Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7ECCEBEE73311EEAE2A15B0775412E6.roa
File: A7ECCEBEE73311EEAE2A15B0775412E6.roa (raw, json)
Hash identifier: o0yGgZwjMJW9LPOMfSxl5Za0wb45c+RCk5ZuleUxBtA=
Subject key identifier: 32:B7:1C:10:8B:50:E3:F7:07:D6:7B:88:F9:67:D5:42:F9:D8:56:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A350
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7ECCEBEE73311EEAE2A15B0775412E6.roa
Signing time: Thu 21 Mar 2024 03:32:34 +0000
ROA not before: Thu 21 Mar 2024 03:32:31 +0000
ROA not after: Tue 23 Apr 2024 03:32:31 +0000
asID: 44559
IP address blocks: 154.207.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41808 (0xa350)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:32:31 2024 GMT
Not After : Apr 23 03:32:31 2024 GMT
Subject: CN=65fbaa52-f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:92:37:26:f2:d8:9c:cd:8f:c5:67:5b:18:ed:
7c:3c:ed:4c:99:15:e7:06:8c:7f:42:47:d9:84:24:
11:64:a3:bc:30:b2:71:c2:50:9b:56:4e:06:e9:9b:
32:df:34:d0:16:4d:3c:d8:dd:99:31:cb:e7:c1:b8:
cd:bb:e0:59:79:0b:c0:7e:b9:ed:d0:a4:c4:ac:1c:
02:04:82:ed:1a:0c:2b:ac:33:59:01:06:d5:ba:4a:
b5:81:f4:b4:0e:8d:46:b9:f5:8e:e5:fc:8b:0a:fa:
16:35:6d:4f:90:61:56:95:7c:3f:03:a2:2b:0e:3b:
86:f6:11:35:6e:97:d5:7c:86:77:79:29:cb:78:4f:
a9:b5:56:96:0f:e3:24:14:60:79:56:e8:85:10:87:
28:fb:2e:73:7a:46:b8:c9:ff:61:ba:a6:2f:0b:9b:
db:ec:ab:b8:4a:18:39:7a:34:c6:22:c6:1d:4c:d6:
c2:9b:96:80:67:cb:69:05:73:d9:d7:2f:4c:b2:22:
47:13:28:25:c3:d1:52:e5:5e:07:cc:a6:fb:eb:9a:
a3:47:ae:9e:26:19:3a:1d:e5:d0:61:23:22:26:ff:
1e:5a:cd:11:b6:e7:56:1e:62:bf:f2:0c:a9:a0:e7:
33:e4:11:39:9a:5b:cd:89:bb:b5:d6:6b:00:4c:09:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:1C:10:8B:50:E3:F7:07:D6:7B:88:F9:67:D5:42:F9:D8:56:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7ECCEBEE73311EEAE2A15B0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b9:d1:ad:84:2c:6e:2d:98:80:61:a5:9d:de:ea:da:fb:aa:
6e:3a:bb:21:28:06:75:ac:74:e6:85:30:d9:00:36:2c:76:33:
7a:10:9d:f1:67:69:fb:6f:c7:d6:b0:64:6d:9d:cc:63:46:18:
21:0d:15:ad:e1:ee:63:a0:75:21:5c:61:28:90:22:c3:47:2c:
6c:57:41:1d:a2:06:ec:a1:c6:48:e2:50:be:b7:5e:a9:e9:3b:
3a:8f:9a:ff:96:5b:fd:93:1d:f2:4c:a2:ee:ce:27:58:7b:c6:
05:95:a3:0a:c9:2c:e4:92:e1:95:e7:b5:32:1c:38:45:ea:da:
c5:1b:fe:32:bc:1e:79:0c:4f:f0:42:91:4c:cb:86:8e:5e:57:
32:5b:eb:33:c5:f9:d5:c8:ec:f9:5b:12:ee:f7:4a:56:a7:43:
74:f4:7f:4e:50:7c:4e:8b:aa:03:ad:75:fc:78:d5:8d:01:84:
2a:5f:f9:5f:50:4c:d5:c7:24:01:61:8d:1a:02:cb:96:32:9b:
09:20:a5:c0:de:63:85:ff:10:24:1d:6c:2d:c3:b9:52:a1:d1:
21:ff:35:f8:95:31:c2:f1:2c:2c:e5:ba:8f:89:ad:e6:d1:86:
a8:e1:87:d9:6b:42:75:c4:96:75:0b:14:7a:e1:65:98:79:58:
6c:0f:95:1a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKNQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDMzMjMxWhcNMjQwNDIzMDMzMjMxWjAYMRYw
FAYDVQQDEw02NWZiYWE1Mi1mNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAupI3JvLYnM2PxWdbGO18PO1MmRXnBox/QkfZhCQRZKO8MLJxwlCbVk4G
6Zsy3zTQFk082N2ZMcvnwbjNu+BZeQvAfrnt0KTErBwCBILtGgwrrDNZAQbVukq1
gfS0Do1GufWO5fyLCvoWNW1PkGFWlXw/A6IrDjuG9hE1bpfVfIZ3eSnLeE+ptVaW
D+MkFGB5VuiFEIco+y5zeka4yf9huqYvC5vb7Ku4Shg5ejTGIsYdTNbCm5aAZ8tp
BXPZ1y9MsiJHEyglw9FS5V4HzKb765qjR66eJhk6HeXQYSMiJv8eWs0RtudWHmK/
8gypoOcz5BE5mlvNibu11msATAlXhwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDK3
HBCLUOP3B9Z7iPln1UL52FYbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BN0VDQ0VCRUU3MzMxMUVFQUUyQTE1QjA3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms8RMA0GCSqGSIb3DQEB
CwUAA4IBAQB/udGthCxuLZiAYaWd3ura+6puOrshKAZ1rHTmhTDZADYsdjN6EJ3x
Z2n7b8fWsGRtncxjRhghDRWt4e5joHUhXGEokCLDRyxsV0EdogbsocZI4lC+t16p
6Ts6j5r/llv9kx3yTKLuzidYe8YFlaMKySzkkuGV57UyHDhF6trFG/4yvB55DE/w
QpFMy4aOXlcyW+szxfnVyOz5WxLu90pWp0N09H9OUHxOi6oDrXX8eNWNAYQqX/lf
UEzVxyQBYY0aAsuWMpsJIKXA3mOF/xAkHWwtw7lSodEh/zX4lTHC8Sws5bqPia3m
0Yao4YfZa0J1xJZ1CxR64WWYeVhsD5Ua
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org