Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB3757FE405E11ED980CCEF8F1222468.roa
File: CB3757FE405E11ED980CCEF8F1222468.roa (raw, json)
Hash identifier: ogR99kKhwecl8ueo/UZTMc2Z7pDh3RwNMKAm2n9mA0k=
Subject key identifier: D3:88:67:8A:CC:57:D1:1C:5C:3F:05:3D:76:E1:62:37:72:D5:B8:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 1936
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB3757FE405E11ED980CCEF8F1222468.roa
Signing time: Fri 30 Sep 2022 01:25:40 +0000
ROA not before: Fri 30 Sep 2022 01:25:37 +0000
ROA not after: Thu 05 Oct 2023 01:25:37 +0000
asID: 1239
IP address blocks: 154.205.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Mar 2023 00:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6454 (0x1936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 30 01:25:37 2022 GMT
Not After : Oct 5 01:25:37 2023 GMT
Subject: CN=63364594-1232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:6f:91:a6:1c:a6:9c:79:dd:a5:b9:80:02:
17:2c:86:27:5a:79:a3:51:89:66:5e:8e:bf:d2:21:
cf:7b:02:28:bb:da:c1:5e:c3:11:40:b9:9f:82:13:
8d:dc:56:e2:7f:f7:cb:86:00:05:20:8b:87:7f:52:
79:2e:94:74:06:af:34:10:74:8a:e6:78:21:a5:e6:
c8:c2:e7:29:55:d5:89:ed:8c:9e:67:c8:22:0d:8d:
fd:ed:9f:4a:82:0b:10:0a:d3:72:2d:b7:e7:c0:87:
db:2e:7e:c0:e7:16:d5:04:4e:e8:24:00:99:e9:5c:
ab:bb:9f:a0:17:e9:a9:d7:8d:a6:2c:af:b7:32:90:
2a:63:4f:2c:b6:18:8b:b7:88:d9:c8:33:69:c0:69:
b8:af:88:30:61:fd:9b:a8:0c:5e:8a:94:91:ce:25:
63:e2:ad:fb:59:0c:26:a9:74:63:7b:23:5e:17:fe:
cf:f3:23:d0:eb:81:02:36:1d:76:71:bc:71:a1:e2:
5c:27:59:17:f7:e9:47:ae:db:3a:98:80:e1:73:07:
a7:48:4f:39:00:64:fe:12:13:79:7d:53:fa:cb:e5:
81:90:02:34:57:0d:86:83:a6:da:e8:cb:41:b7:2f:
a4:32:37:36:10:20:25:db:08:de:1d:fe:00:5d:7b:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:88:67:8A:CC:57:D1:1C:5C:3F:05:3D:76:E1:62:37:72:D5:B8:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB3757FE405E11ED980CCEF8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d2:99:58:50:2d:c6:a3:2c:d4:92:c9:c6:26:bf:5c:c4:30:
29:af:6d:a7:e2:70:de:be:19:dc:22:d9:24:fa:48:07:0a:94:
8b:6a:ed:4f:99:36:79:76:c6:ea:6c:e7:3e:61:4c:37:53:b4:
c0:4c:f0:ae:5f:48:36:de:08:9c:b2:e3:40:12:e0:96:e8:22:
47:ea:4b:13:38:77:84:1e:2e:1e:9d:77:7b:45:43:a1:e0:d8:
7c:15:8a:7d:89:72:3a:1b:79:44:4e:b6:ef:21:65:94:97:10:
57:36:e2:ff:81:20:bc:23:ce:3e:36:3b:95:27:b0:8e:7f:ca:
03:38:08:5c:c3:2f:a4:3e:ee:91:57:61:6f:57:3f:11:83:28:
66:85:ec:44:b1:a5:79:41:89:37:71:66:64:2a:33:71:52:66:
98:76:86:70:84:2a:90:63:07:4e:3f:7f:ee:23:09:7f:6c:5b:
4a:90:df:42:47:fd:b3:24:a3:2d:c1:9c:6f:9f:f9:9f:03:f6:
8b:5a:7f:2a:31:01:1a:d4:ff:b9:b9:d8:92:12:5d:e5:b2:d4:
f7:23:2d:26:40:fd:59:2e:b2:3d:aa:c3:e8:fa:aa:e9:c6:2a:
79:75:66:d8:c8:10:63:40:94:72:ed:67:7e:a8:66:33:fa:51:
36:04:d6:5b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICGTYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMjA5MzAwMTI1MzdaFw0yMzEwMDUwMTI1MzdaMBgxFjAU
BgNVBAMMDTYzMzY0NTk0LTEyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7IG+RphymnHndpbmAAhcshidaeaNRiWZejr/SIc97Aii72sFewxFAuZ+C
E43cVuJ/98uGAAUgi4d/UnkulHQGrzQQdIrmeCGl5sjC5ylV1YntjJ5nyCINjf3t
n0qCCxAK03Itt+fAh9sufsDnFtUETugkAJnpXKu7n6AX6anXjaYsr7cykCpjTyy2
GIu3iNnIM2nAabiviDBh/ZuoDF6KlJHOJWPirftZDCapdGN7I14X/s/zI9DrgQI2
HXZxvHGh4lwnWRf36Ueu2zqYgOFzB6dITzkAZP4SE3l9U/rL5YGQAjRXDYaDptro
y0G3L6QyNzYQICXbCN4d/gBde/RZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU04hn
isxX0RxcPwU9duFiN3LVuPIwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0NCMzc1N0ZFNDA1RTExRUQ5ODBDQ0VGOEYxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKazbAwDQYJKoZIhvcNAQEL
BQADggEBAGrSmVhQLcajLNSSycYmv1zEMCmvbaficN6+Gdwi2ST6SAcKlItq7U+Z
Nnl2xups5z5hTDdTtMBM8K5fSDbeCJyy40AS4JboIkfqSxM4d4QeLh6dd3tFQ6Hg
2HwVin2JcjobeUROtu8hZZSXEFc24v+BILwjzj42O5UnsI5/ygM4CFzDL6Q+7pFX
YW9XPxGDKGaF7ESxpXlBiTdxZmQqM3FSZph2hnCEKpBjB04/f+4jCX9sW0qQ30JH
/bMkoy3BnG+f+Z8D9otafyoxARrU/7m52JISXeWy1PcjLSZA/Vkusj2qw+j6qunG
Knl1ZtjIEGNAlHLtZ36oZjP6UTYE1ls=
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:53:01 2023 by rpki-client on console-fra.rpki-client.org