Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95CBD6EE74B11EE8A3F3B6D775412E6.roa
File: A95CBD6EE74B11EE8A3F3B6D775412E6.roa (raw, json)
Hash identifier: 8f4Wsx1z1o1TMEBHodZIF+WmZD7ikF8pfgaBnu2XEGo=
Subject key identifier: 8B:4A:0E:1F:AE:00:87:D9:37:DA:CA:89:12:4E:9B:0B:A6:C2:C3:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A43B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95CBD6EE74B11EE8A3F3B6D775412E6.roa
Signing time: Thu 21 Mar 2024 06:24:25 +0000
ROA not before: Thu 21 Mar 2024 06:24:21 +0000
ROA not after: Tue 23 Apr 2024 06:24:21 +0000
asID: 44559
IP address blocks: 154.220.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42043 (0xa43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:24:21 2024 GMT
Not After : Apr 23 06:24:21 2024 GMT
Subject: CN=65fbd298-c53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:15:a3:02:06:1e:85:dd:eb:4a:9b:34:5e:
9d:2b:f3:91:fc:25:22:d5:35:1a:84:3e:89:99:6f:
fe:df:9f:a6:c9:ec:77:f7:f6:df:5d:95:da:bd:96:
90:9f:ae:97:f8:c0:c1:89:b6:00:aa:76:0f:da:e7:
b3:a5:9d:af:1e:30:36:d7:69:ad:64:c4:9b:fb:27:
e0:03:64:da:d3:47:d5:65:7e:e3:e8:16:d7:a9:6f:
f2:c0:28:cf:71:5a:f1:c5:48:d0:0b:ac:6b:bc:c4:
16:73:9f:63:b4:1f:f9:52:94:06:2e:fe:ef:fc:45:
db:05:52:ec:39:b6:85:31:ba:e6:bc:c0:11:28:af:
a2:10:b0:64:94:39:76:3a:30:eb:71:fb:e0:66:1c:
41:9f:42:05:01:f0:7d:a8:d0:e7:4e:a4:2e:22:9a:
99:42:68:7b:34:34:92:8f:68:c5:7b:a4:3c:2d:af:
de:e4:11:e4:cb:a1:0b:10:02:71:9f:f6:b7:38:59:
8b:a7:bb:a2:c0:a6:43:59:30:5b:cb:5e:31:9f:42:
a2:20:8e:20:1a:a0:98:13:ea:13:76:c5:8d:8c:8e:
3e:37:b3:0a:bb:b3:38:61:fa:87:50:cc:a8:fe:2f:
82:9a:06:96:90:af:e0:34:7f:5e:b2:4b:f7:e9:6a:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:0E:1F:AE:00:87:D9:37:DA:CA:89:12:4E:9B:0B:A6:C2:C3:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A95CBD6EE74B11EE8A3F3B6D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.155.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:9e:ba:87:fc:67:e9:08:03:70:b0:39:ab:18:c7:d4:9f:c6:
20:dd:84:83:dd:af:0d:72:84:43:93:d2:95:ac:28:e6:37:3d:
4a:ab:d2:3f:6c:a6:12:c5:cf:37:e3:15:35:85:23:28:a0:d4:
7f:f7:96:43:89:d9:55:78:ec:8f:10:f6:12:14:33:16:fb:ed:
12:fc:b7:68:ea:93:7c:c1:b0:09:3a:fa:80:3d:a4:1f:2f:70:
aa:6d:38:a6:a6:07:46:dd:9e:e3:34:f6:ca:0c:0c:62:d0:3b:
b6:7a:3b:32:d2:bb:3f:28:c2:ef:77:dc:f0:da:73:90:c4:cc:
d9:88:da:6b:03:96:2c:b9:46:64:ee:4b:52:cd:45:57:1e:d0:
c2:36:6d:63:18:24:f3:5d:e2:56:06:9c:bc:a4:75:2a:28:e5:
39:29:f0:91:35:90:66:96:d6:e8:23:27:99:64:f7:82:9a:66:
b9:a4:dc:a6:02:b1:69:1d:49:34:f6:6e:f8:5c:5a:5f:3e:eb:
4e:5b:fe:29:0b:b9:d9:a6:96:37:96:4d:11:5d:d5:c3:8f:03:
66:18:87:72:48:15:91:cd:9e:c0:83:9f:1d:5c:1c:70:63:7a:
47:31:7f:f1:5a:f4:f6:2c:6f:65:87:08:09:51:7d:c0:bd:35:
4b:a3:42:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKQ7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDYyNDIxWhcNMjQwNDIzMDYyNDIxWjAYMRYw
FAYDVQQDEw02NWZiZDI5OC1jNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4owVowIGHoXd60qbNF6dK/OR/CUi1TUahD6JmW/+35+myex39/bfXZXa
vZaQn66X+MDBibYAqnYP2uezpZ2vHjA212mtZMSb+yfgA2Ta00fVZX7j6BbXqW/y
wCjPcVrxxUjQC6xrvMQWc59jtB/5UpQGLv7v/EXbBVLsObaFMbrmvMARKK+iELBk
lDl2OjDrcfvgZhxBn0IFAfB9qNDnTqQuIpqZQmh7NDSSj2jFe6Q8La/e5BHky6EL
EAJxn/a3OFmLp7uiwKZDWTBby14xn0KiII4gGqCYE+oTdsWNjI4+N7MKu7M4YfqH
UMyo/i+CmgaWkK/gNH9eskv36WqVSwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFItK
Dh+uAIfZN9rKiRJOmwumwsMGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOTVDQkQ2RUU3NEIxMUVFOEEzRjNCNkQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtybMA0GCSqGSIb3DQEB
CwUAA4IBAQDQnrqH/GfpCANwsDmrGMfUn8Yg3YSD3a8NcoRDk9KVrCjmNz1Kq9I/
bKYSxc834xU1hSMooNR/95ZDidlVeOyPEPYSFDMW++0S/Ldo6pN8wbAJOvqAPaQf
L3CqbTimpgdG3Z7jNPbKDAxi0Du2ejsy0rs/KMLvd9zw2nOQxMzZiNprA5YsuUZk
7ktSzUVXHtDCNm1jGCTzXeJWBpy8pHUqKOU5KfCRNZBmltboIyeZZPeCmma5pNym
ArFpHUk09m74XFpfPutOW/4pC7nZppY3lk0RXdXDjwNmGIdySBWRzZ7Ag58dXBxw
Y3pHMX/xWvT2LG9lhwgJUX3AvTVLo0Ly
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org