Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E7DE96D3A911EEB9889B5A775412E6.roa
File: B2E7DE96D3A911EEB9889B5A775412E6.roa (raw, json)
Hash identifier: ofLT9ifoqEVD8EOiXoFEa5pcpPRkYjaXVDWTWQSWFZI=
Subject key identifier: 11:3D:D9:99:37:C2:77:E8:34:15:92:6D:72:90:6D:36:E9:03:DA:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8DE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E7DE96D3A911EEB9889B5A775412E6.roa
Signing time: Sun 25 Feb 2024 06:47:10 +0000
ROA not before: Sun 25 Feb 2024 06:47:07 +0000
ROA not after: Sun 15 Dec 2024 06:47:07 +0000
asID: 17557
IP address blocks: 154.198.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36324 (0x8de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 25 06:47:07 2024 GMT
Not After : Dec 15 06:47:07 2024 GMT
Subject: CN=65dae26e-14d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b0:3f:b5:9c:0f:4c:72:aa:06:29:49:d3:b0:
ae:d8:ab:36:cb:ab:7e:22:6f:73:28:61:2f:8e:d8:
ca:8d:88:c7:78:69:91:66:58:c7:2e:6a:a2:91:03:
ec:03:1f:c2:d4:39:bb:34:d1:17:36:36:91:27:4e:
90:30:d6:d9:65:9c:47:0c:60:fc:85:51:53:5d:52:
90:44:34:00:7a:76:a0:cd:83:2f:5c:04:dc:1e:84:
af:4c:b8:f1:0e:de:99:10:b8:6a:75:6a:63:01:db:
a9:2c:83:46:35:d9:11:ac:8f:9a:2c:28:d5:81:90:
d1:72:66:d5:05:aa:d2:8b:5a:b1:29:51:b5:c8:87:
b1:16:15:a1:76:43:9d:86:1b:64:4d:1f:67:10:8c:
25:4a:ab:f4:26:96:4b:a6:5c:28:c8:55:f9:8b:7f:
49:1b:a0:50:16:36:ba:48:37:8a:2c:e7:48:a0:ba:
2e:3c:0a:6e:0f:66:b4:9a:59:12:6e:96:1a:ea:ba:
ba:6d:d8:d4:1f:90:68:36:48:ac:ae:0e:93:5b:a3:
6f:95:5c:76:4a:d5:e4:93:4b:c3:d3:53:fc:0a:b8:
f8:dd:c9:c3:d0:b1:9a:10:93:e0:d5:15:63:c2:73:
4e:72:d8:d8:1c:0e:7f:b6:89:dd:76:34:9f:7c:51:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3D:D9:99:37:C2:77:E8:34:15:92:6D:72:90:6D:36:E9:03:DA:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2E7DE96D3A911EEB9889B5A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:27:55:9a:b8:ed:1b:98:7f:ae:6e:98:00:84:aa:1e:a1:41:
2d:f1:99:25:ce:bd:ca:72:9b:4e:60:fd:1e:44:d9:b1:75:8a:
94:86:0b:8f:69:b0:3a:53:16:c3:bc:b2:8c:2d:3f:11:a4:70:
00:38:78:05:94:76:6e:19:49:fa:c3:ff:a1:44:7c:e4:82:12:
7f:e0:80:dc:e3:3f:40:e1:aa:58:57:7f:7f:4f:4e:dc:8a:6b:
22:72:d0:aa:45:21:7c:14:c1:61:6c:ea:81:61:2d:01:1a:64:
05:f9:4b:c0:bf:64:35:ab:44:dd:4f:76:5b:b8:0d:f7:54:d9:
fe:f4:9e:40:b7:50:e0:e2:cf:c2:0a:04:7b:66:d3:0d:cf:11:
2f:d0:c5:dc:75:71:75:47:6a:52:5a:d0:43:24:84:7f:ff:fd:
60:46:71:04:be:69:64:d9:0e:b1:bf:a3:e1:90:09:57:1e:6e:
08:f1:ba:a8:bb:39:80:41:51:ef:82:43:ee:b8:fd:f6:76:93:
e3:55:5f:82:e8:1a:1e:dd:7a:62:6d:1f:e1:46:67:d0:33:68:
7d:36:bf:6f:dd:eb:b9:fc:1e:af:ec:c4:1b:55:96:43:bd:e3:
27:95:ed:30:2d:1f:8b:cb:12:38:83:aa:06:45:84:8e:ed:81:
9e:f6:de:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAI3kMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMjI1MDY0NzA3WhcNMjQxMjE1MDY0NzA3WjAYMRYw
FAYDVQQDEw02NWRhZTI2ZS0xNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7rA/tZwPTHKqBilJ07Cu2Ks2y6t+Im9zKGEvjtjKjYjHeGmRZljHLmqi
kQPsAx/C1Dm7NNEXNjaRJ06QMNbZZZxHDGD8hVFTXVKQRDQAenagzYMvXATcHoSv
TLjxDt6ZELhqdWpjAdupLINGNdkRrI+aLCjVgZDRcmbVBarSi1qxKVG1yIexFhWh
dkOdhhtkTR9nEIwlSqv0JpZLplwoyFX5i39JG6BQFja6SDeKLOdIoLouPApuD2a0
mlkSbpYa6rq6bdjUH5BoNkisrg6TW6NvlVx2StXkk0vD01P8Crj43cnD0LGaEJPg
1RVjwnNOctjYHA5/tonddjSffFFE3wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBE9
2Zk3wnfoNBWSbXKQbTbpA9rnMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMkU3REU5NkQzQTkxMUVFQjk4ODlCNUE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYNMA0GCSqGSIb3DQEB
CwUAA4IBAQDCJ1WauO0bmH+ubpgAhKoeoUEt8Zklzr3KcptOYP0eRNmxdYqUhguP
abA6UxbDvLKMLT8RpHAAOHgFlHZuGUn6w/+hRHzkghJ/4IDc4z9A4apYV39/T07c
imsictCqRSF8FMFhbOqBYS0BGmQF+UvAv2Q1q0TdT3ZbuA33VNn+9J5At1Dg4s/C
CgR7ZtMNzxEv0MXcdXF1R2pSWtBDJIR///1gRnEEvmlk2Q6xv6PhkAlXHm4I8bqo
uzmAQVHvgkPuuP32dpPjVV+C6Boe3XpibR/hRmfQM2h9Nr9v3eu5/B6v7MQbVZZD
veMnle0wLR+LyxI4g6oGRYSO7YGe9t52
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:18 2024 by rpki-client on console-ams.rpki-client.org