Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD189670E78211EEA245B79A775412E6.roa
File: BD189670E78211EEA245B79A775412E6.roa (raw, json)
Hash identifier: DVNVpw/WWj7kBzMKkHH9Xr0tZEt0G0BpgqbMbqafi9c=
Subject key identifier: 2B:9F:D6:CC:6D:41:D6:D1:AA:0E:0D:2E:37:71:3D:E4:86:FC:6D:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A583
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD189670E78211EEA245B79A775412E6.roa
Signing time: Thu 21 Mar 2024 12:58:40 +0000
ROA not before: Thu 21 Mar 2024 12:58:37 +0000
ROA not after: Tue 23 Apr 2024 12:58:37 +0000
asID: 44559
IP address blocks: 154.210.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42371 (0xa583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 12:58:37 2024 GMT
Not After : Apr 23 12:58:37 2024 GMT
Subject: CN=65fc2f00-b959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:a1:90:1e:0d:06:76:f6:43:59:61:06:3b:
81:01:f7:8f:8f:4c:f2:35:dc:dd:62:3b:de:2e:f8:
17:9f:25:20:06:97:4e:f6:34:6c:81:1c:f5:c5:c6:
c4:96:07:4a:27:7c:7e:bb:cd:f0:ae:47:10:fe:db:
46:73:58:02:29:48:69:50:b1:1c:b5:a1:02:86:7c:
f1:98:dc:fc:d0:7e:11:a9:b1:51:24:f3:3c:7d:87:
ef:30:b5:8e:c8:e9:7c:ff:4e:ea:3b:0b:b9:9b:b1:
52:82:56:be:6e:b1:7c:7b:a4:65:e3:86:a6:0b:a5:
c7:24:ac:97:c5:7d:c6:56:b0:02:a7:8a:09:88:40:
36:8e:67:00:0a:0c:ac:0b:ef:1b:72:9c:17:24:23:
ac:80:7c:48:65:e8:fc:6f:9e:10:e6:18:f5:45:6c:
56:6e:22:3e:47:4d:10:91:f7:99:f1:d4:57:3a:9a:
3e:f2:3a:24:10:61:1c:33:8b:d9:30:b2:d8:e3:89:
2f:73:70:bb:6e:8b:d6:72:38:cb:ed:97:49:02:05:
12:bb:d7:2e:03:04:0a:db:62:2f:78:6f:2e:1d:6c:
5d:73:1b:fb:59:60:b3:aa:49:03:6d:fa:59:fd:ed:
b0:1a:4b:81:23:fd:06:c6:7c:5f:bc:13:bd:17:28:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:D6:CC:6D:41:D6:D1:AA:0E:0D:2E:37:71:3D:E4:86:FC:6D:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD189670E78211EEA245B79A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.91.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ad:b4:12:79:30:22:ce:51:cc:98:18:ab:38:18:d1:14:26:
58:84:a6:a7:d0:df:07:fe:cc:ea:c4:a3:ce:9c:42:86:a2:6f:
0d:57:5c:c5:25:47:6c:d0:78:06:24:06:49:a5:2e:40:13:a9:
e9:25:4a:fd:35:b9:f8:38:42:05:61:1e:62:af:2d:8f:fd:25:
ad:8b:c3:33:9d:79:29:97:a1:e4:f1:f0:11:bc:2f:54:a5:6b:
d6:ef:29:41:c2:f4:fb:f8:f8:c3:e8:90:6f:5e:08:17:b2:0d:
a4:7e:3b:fd:b2:e8:ec:99:46:21:2d:1a:98:9c:10:39:93:96:
43:1c:fe:58:56:44:7b:c5:00:71:6e:de:05:68:de:09:78:4f:
4a:39:0a:c7:15:cc:05:6f:8f:35:f8:d7:df:8d:be:dc:e3:48:
a8:ab:7d:dc:e7:14:6f:b9:ca:30:a5:7f:b2:f2:64:9b:1c:f2:
be:44:a5:b9:07:0e:f7:a1:ea:99:5a:22:f7:76:40:af:7d:2f:
7b:5a:f0:9a:4d:29:33:7b:c5:80:14:d5:e2:4c:f0:f3:02:c7:
17:a6:37:f5:d0:e3:e3:ec:53:a2:83:da:cf:88:c3:8e:3b:cb:
ec:58:46:68:1d:f6:ca:64:08:dd:a1:ca:fb:87:85:34:63:75:
ac:87:fd:8a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKWDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMTI1ODM3WhcNMjQwNDIzMTI1ODM3WjAYMRYw
FAYDVQQDEw02NWZjMmYwMC1iOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArAShkB4NBnb2Q1lhBjuBAfePj0zyNdzdYjveLvgXnyUgBpdO9jRsgRz1
xcbElgdKJ3x+u83wrkcQ/ttGc1gCKUhpULEctaEChnzxmNz80H4RqbFRJPM8fYfv
MLWOyOl8/07qOwu5m7FSgla+brF8e6Rl44amC6XHJKyXxX3GVrACp4oJiEA2jmcA
CgysC+8bcpwXJCOsgHxIZej8b54Q5hj1RWxWbiI+R00QkfeZ8dRXOpo+8jokEGEc
M4vZMLLY44kvc3C7bovWcjjL7ZdJAgUSu9cuAwQK22IveG8uHWxdcxv7WWCzqkkD
bfpZ/e2wGkuBI/0GxnxfvBO9Fyi9BwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCuf
1sxtQdbRqg4NLjdxPeSG/G1zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRDE4OTY3MEU3ODIxMUVFQTI0NUI3OUE3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtJbMA0GCSqGSIb3DQEB
CwUAA4IBAQBwrbQSeTAizlHMmBirOBjRFCZYhKan0N8H/szqxKPOnEKGom8NV1zF
JUds0HgGJAZJpS5AE6npJUr9Nbn4OEIFYR5iry2P/SWti8MznXkpl6Hk8fARvC9U
pWvW7ylBwvT7+PjD6JBvXggXsg2kfjv9sujsmUYhLRqYnBA5k5ZDHP5YVkR7xQBx
bt4FaN4JeE9KOQrHFcwFb481+Nffjb7c40ioq33c5xRvucowpX+y8mSbHPK+RKW5
Bw73oeqZWiL3dkCvfS97WvCaTSkze8WAFNXiTPDzAscXpjf10OPj7FOig9rPiMOO
O8vsWEZoHfbKZAjdocr7h4U0Y3Wsh/2K
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:24 2024 by rpki-client on console-fra.rpki-client.org