Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD6EF2E210DA11EE862FE6234AD9E6FC.roa
File: BD6EF2E210DA11EE862FE6234AD9E6FC.roa (raw, json)
Hash identifier: 2V/KqB+gG0H0s3rmYeKZ8cTzS23hbKg0XiXokxmGSwU=
Subject key identifier: 5D:B5:90:45:F9:30:E5:8A:A5:48:98:D7:72:C2:19:7A:77:92:05:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD6EF2E210DA11EE862FE6234AD9E6FC.roa
Signing time: Thu 22 Jun 2023 08:56:56 +0000
ROA not before: Thu 22 Jun 2023 08:56:53 +0000
ROA not after: Fri 05 Jul 2024 08:56:53 +0000
asID: 210334
IP address blocks: 154.89.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11592 (0x2d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 08:56:53 2023 GMT
Not After : Jul 5 08:56:53 2024 GMT
Subject: CN=64940cd8-746f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:67:74:27:17:1a:0f:5a:a9:70:54:f1:8a:
c1:a5:1b:04:b6:35:36:fe:39:50:f1:c1:cc:34:f3:
fc:80:8d:df:7d:1c:57:9d:d2:9b:1d:26:56:57:73:
10:7e:b3:2c:bc:d6:0e:6c:da:b7:cd:0b:ad:33:a8:
92:a8:9e:12:db:28:bc:85:fd:b6:e3:98:01:16:55:
2e:5e:e7:b2:ee:91:8f:94:59:1a:b7:4b:68:a5:c5:
38:7d:3d:c4:7b:02:24:c0:00:ac:14:35:63:d0:e4:
82:3f:a7:55:08:58:60:ef:60:0c:95:d2:4d:20:28:
49:2f:ec:a7:1c:19:ab:9d:10:6f:48:ab:7e:5e:19:
27:66:e3:7a:ef:57:b3:2e:ef:42:91:25:9e:3d:34:
ce:6a:e8:1c:1a:56:6f:7a:00:8d:db:3b:51:70:42:
aa:bb:1d:86:d5:a8:72:32:87:30:65:72:8c:04:1b:
fe:41:4e:a5:45:9c:6a:fd:5e:9d:a7:8c:22:ef:4c:
39:cd:cc:c8:0a:5d:77:25:68:ba:45:05:d8:c1:ee:
3c:d1:d4:14:30:e5:57:76:ce:89:6f:11:18:8d:d8:
c9:82:b6:b8:69:1e:bf:6e:71:10:69:23:94:05:61:
7f:f7:68:75:68:2b:66:3a:d1:2c:37:de:7b:d7:dc:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:90:45:F9:30:E5:8A:A5:48:98:D7:72:C2:19:7A:77:92:05:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD6EF2E210DA11EE862FE6234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8d:86:ef:04:e0:92:b6:82:f7:39:31:d4:f7:62:03:7d:77:
79:9a:ba:d2:36:62:6a:4c:08:9a:bb:e9:33:26:a4:fb:ce:91:
13:56:23:80:60:89:56:c6:0a:10:52:8d:4a:fa:64:01:ac:72:
17:8b:21:d9:fe:a7:14:18:28:c1:e6:1f:49:76:d2:b0:9c:c7:
84:50:83:7f:44:39:7f:fb:08:3f:b9:15:5d:50:4a:c3:2d:a8:
b1:7e:c8:9b:e8:c3:47:03:7f:d7:3a:4c:92:c3:b0:94:10:ef:
7e:88:ae:5b:77:db:31:06:ec:24:04:36:75:cc:cd:30:f1:b7:
df:15:ae:17:4e:73:da:33:df:19:a3:5b:f1:ff:42:8d:f8:35:
c6:5e:93:d2:dd:65:76:a4:f5:bd:96:5c:06:72:3a:46:da:b9:
a9:96:84:74:8d:5a:28:b8:cb:b3:59:e7:25:f3:7b:2c:7f:94:
18:35:37:5c:88:aa:61:5a:0c:5c:e0:60:28:28:16:f3:fa:05:
91:d9:b8:7c:f3:fa:cb:af:2a:9f:df:71:d6:d0:ef:8a:ad:ab:
9e:cb:20:b0:ec:41:e1:29:bd:53:62:b4:0c:25:f8:80:b4:85:
2a:6d:f3:81:95:16:a6:3b:73:c6:52:8b:5c:8d:8a:25:18:f0:
c3:7e:60:44
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLUgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjIwODU2NTNaFw0yNDA3MDUwODU2NTNaMBgxFjAU
BgNVBAMTDTY0OTQwY2Q4LTc0NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxAGd0JxcaD1qpcFTxisGlGwS2NTb+OVDxwcw08/yAjd99HFed0psdJlZX
cxB+syy81g5s2rfNC60zqJKonhLbKLyF/bbjmAEWVS5e57LukY+UWRq3S2ilxTh9
PcR7AiTAAKwUNWPQ5II/p1UIWGDvYAyV0k0gKEkv7KccGaudEG9Iq35eGSdm43rv
V7Mu70KRJZ49NM5q6BwaVm96AI3bO1FwQqq7HYbVqHIyhzBlcowEG/5BTqVFnGr9
Xp2njCLvTDnNzMgKXXclaLpFBdjB7jzR1BQw5Vd2zolvERiN2MmCtrhpHr9ucRBp
I5QFYX/3aHVoK2Y60Sw33nvX3EhfAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUXbWQ
Rfkw5YqlSJjXcsIZeneSBfEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0JENkVGMkUyMTBEQTExRUU4NjJGRTYyMzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaWSgwDQYJKoZIhvcNAQEL
BQADggEBAKSNhu8E4JK2gvc5MdT3YgN9d3mautI2YmpMCJq76TMmpPvOkRNWI4Bg
iVbGChBSjUr6ZAGscheLIdn+pxQYKMHmH0l20rCcx4RQg39EOX/7CD+5FV1QSsMt
qLF+yJvow0cDf9c6TJLDsJQQ736Irlt32zEG7CQENnXMzTDxt98VrhdOc9oz3xmj
W/H/Qo34NcZek9LdZXak9b2WXAZyOkbauamWhHSNWii4y7NZ5yXzeyx/lBg1N1yI
qmFaDFzgYCgoFvP6BZHZuHzz+suvKp/fcdbQ74qtq57LILDsQeEpvVNitAwl+IC0
hSpt84GVFqY7c8ZSi1yNiiUY8MN+YEQ=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org