Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09007DEFAE711EEA7FCC35B017001B1.roa
File: C09007DEFAE711EEA7FCC35B017001B1.roa (raw, json)
Hash identifier: +LRFL9Fxo1Ar6q/SiIcgfGVDBoYynVm2acJmj+NDFes=
Subject key identifier: 74:02:C3:F4:DF:4B:AE:29:08:7A:54:BB:99:CC:E0:62:28:12:FB:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AC86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09007DEFAE711EEA7FCC35B017001B1.roa
Signing time: Mon 15 Apr 2024 05:19:37 +0000
ROA not before: Mon 15 Apr 2024 05:19:33 +0000
ROA not after: Sun 19 May 2024 05:19:33 +0000
asID: 9123
IP address blocks: 154.194.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44166 (0xac86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 05:19:33 2024 GMT
Not After : May 19 05:19:33 2024 GMT
Subject: CN=661cb8e9-1e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:5d:dc:39:02:ed:55:c6:71:41:8b:38:cc:
8c:54:01:cb:c3:a8:01:da:1d:05:fa:85:f7:1d:56:
25:24:e4:33:ea:51:38:e0:29:8f:96:32:5d:9b:e1:
a1:30:a6:16:07:f5:ac:b2:57:1a:7e:1c:dc:25:36:
85:e7:f5:3e:0a:22:21:76:00:2d:5f:8b:42:4c:a1:
82:6d:99:8e:49:67:66:a4:58:a6:7b:19:13:80:ca:
f9:e6:b6:12:ae:74:bd:4d:00:9b:ea:fb:dc:cf:aa:
87:b4:78:8e:fc:0f:88:94:4d:38:fe:9f:1a:02:71:
4f:a9:b2:26:5e:44:c2:c6:29:2d:8d:cd:f5:b3:27:
13:8a:8a:9e:cf:ec:f4:7c:8a:71:96:05:7a:f9:c6:
4d:52:74:21:eb:16:fb:7a:8b:8d:03:9c:3d:7f:33:
a3:f4:77:e0:2f:7e:86:d3:6b:1d:4a:2f:6e:ef:3c:
8c:df:73:63:27:ba:64:58:b0:f3:0c:b9:3f:a7:ec:
6f:c1:05:69:f5:2b:13:c5:08:3b:80:3a:11:cb:8f:
da:42:25:62:74:12:76:53:88:e5:be:5b:62:70:18:
e9:5c:ea:71:50:36:b5:b4:be:a1:6b:9e:a5:58:2c:
01:4d:f3:e2:fe:80:c2:df:e0:a1:f7:43:6c:4d:a0:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:C3:F4:DF:4B:AE:29:08:7A:54:BB:99:CC:E0:62:28:12:FB:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C09007DEFAE711EEA7FCC35B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1d:ac:82:16:cb:82:02:fc:3f:e9:ec:a4:97:35:57:a2:65:
4f:79:00:84:42:93:12:0a:8c:27:7c:e7:c1:69:1b:3a:10:e4:
6a:f6:53:e1:da:d9:d3:92:6c:cc:dc:95:d4:fc:b9:bf:d2:37:
1b:b5:5f:f1:15:69:e2:ea:1d:f7:d8:f2:63:0c:33:2f:7e:31:
6a:52:da:66:1a:ac:3f:d7:f9:ac:6f:a9:f5:59:37:49:e0:65:
8b:95:46:8e:7d:db:4f:7e:3e:dd:91:e1:8c:13:44:0c:7c:25:
3b:93:0a:26:61:e5:da:02:f5:92:98:89:6e:2d:3b:c9:81:20:
11:40:4f:0b:a1:0b:ec:15:c8:64:2b:e7:20:a2:80:3b:53:5f:
e7:5b:9d:94:d4:1e:b2:fd:7e:67:c1:02:f0:33:b0:da:9c:7a:
25:dc:b2:8b:61:56:e5:40:a1:cd:40:a8:3c:65:7c:e5:c8:77:
15:b7:76:12:a8:fa:1e:e4:46:bd:eb:13:62:39:7f:4e:39:f0:
fa:ac:c5:29:4d:55:d4:57:25:9c:19:f0:60:2d:66:eb:98:39:
91:e3:dd:d3:96:b3:a0:67:a7:fb:1b:93:8c:d2:ca:b9:ba:ca:
6c:5f:37:3f:82:e6:d3:15:d3:d0:cf:ea:90:b6:20:61:81:37:
64:b1:eb:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKyGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDUxOTMzWhcNMjQwNTE5MDUxOTMzWjAYMRYw
FAYDVQQDEw02NjFjYjhlOS0xZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0dd3DkC7VXGcUGLOMyMVAHLw6gB2h0F+oX3HVYlJOQz6lE44CmPljJd
m+GhMKYWB/WsslcafhzcJTaF5/U+CiIhdgAtX4tCTKGCbZmOSWdmpFimexkTgMr5
5rYSrnS9TQCb6vvcz6qHtHiO/A+IlE04/p8aAnFPqbImXkTCxiktjc31sycTioqe
z+z0fIpxlgV6+cZNUnQh6xb7eouNA5w9fzOj9HfgL36G02sdSi9u7zyM33NjJ7pk
WLDzDLk/p+xvwQVp9SsTxQg7gDoRy4/aQiVidBJ2U4jlvlticBjpXOpxUDa1tL6h
a56lWCwBTfPi/oDC3+Ch90NsTaDJ4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHQC
w/TfS64pCHpUu5nM4GIoEvunMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DMDkwMDdERUZBRTcxMUVFQTdGQ0MzNUIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI1MA0GCSqGSIb3DQEB
CwUAA4IBAQBEHayCFsuCAvw/6eyklzVXomVPeQCEQpMSCownfOfBaRs6EORq9lPh
2tnTkmzM3JXU/Lm/0jcbtV/xFWni6h332PJjDDMvfjFqUtpmGqw/1/msb6n1WTdJ
4GWLlUaOfdtPfj7dkeGME0QMfCU7kwomYeXaAvWSmIluLTvJgSARQE8LoQvsFchk
K+cgooA7U1/nW52U1B6y/X5nwQLwM7DanHol3LKLYVblQKHNQKg8ZXzlyHcVt3YS
qPoe5Ea96xNiOX9OOfD6rMUpTVXUVyWcGfBgLWbrmDmR493TlrOgZ6f7G5OM0sq5
uspsXzc/gubTFdPQz+qQtiBhgTdksevt
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:01 2024 by rpki-client on console-fra.rpki-client.org