b:f5:70:86:df:a9:84:82:e1:83:d5:e6:1b:28:f0:
f2:da:e5:39:69:7c:45:b2:ce:2e:4a:5b:d7:2e:a8:42:b3:32:
30:d0:55:6d:e7:16:07:79:91:1b:88:67:a1:98:cd:60:1e:f4:
4f:fa:03:c2:1b:48:1e:14:e8:3e:87:9e:f5:a0:b9:27:f9:eb:
42:f4:11:a8:99:09:ee:79:39:5f:52:99:32:3e:4f:4c:27:c6:
04:ef:73:6a:eb:39:88:a8:c8:06:3a:2a:08:12:ec:83:5d:db:
bb:25:29:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKV3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMTI1MDMzWhcNMjQwNDIzMTI1MDMzWjAYMRYw
FAYDVQQDEw02NWZjMmQxYy1lZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3A3b6UKEDbPhN/YIdSaPOsWzDi4GRl+V60hHGM1ZM6p8+7rqpa02aTPM
kpG0+uuzO68SuEXGQ17KTaCbCLWkdX7u1s8dn8FO1QXHa/PJl/zV8el9/4WeuK1X
xp6hoBnEIprNR0aCcQ1B0grTeha1+QR0L+SsuQkR11CmcwccOWCsymXrU8FABK1c
dzA7q4+ZgzaYtJVvrppYSb7XvGs4t695iRB9+qZ/qASmDALJM6iLh32Lqx+8Aw7p
F9/10tRWhwBoCEseZ3EVezMgR6hZ9ckC96V9lz/533ORKAmIqbCIxd0oYu76tgRp
5kz8vrycPnIOagX4Kji60qvIrsU/zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDcE
suBf/Oosj9KXIgg/85unuOcuMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85Q0VCQkEyQ0U3ODExMUVFOEYxQkY5OTA3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJhMA0GCSqGSIb3DQEB
CwUAA4IBAQC6hEH5vDTVxPmIJbUkZEdfNNuxiYsQ1gMFXhblzOVMf/BuFqHDdQ5m
zzLGHGJz3a1nH9szDz8wL+3mi6r8a6N+wzPMwfxVFeLsXNVfNmgzn/l7wTyI32bC
I3UYG5nQF+Dh4OjhhEVy+W0sxBgKDXCDfG7IDOEI9Be/BOL4f2vDUSR9rOsfS0HG
FUTU6Y+DJTV7Hexb9XCG36mEguGD1eYbKPDy2uU5aXxFss4uSlvXLqhCszIw0FVt
5xYHeZEbiGehmM1gHvRP+gPCG0geFOg+h571oLkn+etC9BGomQnueTlfUpkyPk9M
J8YE73Nq6zmIqMgGOioIEuyDXdu7JSlc
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org