Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB159378171611EFA3DC2E0C017001B1.roa
File: BB159378171611EFA3DC2E0C017001B1.roa (raw, json)
Hash identifier: odgrQ951WCYOkiXb+dY5fQONLnt00XS/8Z/iuaz1SeM=
Subject key identifier: 2E:4D:8E:28:F7:F2:2D:AC:1C:73:C2:EC:5A:52:9F:19:70:37:C1:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B943
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB159378171611EFA3DC2E0C017001B1.roa
Signing time: Tue 21 May 2024 02:06:27 +0000
ROA not before: Tue 21 May 2024 02:06:23 +0000
ROA not after: Sun 23 Jun 2024 02:06:23 +0000
asID: 152450
IP address blocks: 154.86.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 05 Jun 2024 00:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47427 (0xb943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 02:06:23 2024 GMT
Not After : Jun 23 02:06:23 2024 GMT
Subject: CN=664c01a3-74a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:4f:02:44:1f:7a:9b:3e:b9:45:2a:97:1c:
04:75:2e:af:c7:a6:98:3e:7f:2e:1f:84:f4:84:ce:
3b:05:d4:90:15:7b:b5:86:6d:3d:5c:40:1f:cb:d0:
37:16:cf:ed:db:63:89:65:8e:e8:a2:86:97:69:0d:
61:40:61:ad:cb:15:61:65:d9:ea:3f:74:4e:fa:46:
39:f4:16:13:48:5a:13:df:79:78:c5:64:2e:58:57:
6e:f2:cd:52:29:49:76:65:be:d3:f6:4b:3c:e5:c4:
0a:8c:70:75:6d:96:04:52:53:0c:51:fb:45:41:25:
aa:77:9e:6b:32:7e:1e:7a:98:79:dc:54:64:cb:7a:
40:6c:1a:d3:6a:30:73:13:fb:5e:20:49:a2:bb:18:
0f:2f:42:a7:3a:58:b4:35:6f:d5:59:cf:cf:7d:e3:
4f:1c:f1:3f:6a:57:89:29:bc:43:3d:81:82:88:66:
93:ba:25:41:e2:c2:df:f2:ca:cb:af:57:f0:1c:68:
32:2f:1e:67:97:87:5d:df:8e:74:1d:e5:5e:8c:73:
a7:db:26:8c:25:87:24:2c:77:ea:50:05:d9:4a:ab:
ee:dd:aa:6c:e5:59:98:13:6b:dc:84:96:4a:38:83:
a7:29:a4:16:ad:2c:69:0e:93:bb:d1:b5:3a:81:05:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4D:8E:28:F7:F2:2D:AC:1C:73:C2:EC:5A:52:9F:19:70:37:C1:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB159378171611EFA3DC2E0C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.116.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1d:cd:cd:0d:c6:a8:e1:ab:a1:b0:98:ce:8f:fb:ee:58:41:
73:96:5e:d7:3a:a9:23:0f:d9:f8:67:67:78:a6:5a:46:f4:ac:
d9:1c:48:d4:ea:61:4c:c7:27:c5:3e:30:1b:d0:4d:34:ff:bf:
29:9a:9e:0f:ef:9f:cd:9c:31:8d:43:ea:46:95:2e:3c:15:c3:
2c:5f:c6:7f:1e:fa:93:04:69:68:3a:ad:78:54:5c:b6:60:50:
41:73:dc:a7:e1:cd:c7:25:36:b1:c3:46:e4:cc:5a:5d:d9:d7:
12:ba:30:78:d9:2f:fa:18:ea:94:97:24:35:44:4c:9f:9c:63:
af:d9:c2:40:ab:aa:a1:83:9a:9c:40:05:36:b3:ff:5d:6a:a6:
6f:22:ab:9d:8f:9a:5b:a4:41:b6:6e:50:ae:37:6a:86:18:ab:
62:30:95:0c:ea:6f:f5:98:55:8d:7c:32:f8:0c:ef:69:da:7c:
f8:82:ce:fe:3e:ae:94:89:fa:08:6c:15:a8:b7:7c:b1:a4:d2:
73:79:39:ba:68:94:4e:49:9e:b9:6d:36:73:13:d1:ba:90:b9:
91:34:cd:93:a7:43:20:3e:36:2b:c2:62:35:2e:d9:b1:6f:47:
63:6a:7a:b1:9c:76:fd:cd:61:23:38:62:ae:40:8a:8c:5a:b7:
ed:4f:76:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALlDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTIxMDIwNjIzWhcNMjQwNjIzMDIwNjIzWjAYMRYw
FAYDVQQDEw02NjRjMDFhMy03NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2UdPAkQfeps+uUUqlxwEdS6vx6aYPn8uH4T0hM47BdSQFXu1hm09XEAf
y9A3Fs/t22OJZY7oooaXaQ1hQGGtyxVhZdnqP3RO+kY59BYTSFoT33l4xWQuWFdu
8s1SKUl2Zb7T9ks85cQKjHB1bZYEUlMMUftFQSWqd55rMn4eeph53FRky3pAbBrT
ajBzE/teIEmiuxgPL0KnOli0NW/VWc/PfeNPHPE/aleJKbxDPYGCiGaTuiVB4sLf
8srLr1fwHGgyLx5nl4dd3450HeVejHOn2yaMJYckLHfqUAXZSqvu3aps5VmYE2vc
hJZKOIOnKaQWrSxpDpO70bU6gQVuYQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFC5N
jij38i2sHHPC7FpSnxlwN8EAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjE1OTM3ODE3MTYxMUVGQTNEQzJFMEMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZ0MA0GCSqGSIb3DQEB
CwUAA4IBAQAlHc3NDcao4auhsJjOj/vuWEFzll7XOqkjD9n4Z2d4plpG9KzZHEjU
6mFMxyfFPjAb0E00/78pmp4P75/NnDGNQ+pGlS48FcMsX8Z/HvqTBGloOq14VFy2
YFBBc9yn4c3HJTaxw0bkzFpd2dcSujB42S/6GOqUlyQ1REyfnGOv2cJAq6qhg5qc
QAU2s/9daqZvIqudj5pbpEG2blCuN2qGGKtiMJUM6m/1mFWNfDL4DO9p2nz4gs7+
Pq6UifoIbBWot3yxpNJzeTm6aJROSZ65bTZzE9G6kLmRNM2Tp0MgPjYrwmI1Ltmx
b0djanqxnHb9zWEjOGKuQIqMWrftT3bW
-----END CERTIFICATE-----
Generated at Mon Jun 3 13:09:58 2024 by rpki-client on console-ams.rpki-client.org