Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B05DFC10E75811EEAAFC5953775412E6.roa
File: B05DFC10E75811EEAAFC5953775412E6.roa (raw, json)
Hash identifier: fggeRgBRl1c9/ttY+1/B/772JSDpqpYKGuWk1gk29y8=
Subject key identifier: 9E:B8:70:EB:A3:0A:44:C4:8A:12:A6:40:E0:FD:75:33:62:96:F4:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B05DFC10E75811EEAAFC5953775412E6.roa
Signing time: Thu 21 Mar 2024 07:57:40 +0000
ROA not before: Thu 21 Mar 2024 07:57:36 +0000
ROA not after: Tue 23 Apr 2024 07:57:36 +0000
asID: 44559
IP address blocks: 154.211.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42171 (0xa4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:57:36 2024 GMT
Not After : Apr 23 07:57:36 2024 GMT
Subject: CN=65fbe874-ee3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:35:49:77:0e:97:91:a8:34:80:36:9d:57:
c1:ed:ba:a9:11:99:85:78:51:49:1a:8d:27:47:79:
f0:fe:00:d0:6a:8e:b6:35:30:b6:94:c6:f7:68:29:
ba:23:4a:2d:f3:8e:58:7b:73:65:46:b1:0c:9d:22:
2c:db:b4:93:3b:34:1d:6b:25:ec:ec:66:54:f0:c0:
fc:a1:b5:6b:c1:e2:37:2a:19:53:68:dd:ee:8c:74:
f6:02:e9:1a:79:94:b2:59:ed:e2:c6:4a:d7:16:7c:
02:07:db:1b:7f:67:87:06:76:1e:cb:49:c3:5e:9f:
cc:23:91:92:b3:c1:a6:60:ae:3d:16:7f:ef:f3:1f:
7e:d6:3c:7a:3d:1c:16:9f:12:57:ae:fc:b8:0f:98:
6c:7e:55:eb:20:e0:2e:c6:f1:51:54:b6:5f:84:5f:
9f:f6:18:00:c0:7e:6c:11:8e:b0:ce:4d:f3:62:53:
86:10:76:0e:56:95:d1:c3:b9:0a:ad:9e:30:70:94:
09:7f:22:7b:57:49:86:de:56:29:34:95:2f:22:e5:
87:15:a8:04:a3:21:e4:b6:53:58:99:69:72:71:ab:
00:f0:a8:d8:0f:0d:fe:0c:65:9b:5d:7d:5c:37:3f:
73:6c:de:10:a7:1b:62:52:71:5f:62:6b:14:2a:aa:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:70:EB:A3:0A:44:C4:8A:12:A6:40:E0:FD:75:33:62:96:F4:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B05DFC10E75811EEAAFC5953775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:16:9d:25:52:a6:79:2b:06:62:80:0f:cb:e1:4e:b5:d1:b2:
70:b0:58:e4:59:f2:b1:86:ec:3d:0a:28:3f:d6:80:1d:d8:3e:
a9:05:91:b7:4c:6c:a8:0d:d7:00:71:7f:a7:eb:f0:32:bb:60:
e1:7f:dc:47:36:61:f3:fb:7f:c8:0c:74:f3:46:91:7b:7b:45:
c6:c6:2b:b2:34:90:e6:ab:b3:b1:01:75:7e:0f:5d:a2:3f:a9:
e7:03:02:6d:ea:32:3a:8f:15:1a:0e:6c:01:a5:8e:c1:d3:50:
ba:f5:72:92:0d:d8:e6:2d:ff:2d:32:18:8f:85:05:10:0d:4c:
66:d5:9f:19:9b:47:15:45:65:61:31:68:b9:b5:90:8f:c4:02:
48:91:4c:3f:da:97:51:8e:13:6f:29:80:92:08:2e:bf:db:cd:
57:65:24:0a:92:c2:3c:15:2e:1c:c3:cf:e0:5b:4a:5f:4d:cf:
16:2e:73:7f:5a:a9:de:b6:11:fd:d7:7e:d1:21:b9:df:58:a2:
1f:9e:b7:d5:c8:be:00:65:76:fb:89:7a:53:4a:79:87:4d:53:
3e:6d:45:12:8c:43:c8:c7:30:16:39:ca:e3:8c:2c:10:3b:07:
95:10:00:bd:d5:22:b5:c9:6d:57:40:a3:07:0e:c7:87:48:bc:
ee:ff:1b:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKS7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDc1NzM2WhcNMjQwNDIzMDc1NzM2WjAYMRYw
FAYDVQQDEw02NWZiZTg3NC1lZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5Oc1SXcOl5GoNIA2nVfB7bqpEZmFeFFJGo0nR3nw/gDQao62NTC2lMb3
aCm6I0ot845Ye3NlRrEMnSIs27STOzQdayXs7GZU8MD8obVrweI3KhlTaN3ujHT2
AukaeZSyWe3ixkrXFnwCB9sbf2eHBnYey0nDXp/MI5GSs8GmYK49Fn/v8x9+1jx6
PRwWnxJXrvy4D5hsflXrIOAuxvFRVLZfhF+f9hgAwH5sEY6wzk3zYlOGEHYOVpXR
w7kKrZ4wcJQJfyJ7V0mG3lYpNJUvIuWHFagEoyHktlNYmWlycasA8KjYDw3+DGWb
XX1cNz9zbN4QpxtiUnFfYmsUKqreKwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ64
cOujCkTEihKmQOD9dTNilvQYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMDVERkMxMEU3NTgxMUVFQUFGQzU5NTM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtM7MA0GCSqGSIb3DQEB
CwUAA4IBAQAdFp0lUqZ5KwZigA/L4U610bJwsFjkWfKxhuw9Cig/1oAd2D6pBZG3
TGyoDdcAcX+n6/Ayu2Dhf9xHNmHz+3/IDHTzRpF7e0XGxiuyNJDmq7OxAXV+D12i
P6nnAwJt6jI6jxUaDmwBpY7B01C69XKSDdjmLf8tMhiPhQUQDUxm1Z8Zm0cVRWVh
MWi5tZCPxAJIkUw/2pdRjhNvKYCSCC6/281XZSQKksI8FS4cw8/gW0pfTc8WLnN/
WqnethH9137RIbnfWKIfnrfVyL4AZXb7iXpTSnmHTVM+bUUSjEPIxzAWOcrjjCwQ
OweVEAC91SK1yW1XQKMHDseHSLzu/xvt
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org