Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C2103282B611EEB1232C254AD9E6FC.roa
File: C7C2103282B611EEB1232C254AD9E6FC.roa (raw, json)
Hash identifier: CAI7vVy8d9B82ZyMwtEqDXIX1MGQ7r1V5tMxdDDq2D8=
Subject key identifier: B4:18:02:5E:3A:CC:32:C6:1E:02:8D:39:9E:77:33:ED:6B:F6:DD:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C2103282B611EEB1232C254AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:26:44 +0000
ROA not before: Tue 14 Nov 2023 06:26:41 +0000
ROA not after: Tue 12 Nov 2024 06:26:41 +0000
asID: 397630
IP address blocks: 154.201.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20406 (0x4fb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:26:41 2023 GMT
Not After : Nov 12 06:26:41 2024 GMT
Subject: CN=65531324-7711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:84:7d:88:80:12:2e:af:58:32:ce:78:fa:
4a:14:59:6a:66:4c:ec:58:5e:e1:45:77:14:81:a9:
2b:3e:af:b8:d9:56:99:07:c2:46:fa:19:5b:45:89:
41:2e:74:9c:8c:89:b9:72:39:3c:84:0e:97:42:e8:
fe:43:ed:ac:cf:46:52:82:86:db:a2:5f:6b:8f:41:
b9:8a:de:db:fb:9b:f6:61:e3:c7:6d:86:59:15:62:
65:d5:ca:3e:a5:2b:e8:61:24:4f:5b:3b:10:7e:69:
f6:51:2b:5c:ee:e3:7f:df:89:7c:d2:74:b2:46:ea:
67:77:6b:88:b2:cc:f3:59:61:02:e6:a0:bc:7b:bc:
1d:47:b8:4e:20:fe:02:9e:75:fd:4d:e3:3d:17:6a:
58:11:17:86:31:e6:2a:cb:71:0c:ad:5b:20:bb:b7:
ea:19:a3:aa:b5:32:3a:38:26:53:1e:92:d6:cb:61:
4a:74:2d:e3:95:42:1f:88:54:10:23:34:5e:49:f2:
59:48:12:5d:59:8a:65:a4:6b:2b:8d:ec:02:67:ad:
ae:7e:35:e2:a1:b0:f6:71:b3:75:63:42:b3:db:84:
60:80:bd:66:11:bc:2e:9b:00:20:89:7e:7d:85:30:
ee:f8:4d:9c:4b:55:8a:1f:45:de:4f:34:86:07:97:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:02:5E:3A:CC:32:C6:1E:02:8D:39:9E:77:33:ED:6B:F6:DD:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7C2103282B611EEB1232C254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:36:62:db:b3:da:42:40:aa:b3:43:9d:e7:30:ea:20:e5:79:
50:e9:24:14:b1:cc:3b:1c:59:8f:a9:93:3a:c1:77:3f:a5:64:
c9:d8:77:ff:71:53:e4:64:66:cd:32:66:51:f7:67:e4:fa:1d:
66:ef:55:8b:27:a7:94:92:30:94:fc:b4:2f:36:86:c7:7c:9d:
fb:4e:e8:55:db:14:b4:1c:91:1e:36:b5:c7:55:aa:99:7c:ad:
55:f4:96:cd:60:ae:a0:7d:24:cd:d3:93:31:b0:b9:29:87:71:
be:ed:19:8f:e8:ca:be:71:33:9e:03:a3:53:dc:87:0f:14:f4:
3d:16:d9:c6:69:ad:0c:5c:48:6b:db:9b:01:7c:71:5c:18:5b:
fc:04:54:63:98:d2:ca:e1:f2:b3:85:c0:e1:7b:79:7a:4b:e8:
df:bc:d7:54:e6:46:dc:68:fc:75:52:f3:f6:67:6f:0f:be:4b:
ce:77:1f:6b:1f:dc:2b:ad:7d:c5:ee:a0:31:82:be:f2:e9:a2:
45:20:9b:88:d5:8f:e4:0a:bc:b4:20:bd:3d:12:44:e9:0e:e1:
6e:d3:7d:c5:fc:8f:5a:e4:0a:e4:3d:45:c5:cd:af:62:29:3f:
b0:85:35:a1:5d:95:ec:9c:b1:4e:27:ea:2b:2f:9b:e1:28:d8:
f4:77:01:dd
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICT7YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNjI2NDFaFw0yNDExMTIwNjI2NDFaMBgxFjAU
BgNVBAMTDTY1NTMxMzI0LTc3MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeMYR9iIASLq9YMs54+koUWWpmTOxYXuFFdxSBqSs+r7jZVpkHwkb6GVtF
iUEudJyMiblyOTyEDpdC6P5D7azPRlKChtuiX2uPQbmK3tv7m/Zh48dthlkVYmXV
yj6lK+hhJE9bOxB+afZRK1zu43/fiXzSdLJG6md3a4iyzPNZYQLmoLx7vB1HuE4g
/gKedf1N4z0XalgRF4Yx5irLcQytWyC7t+oZo6q1Mjo4JlMektbLYUp0LeOVQh+I
VBAjNF5J8llIEl1ZimWkayuN7AJnra5+NeKhsPZxs3VjQrPbhGCAvWYRvC6bACCJ
fn2FMO74TZxLVYofRd5PNIYHlwOZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtBgC
XjrMMsYeAo05nncz7Wv23YwwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0M3QzIxMDMyODJCNjExRUVCMTIzMkMyNTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayTswDQYJKoZIhvcNAQEL
BQADggEBAME2Ytuz2kJAqrNDnecw6iDleVDpJBSxzDscWY+pkzrBdz+lZMnYd/9x
U+RkZs0yZlH3Z+T6HWbvVYsnp5SSMJT8tC82hsd8nftO6FXbFLQckR42tcdVqpl8
rVX0ls1grqB9JM3TkzGwuSmHcb7tGY/oyr5xM54Do1Pchw8U9D0W2cZprQxcSGvb
mwF8cVwYW/wEVGOY0srh8rOFwOF7eXpL6N+811TmRtxo/HVS8/Znbw++S853H2sf
3CutfcXuoDGCvvLpokUgm4jVj+QKvLQgvT0SROkO4W7TfcX8j1rkCuQ9RcXNr2Ip
P7CFNaFdleycsU4n6isvm+Eo2PR3Ad0=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org