Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49DFA9C385B11EF985168A9762E951A.roa
File: B49DFA9C385B11EF985168A9762E951A.roa (raw, json)
Hash identifier: jQspZquJhpfdewTAo+X/cgPY7XfAz71tL8/KkCmIxXk=
Subject key identifier: B4:A4:1F:19:6B:D8:01:BD:B3:0E:46:88:8D:29:72:D1:8F:28:36:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: CB50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49DFA9C385B11EF985168A9762E951A.roa
Signing time: Tue 02 Jul 2024 10:13:20 +0000
ROA not before: Tue 02 Jul 2024 10:13:16 +0000
ROA not after: Fri 04 Jul 2025 10:13:16 +0000
asID: 146993
IP address blocks: 154.203.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 08:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52048 (0xcb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:13:16 2024 GMT
Not After : Jul 4 10:13:16 2025 GMT
Subject: CN=6683d2c0-2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:f4:21:01:c0:06:67:47:7f:fc:9e:f3:03:
c9:62:b2:6e:15:8f:71:ce:6a:82:74:0d:78:ce:33:
28:b7:e3:35:61:02:84:a1:28:e5:ef:f8:29:db:ba:
84:76:33:f6:b4:42:ef:a9:3f:cc:70:10:7e:11:4a:
00:11:50:1f:e8:7c:41:d6:f4:ba:af:61:a0:cd:9f:
57:95:74:68:c0:4b:5f:3f:aa:c3:cc:d1:e1:f7:a0:
a9:31:40:5b:da:7d:93:25:21:f7:b7:8e:5b:51:df:
78:0b:de:2e:32:9d:b2:1d:ce:d8:c7:89:1f:15:9f:
6a:27:8a:a5:46:ce:e3:86:65:4a:23:6b:af:8d:8c:
a1:cd:ab:64:15:a8:5d:81:28:bd:64:46:84:68:f5:
a3:e1:e6:48:3e:42:84:d9:3f:2b:dc:d1:60:a1:a2:
54:fe:83:87:1d:88:7a:27:b8:14:7b:e1:31:14:ad:
d6:30:3a:39:a1:43:29:9d:87:3d:de:60:67:18:d8:
05:45:e3:0a:f8:3e:c6:89:51:75:37:11:f6:f7:18:
77:94:56:bd:82:47:97:19:26:9a:96:f8:1d:ca:af:
29:a1:f6:35:e6:f4:32:b7:39:10:55:2a:85:2b:fd:
cb:23:73:cb:e2:26:ba:47:db:46:30:0a:64:de:c1:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A4:1F:19:6B:D8:01:BD:B3:0E:46:88:8D:29:72:D1:8F:28:36:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B49DFA9C385B11EF985168A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:66:0e:99:dc:ca:d6:17:18:c3:4f:e5:f9:1a:23:2a:e8:26:
80:1a:41:2d:a5:14:d5:b9:a4:ef:a7:c6:4f:59:8d:ca:4a:3f:
ae:21:32:af:81:45:0d:cb:1b:7d:09:b9:7d:2a:e9:7b:38:73:
38:a3:00:9f:99:0e:75:e3:2f:1b:46:59:15:a1:68:12:ed:26:
cf:fa:36:3e:05:ce:23:d2:bf:d5:6a:df:c6:44:eb:3e:d7:d9:
22:22:74:94:b3:a0:e0:68:3a:c4:37:53:77:56:e1:71:cf:6f:
dd:9c:4e:f7:0f:25:06:b4:20:3a:29:44:b2:76:46:e1:db:c0:
82:81:ce:d7:db:6d:9b:c5:d8:2d:84:16:e0:f8:e3:3a:92:a8:
a3:e8:0f:a4:bd:44:d3:92:a6:a2:c9:b2:e3:7b:27:d6:07:54:
92:cd:ec:92:b0:c6:f8:08:d1:29:c2:13:a4:92:6e:a6:2d:ad:
ea:0c:49:da:84:06:16:a2:d9:c1:ed:f4:5c:2c:6a:07:9e:16:
74:81:55:98:81:d9:d3:20:92:09:58:84:eb:71:3b:8b:07:11:
53:a4:ca:13:19:46:37:f4:f0:e3:22:44:44:33:a5:c0:43:ff:
17:dd:75:3b:fc:c6:d7:fe:8f:6c:8d:e0:b4:b9:07:07:61:00:
42:7f:7a:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAMtQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNzAyMTAxMzE2WhcNMjUwNzA0MTAxMzE2WjAYMRYw
FAYDVQQDEw02NjgzZDJjMC0yYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSP0IQHABmdHf/ye8wPJYrJuFY9xzmqCdA14zjMot+M1YQKEoSjl7/gp
27qEdjP2tELvqT/McBB+EUoAEVAf6HxB1vS6r2GgzZ9XlXRowEtfP6rDzNHh96Cp
MUBb2n2TJSH3t45bUd94C94uMp2yHc7Yx4kfFZ9qJ4qlRs7jhmVKI2uvjYyhzatk
FahdgSi9ZEaEaPWj4eZIPkKE2T8r3NFgoaJU/oOHHYh6J7gUe+ExFK3WMDo5oUMp
nYc93mBnGNgFReMK+D7GiVF1NxH29xh3lFa9gkeXGSaalvgdyq8pofY15vQytzkQ
VSqFK/3LI3PL4ia6R9tGMApk3sG79QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLSk
Hxlr2AG9sw5GiI0pctGPKDZsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNDlERkE5QzM4NUIxMUVGOTg1MTY4QTk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmssQMA0GCSqGSIb3DQEB
CwUAA4IBAQA/Zg6Z3MrWFxjDT+X5GiMq6CaAGkEtpRTVuaTvp8ZPWY3KSj+uITKv
gUUNyxt9Cbl9Kul7OHM4owCfmQ514y8bRlkVoWgS7SbP+jY+Bc4j0r/Vat/GROs+
19kiInSUs6DgaDrEN1N3VuFxz2/dnE73DyUGtCA6KUSydkbh28CCgc7X222bxdgt
hBbg+OM6kqij6A+kvUTTkqaiybLjeyfWB1SSzeySsMb4CNEpwhOkkm6mLa3qDEna
hAYWotnB7fRcLGoHnhZ0gVWYgdnTIJIJWITrcTuLBxFTpMoTGUY39PDjIkREM6XA
Q/8X3XU7/MbX/o9sjeC0uQcHYQBCf3r3
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:38:24 2024 by rpki-client on console-fra.rpki-client.org