Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B147B706E78011EEA774DC8A775412E6.roa
File: B147B706E78011EEA774DC8A775412E6.roa (raw, json)
Hash identifier: O2OrNbfUbrFw+tOgTP9eYV+cybbrjKxq2KOq+ACnrU0=
Subject key identifier: AC:2E:47:28:6E:7E:B9:0A:80:43:D3:9F:2B:39:EF:A8:81:40:79:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A56D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B147B706E78011EEA774DC8A775412E6.roa
Signing time: Thu 21 Mar 2024 12:44:01 +0000
ROA not before: Thu 21 Mar 2024 12:43:58 +0000
ROA not after: Tue 23 Apr 2024 12:43:58 +0000
asID: 44559
IP address blocks: 154.210.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42349 (0xa56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:43:58 2024 GMT
Not After : Apr 23 12:43:58 2024 GMT
Subject: CN=65fc2b91-4876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:d6:03:b0:6f:db:41:28:00:70:e1:2c:21:
4b:f3:b8:c5:75:fb:b2:bf:00:af:fa:9d:d0:62:56:
0b:7a:23:28:c5:05:74:fb:83:21:1e:04:66:37:80:
c6:d9:5b:76:ec:82:c6:6d:f2:47:8a:94:b1:6e:92:
2f:31:9d:9d:1e:91:be:85:47:82:df:af:ab:88:09:
e3:fe:10:df:66:82:0f:48:a5:6d:66:4d:7f:5c:12:
2c:13:6e:93:88:43:e4:eb:ed:dd:84:f7:ff:1e:56:
e6:59:f5:0c:82:b2:8c:17:70:1f:14:26:ba:c3:b6:
d0:84:4b:93:d1:06:52:98:b4:76:c7:8e:1c:f5:99:
31:e5:db:fb:a9:45:03:8c:c6:08:ee:b3:43:c8:17:
0a:70:b4:5a:8c:5e:ab:a9:c4:2d:38:57:9d:4c:de:
e5:78:b8:07:8f:dc:89:a9:59:d5:fa:a4:50:b0:bc:
69:83:81:3e:33:b1:57:65:89:97:68:66:dc:e0:58:
ba:c9:f5:43:69:f4:4a:a8:b4:b3:b9:fc:5e:6f:19:
c3:f8:7f:cb:d7:5f:9b:ce:9e:4f:73:81:1a:00:99:
a4:10:81:d9:63:4c:c5:90:14:59:d4:3c:cd:d0:a0:
77:29:5e:ce:ff:5f:0a:bb:09:f6:f1:e1:96:72:ef:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:47:28:6E:7E:B9:0A:80:43:D3:9F:2B:39:EF:A8:81:40:79:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B147B706E78011EEA774DC8A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.102.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:01:f3:39:50:e4:9e:7e:b4:57:70:fb:74:68:16:77:78:54:
00:89:79:53:00:47:d5:0f:65:d2:9c:71:54:bf:2b:27:11:1c:
a1:34:58:a7:ae:f0:7d:42:e6:e9:ad:58:a6:86:48:29:07:8b:
e5:67:06:34:1b:8b:12:82:a1:ff:72:79:e7:80:d8:f8:0d:16:
79:7d:de:fa:d0:9c:bf:9e:76:a8:6b:6b:b8:e5:7a:84:f1:29:
c3:21:bf:e0:d4:ad:c9:f8:c8:8f:2c:53:52:6f:b1:e0:24:d6:
c9:ed:b2:81:51:80:a2:ae:ac:00:c9:3e:97:6b:38:bc:3c:1b:
94:28:72:09:4a:e8:18:1c:3c:05:65:4e:3b:80:fe:16:1b:0a:
75:55:da:64:d2:40:49:1d:ff:54:e4:3c:f1:1c:6a:c0:69:44:
9c:aa:3a:e0:f8:77:83:77:40:36:47:65:07:58:a4:a4:aa:e7:
93:24:b3:18:06:76:1c:b8:93:22:b7:98:00:78:77:06:7e:f7:
02:fe:09:9d:64:a9:57:54:44:2a:29:51:ba:87:0d:b7:11:d5:
d2:c5:73:03:93:70:50:f7:8b:5b:02:76:d1:fa:96:47:67:87:
b8:c6:b3:d3:f9:92:60:9b:fc:82:ce:a1:7d:2c:c3:f3:d5:19:
5a:8c:ed:f5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKVtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMTI0MzU4WhcNMjQwNDIzMTI0MzU4WjAYMRYw
FAYDVQQDEw02NWZjMmI5MS00ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtknWA7Bv20EoAHDhLCFL87jFdfuyvwCv+p3QYlYLeiMoxQV0+4MhHgRm
N4DG2Vt27ILGbfJHipSxbpIvMZ2dHpG+hUeC36+riAnj/hDfZoIPSKVtZk1/XBIs
E26TiEPk6+3dhPf/HlbmWfUMgrKMF3AfFCa6w7bQhEuT0QZSmLR2x44c9Zkx5dv7
qUUDjMYI7rNDyBcKcLRajF6rqcQtOFedTN7leLgHj9yJqVnV+qRQsLxpg4E+M7FX
ZYmXaGbc4Fi6yfVDafRKqLSzufxebxnD+H/L11+bzp5Pc4EaAJmkEIHZY0zFkBRZ
1DzN0KB3KV7O/18Kuwn28eGWcu/HnwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKwu
RyhufrkKgEPTnys576iBQHliMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMTQ3QjcwNkU3ODAxMUVFQTc3NERDOEE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJmMA0GCSqGSIb3DQEB
CwUAA4IBAQC9AfM5UOSefrRXcPt0aBZ3eFQAiXlTAEfVD2XSnHFUvysnERyhNFin
rvB9QubprVimhkgpB4vlZwY0G4sSgqH/cnnngNj4DRZ5fd760Jy/nnaoa2u45XqE
8SnDIb/g1K3J+MiPLFNSb7HgJNbJ7bKBUYCirqwAyT6Xazi8PBuUKHIJSugYHDwF
ZU47gP4WGwp1Vdpk0kBJHf9U5DzxHGrAaUScqjrg+HeDd0A2R2UHWKSkqueTJLMY
BnYcuJMit5gAeHcGfvcC/gmdZKlXVEQqKVG6hw23EdXSxXMDk3BQ94tbAnbR+pZH
Z4e4xrPT+ZJgm/yCzqF9LMPz1RlajO31
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org