Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B244FA127EBA11EEAD9C4E604AD9E6FC.roa
File: B244FA127EBA11EEAD9C4E604AD9E6FC.roa (raw, json)
Hash identifier: xZ/XYZ4PV11VXiVCnQj2boECe/9yHxGyE4WdEKNgEXo=
Subject key identifier: F7:77:5E:4C:A9:7D:11:1F:C7:D2:EB:3C:C8:72:66:12:C1:ED:A4:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B244FA127EBA11EEAD9C4E604AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:44:41 +0000
ROA not before: Thu 09 Nov 2023 04:44:38 +0000
ROA not after: Thu 08 Aug 2024 04:44:38 +0000
asID: 133861
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19917 (0x4dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:44:38 2023 GMT
Not After : Aug 8 04:44:38 2024 GMT
Subject: CN=654c63b9-1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:d7:84:bb:04:59:24:82:e6:19:38:47:9f:
8d:75:94:a7:86:3b:8c:8c:a0:c1:a2:41:e9:c5:2a:
3a:ec:42:5f:b3:f2:13:2a:1f:33:f6:eb:f3:fa:c1:
6e:a6:82:5d:ed:8d:f7:19:14:65:76:e3:1c:9e:d5:
cd:61:27:23:e5:71:84:ea:ee:44:3e:8f:f4:c5:39:
58:1a:ca:aa:5b:a5:66:3b:7a:8e:91:84:0f:16:3c:
36:2e:bf:f4:36:31:7e:68:f6:88:49:b3:b9:57:0f:
62:dd:e9:63:4b:e4:fa:96:d9:a5:cd:c7:8a:0a:bc:
5c:38:8f:15:42:1c:c9:36:1e:38:79:d6:31:6e:22:
c6:18:9e:6a:70:52:d9:13:18:1c:f0:f9:98:35:93:
65:5e:39:3f:38:9a:2e:c4:9d:85:3e:31:16:5b:07:
81:57:af:3d:f1:e7:12:b5:46:01:37:57:0f:d3:b4:
df:82:ea:8d:ff:db:c2:f4:de:c8:64:a9:19:af:c6:
57:27:eb:7d:ec:89:6b:77:0f:f6:ed:da:3a:b6:d2:
57:a4:a4:76:22:a2:ee:09:f3:df:66:7b:cc:8e:c6:
8a:19:50:f8:5d:14:30:a3:28:f6:fb:6e:69:d2:a7:
ec:a5:54:8b:30:5a:a7:07:92:8a:23:d5:8c:c8:34:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:77:5E:4C:A9:7D:11:1F:C7:D2:EB:3C:C8:72:66:12:C1:ED:A4:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B244FA127EBA11EEAD9C4E604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7b:8b:15:06:c5:cd:ad:01:d1:52:a6:84:8b:f1:f4:fc:18:
1e:ba:40:6d:ab:e6:5f:fd:05:77:11:f2:01:1d:ca:f2:8b:a2:
69:ee:45:cf:2c:6f:5d:d5:e0:71:f9:d5:85:57:45:5c:f2:4f:
2f:14:ef:66:2e:78:10:e3:71:b2:c3:17:bb:4e:d8:7d:85:ef:
ee:6c:24:a0:60:56:87:27:32:59:cb:42:f1:93:bc:78:1e:af:
38:a4:51:4b:f7:35:a3:5a:71:72:02:fb:a5:08:de:0d:b7:f5:
f3:05:3c:e3:c5:63:1e:1a:eb:58:2b:91:9e:ff:51:fb:51:91:
fd:ae:18:4e:07:89:5a:a0:51:01:20:14:4f:db:e5:02:31:4b:
5a:f5:cc:78:19:f1:2c:69:ca:0e:e8:a2:34:3c:44:be:4e:da:
91:b1:c1:e6:44:ed:91:e6:76:a1:13:9d:30:d6:2f:b7:ea:b1:
cc:7c:5e:5a:c2:cf:e5:90:55:c3:3f:ec:db:11:67:2f:76:e3:
12:54:02:02:2b:ec:9b:53:77:66:e1:26:ea:2f:d5:a0:cc:0c:
04:ea:82:2b:ee:bf:d7:bd:fe:e7:b2:35:e9:8f:63:fa:05:03:
b3:f4:be:4a:5e:26:94:6a:f1:ed:64:bd:00:fb:85:ba:da:86:
57:b6:9d:2f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICTc0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDkwNDQ0MzhaFw0yNDA4MDgwNDQ0MzhaMBgxFjAU
BgNVBAMTDTY1NGM2M2I5LTEyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtgteEuwRZJILmGThHn411lKeGO4yMoMGiQenFKjrsQl+z8hMqHzP26/P6
wW6mgl3tjfcZFGV24xye1c1hJyPlcYTq7kQ+j/TFOVgayqpbpWY7eo6RhA8WPDYu
v/Q2MX5o9ohJs7lXD2Ld6WNL5PqW2aXNx4oKvFw4jxVCHMk2Hjh51jFuIsYYnmpw
UtkTGBzw+Zg1k2VeOT84mi7EnYU+MRZbB4FXrz3x5xK1RgE3Vw/TtN+C6o3/28L0
3shkqRmvxlcn633siWt3D/bt2jq20lekpHYiou4J899me8yOxooZUPhdFDCjKPb7
bmnSp+ylVIswWqcHkooj1YzINCSrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU93de
TKl9ER/H0us8yHJmEsHtpFowHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0IyNDRGQTEyN0VCQTExRUVBRDlDNEU2MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaxRgwDQYJKoZIhvcNAQEL
BQADggEBAKF7ixUGxc2tAdFSpoSL8fT8GB66QG2r5l/9BXcR8gEdyvKLomnuRc8s
b13V4HH51YVXRVzyTy8U72YueBDjcbLDF7tO2H2F7+5sJKBgVocnMlnLQvGTvHge
rzikUUv3NaNacXIC+6UI3g239fMFPOPFYx4a61grkZ7/UftRkf2uGE4HiVqgUQEg
FE/b5QIxS1r1zHgZ8Sxpyg7oojQ8RL5O2pGxweZE7ZHmdqETnTDWL7fqscx8XlrC
z+WQVcM/7NsRZy924xJUAgIr7JtTd2bhJuov1aDMDATqgivuv9e9/ueyNemPY/oF
A7P0vkpeJpRq8e1kvQD7hbrahle2nS8=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org