Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B9E342AB6F11EE850EAFBE775412E6.roa
File: A1B9E342AB6F11EE850EAFBE775412E6.roa (raw, json)
Hash identifier: 5/30+BULPWRo7qQKQb0NYw0J+50+HBy2tAR/2Gm6pDk=
Subject key identifier: 1C:DF:7D:57:EE:3B:DC:F0:84:F3:7E:33:35:68:5F:66:AF:64:64:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6F75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B9E342AB6F11EE850EAFBE775412E6.roa
Signing time: Fri 05 Jan 2024 02:10:44 +0000
ROA not before: Fri 05 Jan 2024 02:10:40 +0000
ROA not after: Sun 05 Jan 2025 02:10:40 +0000
asID: 18233
IP address blocks: 154.197.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28533 (0x6f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 02:10:40 2024 GMT
Not After : Jan 5 02:10:40 2025 GMT
Subject: CN=65976524-d42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:88:ad:9a:83:18:67:77:7c:c7:d3:cc:e1:
6f:de:1f:74:53:21:ad:ac:52:2f:d6:52:07:28:bc:
f5:a7:30:a8:36:91:6c:a6:d3:4f:3d:2d:54:15:5d:
7a:67:14:74:e0:6b:cf:f5:ab:c5:94:13:67:56:7e:
aa:ca:bc:6b:4b:81:1f:2c:ce:18:86:63:3d:1d:09:
71:7c:0e:91:32:c7:5d:6a:04:b5:ac:d0:f7:4d:34:
1b:14:3c:57:92:e8:c2:e0:26:72:33:fb:7e:39:30:
77:c8:58:58:f6:5f:41:c2:1e:7f:13:5e:6c:b5:5b:
d8:dd:64:47:e7:f5:7a:e4:d2:b3:e2:cb:a1:4d:8d:
73:7c:0d:a0:a9:4f:47:1f:eb:96:2a:74:82:9e:29:
04:ba:78:e3:c6:d2:c1:e9:bd:65:c4:24:41:69:4b:
b2:bc:42:90:be:91:6c:a7:42:e1:f4:e7:7e:80:ff:
0b:b1:ae:c6:05:49:b2:be:0f:2e:65:5a:86:cc:24:
bb:86:a3:c1:00:fe:93:aa:2e:d4:9f:2d:01:c5:ed:
58:59:3b:26:d1:4d:9d:33:b9:57:ea:d0:d8:f8:b4:
b1:f5:b6:66:dc:76:dd:dc:61:17:97:a6:14:d9:5a:
2d:01:e2:35:1d:78:21:50:a9:86:a7:c4:27:0a:ab:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DF:7D:57:EE:3B:DC:F0:84:F3:7E:33:35:68:5F:66:AF:64:64:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B9E342AB6F11EE850EAFBE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/23
Signature Algorithm: sha256WithRSAEncryption
14:09:9b:31:0a:f3:03:bd:bb:40:64:c5:f9:59:e5:2f:3e:02:
3d:47:db:81:90:75:0f:76:7b:42:01:80:1f:10:dc:03:12:68:
c5:9c:55:50:18:1b:8e:9f:bd:60:df:75:2b:b9:4d:08:f6:2d:
d2:ed:58:a5:ff:f8:45:46:99:03:d1:20:64:48:20:b5:55:a6:
ec:66:89:1c:7a:b1:9c:11:7f:90:79:6c:a6:71:d9:03:9f:32:
9e:c4:44:93:3b:c7:59:ff:ad:4d:ca:07:8f:3e:e2:55:02:bd:
ca:9a:30:4d:c1:19:ca:2a:08:b7:ff:15:b3:88:49:3c:7e:c7:
20:a9:d4:fc:93:3b:82:ac:57:06:ba:04:f1:53:87:63:4c:48:
0c:cf:f8:13:c5:3f:69:b8:6d:02:22:8b:c7:01:f3:d8:99:63:
62:aa:b5:ab:fa:e9:d0:2d:a0:a8:4f:a5:3c:7e:41:f4:9f:b9:
bb:4c:b9:1d:1a:98:f2:ab:ec:1e:d2:a1:b8:f0:46:41:26:05:
45:01:f1:0c:a5:20:33:4c:83:a0:72:68:8c:a8:1b:77:3b:9e:
91:94:ed:e0:41:e4:d8:82:e4:eb:7e:1f:ec:71:10:ca:ba:35:
08:1b:2c:8c:18:26:7a:a3:18:c3:c5:f0:ba:9a:e3:51:e4:63:
26:78:8e:65
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICb3UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMDUwMjEwNDBaFw0yNTAxMDUwMjEwNDBaMBgxFjAU
BgNVBAMTDTY1OTc2NTI0LWQ0MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRU4itmoMYZ3d8x9PM4W/eH3RTIa2sUi/WUgcovPWnMKg2kWym0089LVQV
XXpnFHTga8/1q8WUE2dWfqrKvGtLgR8szhiGYz0dCXF8DpEyx11qBLWs0PdNNBsU
PFeS6MLgJnIz+345MHfIWFj2X0HCHn8TXmy1W9jdZEfn9Xrk0rPiy6FNjXN8DaCp
T0cf65YqdIKeKQS6eOPG0sHpvWXEJEFpS7K8QpC+kWynQuH0536A/wuxrsYFSbK+
Dy5lWobMJLuGo8EA/pOqLtSfLQHF7VhZOybRTZ0zuVfq0Nj4tLH1tmbcdt3cYReX
phTZWi0B4jUdeCFQqYanxCcKq1tfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUHN99
V+473PCE834zNWhfZq9kZAkwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0ExQjlFMzQyQUI2RjExRUU4NTBFQUZCRTc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGaxTwwDQYJKoZIhvcNAQEL
BQADggEBABQJmzEK8wO9u0BkxflZ5S8+Aj1H24GQdQ92e0IBgB8Q3AMSaMWcVVAY
G46fvWDfdSu5TQj2LdLtWKX/+EVGmQPRIGRIILVVpuxmiRx6sZwRf5B5bKZx2QOf
Mp7ERJM7x1n/rU3KB48+4lUCvcqaME3BGcoqCLf/FbOISTx+xyCp1PyTO4KsVwa6
BPFTh2NMSAzP+BPFP2m4bQIii8cB89iZY2Kqtav66dAtoKhPpTx+QfSfubtMuR0a
mPKr7B7SobjwRkEmBUUB8QylIDNMg6ByaIyoG3c7npGU7eBB5NiC5Ot+H+xxEMq6
NQgbLIwYJnqjGMPF8Lqa41HkYyZ4jmU=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org