Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A15D2F5EE75511EE865384B9775412E6.roa
File: A15D2F5EE75511EE865384B9775412E6.roa (raw, json)
Hash identifier: xOHj/ew4Dq2z5GLKlff2gdG6k36rh3/UbPwbgaCFaNs=
Subject key identifier: D5:9D:D0:01:92:E8:60:46:63:C6:35:BA:66:62:E6:9F:27:7E:C3:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A49D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A15D2F5EE75511EE865384B9775412E6.roa
Signing time: Thu 21 Mar 2024 07:35:46 +0000
ROA not before: Thu 21 Mar 2024 07:35:40 +0000
ROA not after: Tue 23 Apr 2024 07:35:40 +0000
asID: 44559
IP address blocks: 154.218.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42141 (0xa49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:35:40 2024 GMT
Not After : Apr 23 07:35:40 2024 GMT
Subject: CN=65fbe352-5161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:4b:23:f5:39:93:3c:19:47:f7:4a:64:07:
41:c5:c3:1d:37:56:db:18:03:ab:4d:73:30:f3:ed:
95:bf:28:90:d3:32:82:2b:e5:74:1b:80:0a:be:ec:
e0:33:e3:43:e0:6d:30:5f:d0:21:8f:a6:03:76:ad:
37:91:57:3d:cc:85:83:92:52:37:1b:47:bd:fa:ee:
46:83:6a:17:3b:a4:d0:70:c3:86:64:a5:64:18:cb:
b1:0b:17:3b:65:b3:1c:d7:18:c9:15:2a:24:da:e4:
24:17:59:e4:55:3e:15:58:05:68:17:42:46:5c:f5:
3f:f8:2b:a3:72:b2:60:74:00:21:e4:f3:1f:eb:de:
84:0b:fb:27:f8:8f:af:ca:9c:ec:3e:b5:9d:02:e1:
4a:84:38:fc:33:aa:3e:46:fc:97:c7:95:ef:6c:37:
01:75:fb:e9:f5:f2:aa:7f:38:99:5d:07:54:2a:d6:
ac:38:0b:26:ec:bc:60:57:e2:5f:d5:b4:53:33:37:
f8:09:14:3a:b6:2b:c7:20:55:22:74:d2:56:dc:1a:
c1:3f:e5:25:c9:d0:dd:28:9a:61:1f:e5:e5:4b:65:
03:94:c2:e1:49:48:95:db:97:a8:07:bb:4f:4c:93:
07:63:2b:39:58:3a:05:e3:13:52:2c:72:8e:d6:ef:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:D0:01:92:E8:60:46:63:C6:35:BA:66:62:E6:9F:27:7E:C3:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A15D2F5EE75511EE865384B9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d1:54:23:87:fe:05:92:64:79:0c:ab:e0:46:1b:17:28:6a:
fa:92:62:e2:d1:d4:b5:5b:b4:81:8d:76:b6:d5:77:4e:8f:bb:
71:76:3a:fb:a0:e7:3c:58:13:8a:4e:78:0d:12:9d:26:8b:42:
a5:51:f0:86:bd:10:da:90:fc:16:4e:d9:4e:d3:dc:ac:e7:ac:
dc:b9:9d:a1:ba:00:0b:57:0f:8a:9d:a9:1a:f7:bc:b3:58:cf:
38:83:83:da:80:96:83:ee:f1:55:37:98:a7:9f:92:7b:e1:75:
a2:cd:37:4e:e2:c8:74:1c:71:5c:90:c0:da:7b:16:1c:99:1c:
0d:b6:f8:7e:a7:01:e4:95:e5:b1:73:05:82:ae:2e:50:e9:d5:
85:1c:9e:89:48:f8:6d:be:3d:fd:fc:ae:9d:a2:1f:07:66:69:
08:7f:a1:d1:68:a5:65:a0:d4:2c:17:9b:80:d1:5d:56:46:af:
38:83:99:bf:71:c8:82:eb:b7:77:f2:34:43:df:1e:d5:c7:bc:
6f:91:75:fc:0e:8b:ea:1e:c4:76:db:ea:6d:58:97:4b:d9:88:
7f:0e:3c:6f:77:05:44:07:0c:c8:72:5b:40:aa:bd:5c:13:18:
1c:3c:0f:33:36:d2:58:a5:91:6d:44:cd:db:84:d0:c4:c2:9e:
ce:bd:d9:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKSdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDczNTQwWhcNMjQwNDIzMDczNTQwWjAYMRYw
FAYDVQQDEw02NWZiZTM1Mi01MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyatLI/U5kzwZR/dKZAdBxcMdN1bbGAOrTXMw8+2VvyiQ0zKCK+V0G4AK
vuzgM+ND4G0wX9Ahj6YDdq03kVc9zIWDklI3G0e9+u5Gg2oXO6TQcMOGZKVkGMux
Cxc7ZbMc1xjJFSok2uQkF1nkVT4VWAVoF0JGXPU/+CujcrJgdAAh5PMf696EC/sn
+I+vypzsPrWdAuFKhDj8M6o+RvyXx5XvbDcBdfvp9fKqfziZXQdUKtasOAsm7Lxg
V+Jf1bRTMzf4CRQ6tivHIFUidNJW3BrBP+UlydDdKJphH+XlS2UDlMLhSUiV25eo
B7tPTJMHYys5WDoF4xNSLHKO1u+SmQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNWd
0AGS6GBGY8Y1umZi5p8nfsOqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BMTVEMkY1RUU3NTUxMUVFODY1Mzg0Qjk3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtoqMA0GCSqGSIb3DQEB
CwUAA4IBAQCm0VQjh/4FkmR5DKvgRhsXKGr6kmLi0dS1W7SBjXa21XdOj7txdjr7
oOc8WBOKTngNEp0mi0KlUfCGvRDakPwWTtlO09ys56zcuZ2hugALVw+Knaka97yz
WM84g4PagJaD7vFVN5inn5J74XWizTdO4sh0HHFckMDaexYcmRwNtvh+pwHkleWx
cwWCri5Q6dWFHJ6JSPhtvj39/K6doh8HZmkIf6HRaKVloNQsF5uA0V1WRq84g5m/
cciC67d38jRD3x7Vx7xvkXX8DovqHsR22+ptWJdL2Yh/DjxvdwVEBwzIcltAqr1c
ExgcPA8zNtJYpZFtRM3bhNDEwp7Ovdkf
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org