Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B11817A2E59311EDBF8A7B764AD9E6FC.roa
File: B11817A2E59311EDBF8A7B764AD9E6FC.roa (raw, json)
Hash identifier: WrcgvjwdOyaMZ43SIXSGybe1YVMSAKAQqLYv3MJHJTg=
Subject key identifier: 75:AE:6D:69:D4:48:F5:3C:F2:31:C1:02:44:45:DB:E1:06:B0:99:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 201F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B11817A2E59311EDBF8A7B764AD9E6FC.roa
Signing time: Fri 28 Apr 2023 07:10:01 +0000
ROA not before: Fri 28 Apr 2023 07:09:58 +0000
ROA not after: Tue 30 Apr 2024 07:09:58 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 07:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8223 (0x201f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 28 07:09:58 2023 GMT
Not After : Apr 30 07:09:58 2024 GMT
Subject: CN=644b7149-f3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:a7:bb:9c:f9:66:fb:ea:f0:70:a7:f0:78:
e8:90:cd:c6:f3:1c:07:5e:55:fc:f8:1e:6b:23:59:
d6:3e:4a:c4:bf:f9:e8:e1:39:bf:4b:99:57:3f:57:
3b:26:b9:da:ec:74:33:bf:d5:e3:f9:b7:f3:c6:2a:
d4:2a:a7:3f:d1:79:86:15:8f:66:95:dd:08:f3:f8:
cb:83:69:f1:c1:90:fa:bb:94:19:21:06:6e:ca:c6:
c6:53:aa:94:99:7c:d8:f8:b0:c8:14:03:2f:e9:5c:
8a:68:2f:71:29:4a:42:cc:06:15:3a:fa:36:ad:4d:
c2:37:8c:63:62:43:11:ed:3a:09:a4:e8:86:a7:33:
90:81:91:69:29:22:20:11:d6:81:b6:47:11:4c:31:
62:92:e2:a6:62:f7:98:92:a4:cd:9c:06:06:3a:e4:
bb:9c:1a:0a:88:9d:07:11:d6:c1:db:36:3b:25:44:
ed:1d:0f:39:b1:dc:67:89:ff:45:86:2a:a3:4b:d1:
d2:6a:c2:3e:83:d9:bc:f7:49:1b:49:a2:3a:0c:5b:
d7:f1:db:ca:6a:65:5f:83:06:6e:75:04:9d:60:de:
34:e3:55:77:83:1c:63:5a:65:f7:31:7b:be:f1:2d:
fd:85:03:60:d4:a3:1a:3b:38:77:37:27:e3:7b:76:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:6D:69:D4:48:F5:3C:F2:31:C1:02:44:45:DB:E1:06:B0:99:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B11817A2E59311EDBF8A7B764AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
01:3e:cd:9c:82:9a:57:5f:dc:5b:8b:c9:be:10:3e:b2:42:46:
65:27:cb:de:01:18:78:e1:06:37:c4:85:75:d3:68:7e:e3:65:
cd:63:82:b9:cf:91:72:b0:70:cc:0a:e6:1d:37:30:00:fd:aa:
2a:7c:c5:fe:2c:bc:3c:0b:2a:b5:8a:a4:c8:7f:97:f8:06:08:
03:6b:d6:fe:37:12:8e:3a:3a:48:63:4a:f2:c5:70:fc:0f:76:
1c:00:0a:3f:54:0f:e4:7c:fa:a2:c9:70:05:29:b9:3e:37:e6:
05:e8:b2:72:3f:9c:77:1d:87:05:be:8b:e2:06:75:68:25:e2:
e0:d6:0b:26:e4:62:7b:c9:04:33:14:71:fb:5d:db:36:f3:03:
6a:d0:19:6f:77:b6:c9:be:dc:c4:76:b9:56:45:ef:23:13:bc:
3d:7c:54:c7:96:6b:1b:f0:a6:85:a2:b3:ac:1e:26:91:b4:c4:
28:e5:45:2b:09:95:9b:85:32:d9:b8:b8:71:9c:39:c1:c5:c6:
fd:87:8e:4e:fb:47:e1:d3:71:fb:e3:f3:f1:06:dd:56:3b:7d:
33:0a:40:ef:b0:ec:9f:cf:d1:89:ab:79:1c:2a:4c:b1:55:e1:
34:04:c4:84:ff:5e:d6:37:18:d3:79:2a:b2:a1:a0:6f:d0:ad:
48:9f:28:03
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICIB8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA0MjgwNzA5NThaFw0yNDA0MzAwNzA5NThaMBgxFjAU
BgNVBAMTDTY0NGI3MTQ5LWYzYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEYKe7nPlm++rwcKfweOiQzcbzHAdeVfz4HmsjWdY+SsS/+ejhOb9LmVc/
VzsmudrsdDO/1eP5t/PGKtQqpz/ReYYVj2aV3Qjz+MuDafHBkPq7lBkhBm7KxsZT
qpSZfNj4sMgUAy/pXIpoL3EpSkLMBhU6+jatTcI3jGNiQxHtOgmk6IanM5CBkWkp
IiAR1oG2RxFMMWKS4qZi95iSpM2cBgY65LucGgqInQcR1sHbNjslRO0dDzmx3GeJ
/0WGKqNL0dJqwj6D2bz3SRtJojoMW9fx28pqZV+DBm51BJ1g3jTjVXeDHGNaZfcx
e77xLf2FA2DUoxo7OHc3J+N7dmmNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUda5t
adRI9TzyMcECREXb4Qawme4wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0IxMTgxN0EyRTU5MzExRURCRjhBN0I3NjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASaVhAwDQYJKoZIhvcNAQEL
BQADggEBAAE+zZyCmldf3FuLyb4QPrJCRmUny94BGHjhBjfEhXXTaH7jZc1jgrnP
kXKwcMwK5h03MAD9qip8xf4svDwLKrWKpMh/l/gGCANr1v43Eo46OkhjSvLFcPwP
dhwACj9UD+R8+qLJcAUpuT435gXosnI/nHcdhwW+i+IGdWgl4uDWCybkYnvJBDMU
cftd2zbzA2rQGW93tsm+3MR2uVZF7yMTvD18VMeWaxvwpoWis6weJpG0xCjlRSsJ
lZuFMtm4uHGcOcHFxv2Hjk77R+HTcfvj8/EG3VY7fTMKQO+w7J/P0YmreRwqTLFV
4TQExIT/XtY3GNN5KrKhoG/QrUifKAM=
-----END CERTIFICATE-----
Generated at Mon Apr 29 12:50:15 2024 by rpki-client on console-ams.rpki-client.org