Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81EF844FAF511EEA7C7984D017001B1.roa
File: C81EF844FAF511EEA7C7984D017001B1.roa (raw, json)
Hash identifier: 0lvWDL73yplMJZJYyCfTqqkBEFTvQMdyY0AKMtavuW4=
Subject key identifier: 9E:D7:BF:2A:3B:CC:23:CE:D1:3B:BB:DB:32:BD:25:DE:5D:19:C9:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81EF844FAF511EEA7C7984D017001B1.roa
Signing time: Mon 15 Apr 2024 07:00:03 +0000
ROA not before: Mon 15 Apr 2024 06:59:59 +0000
ROA not after: Thu 30 May 2024 06:59:59 +0000
asID: 63139
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44266 (0xacea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:59:59 2024 GMT
Not After : May 30 06:59:59 2024 GMT
Subject: CN=661cd073-cc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:77:51:03:a7:3d:30:e8:48:4a:2c:80:1f:
89:8a:1f:51:b7:26:a3:2e:f7:2b:e5:ae:8b:7f:40:
b2:25:6e:dc:bb:7e:cd:12:e8:30:5d:98:28:fb:15:
7a:95:90:14:6d:7a:e4:85:fe:0a:68:2a:1d:d9:cc:
1e:3c:7a:5f:cf:fa:5c:1b:1e:bc:f0:63:81:4a:e6:
2d:16:57:cf:2b:a4:d7:f6:ef:05:e8:45:7f:16:54:
3b:f5:45:48:16:e2:e0:85:62:03:7d:00:bd:33:c9:
d2:6a:9b:3f:b0:d8:7e:d3:ec:11:dd:4a:cb:06:bd:
81:78:1c:65:95:e7:be:bb:9c:ce:9a:98:66:e9:66:
4b:3a:fc:1b:0c:83:bb:02:f3:14:cc:0b:a2:b0:62:
c2:8c:15:8a:a9:e4:83:87:44:4b:1c:73:f3:5b:23:
f5:40:ed:de:fe:64:51:52:25:e9:eb:9a:6d:8d:32:
c7:bd:46:9a:01:18:a4:86:fe:41:5b:57:90:d8:03:
0f:06:2d:7c:e1:98:13:bd:27:7c:31:4e:21:61:0f:
71:85:37:a3:49:52:de:b5:08:e6:b9:5f:24:f7:95:
78:93:c5:a3:10:7e:0a:ff:87:a6:61:e1:55:55:bb:
df:3a:2f:8d:a3:87:74:db:10:92:35:22:24:c9:2f:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:BF:2A:3B:CC:23:CE:D1:3B:BB:DB:32:BD:25:DE:5D:19:C9:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81EF844FAF511EEA7C7984D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:08:63:24:b5:6f:30:cd:ce:32:ec:55:44:78:cb:29:2d:ba:
42:fc:cf:aa:55:ca:a6:e9:af:16:e7:10:44:e3:54:54:8e:05:
3c:37:29:58:e2:56:b2:a0:41:88:04:6f:f5:06:ea:6c:06:a7:
5c:d1:62:3e:ab:47:0a:0d:d9:93:55:48:d1:ea:da:88:f5:bd:
40:87:47:46:98:74:1b:9d:73:c9:78:9e:2c:54:81:fd:5e:33:
d9:e9:df:06:50:90:f0:96:b1:cf:e5:04:d2:3a:65:69:41:17:
d6:3a:ed:8a:a6:e2:b2:83:b2:25:5b:9c:4d:15:5d:f4:ed:25:
0d:73:b6:c2:6b:e1:5c:78:51:99:ee:36:24:8b:df:c8:c9:5e:
45:a9:f7:e0:34:08:3c:43:57:52:18:42:4e:c4:7f:d9:60:3c:
cf:63:c8:28:90:ee:4e:6d:a7:fd:72:fa:63:59:ea:eb:85:52:
e6:63:39:88:ed:06:41:cf:b6:04:03:65:20:86:a2:5f:cf:51:
9d:3f:9e:04:9c:6c:62:67:a1:dc:1a:a5:ce:53:b2:3c:1c:47:
a6:0b:0a:62:24:d0:a2:f2:78:1e:3c:74:c1:4d:69:5b:30:8f:
83:9c:a6:87:f3:78:b5:20:a5:0b:42:55:54:b4:95:b8:23:99:
56:27:5b:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKzqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDE1MDY1OTU5WhcNMjQwNTMwMDY1OTU5WjAYMRYw
FAYDVQQDEw02NjFjZDA3My1jYzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAx3UQOnPTDoSEosgB+Jih9RtyajLvcr5a6Lf0CyJW7cu37NEugwXZgo
+xV6lZAUbXrkhf4KaCod2cwePHpfz/pcGx688GOBSuYtFlfPK6TX9u8F6EV/FlQ7
9UVIFuLghWIDfQC9M8nSaps/sNh+0+wR3UrLBr2BeBxllee+u5zOmphm6WZLOvwb
DIO7AvMUzAuisGLCjBWKqeSDh0RLHHPzWyP1QO3e/mRRUiXp65ptjTLHvUaaARik
hv5BW1eQ2AMPBi184ZgTvSd8MU4hYQ9xhTejSVLetQjmuV8k95V4k8WjEH4K/4em
YeFVVbvfOi+No4d02xCSNSIkyS+zOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ7X
vyo7zCPO0Tu72zK9Jd5dGclDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DODFFRjg0NEZBRjUxMUVFQTdDNzk4NEQwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml5EMA0GCSqGSIb3DQEB
CwUAA4IBAQDCCGMktW8wzc4y7FVEeMspLbpC/M+qVcqm6a8W5xBE41RUjgU8NylY
4layoEGIBG/1BupsBqdc0WI+q0cKDdmTVUjR6tqI9b1Ah0dGmHQbnXPJeJ4sVIH9
XjPZ6d8GUJDwlrHP5QTSOmVpQRfWOu2KpuKyg7IlW5xNFV307SUNc7bCa+FceFGZ
7jYki9/IyV5FqffgNAg8Q1dSGEJOxH/ZYDzPY8gokO5Obaf9cvpjWerrhVLmYzmI
7QZBz7YEA2UghqJfz1GdP54EnGxiZ6HcGqXOU7I8HEemCwpiJNCi8ngePHTBTWlb
MI+DnKaH83i1IKULQlVUtJW4I5lWJ1tp
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org