Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBFAD3B483C911EE9F3E528A4AD9E6FC.roa
File: CBFAD3B483C911EE9F3E528A4AD9E6FC.roa (raw, json)
Hash identifier: kwE+tYJay+bmZZyp92JuvsSckUHhKPWzJf7fGx9jP20=
Subject key identifier: 53:3F:A0:F4:11:AD:DB:48:1E:2B:4B:82:8C:D9:72:42:C2:E7:F2:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5037
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBFAD3B483C911EE9F3E528A4AD9E6FC.roa
Signing time: Wed 15 Nov 2023 15:15:23 +0000
ROA not before: Wed 15 Nov 2023 15:15:20 +0000
ROA not after: Tue 12 Nov 2024 15:15:20 +0000
asID: 397630
IP address blocks: 154.202.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20535 (0x5037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 15 15:15:20 2023 GMT
Not After : Nov 12 15:15:20 2024 GMT
Subject: CN=6554e08b-a54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:54:17:a8:1d:61:23:a8:e5:42:89:50:8e:
ef:03:12:76:4a:e3:4f:b7:65:68:49:ec:9d:fc:4b:
b2:34:10:8c:fb:5f:77:88:00:70:38:d3:bc:01:dd:
a3:61:f7:66:a6:e0:1a:75:2d:da:c6:70:da:95:c8:
b9:fe:4b:08:3e:42:d5:64:5d:67:fa:58:cd:d8:42:
86:7f:98:42:dd:d7:73:d5:74:91:3a:a6:96:61:25:
43:8c:95:82:1e:18:97:a9:cf:0a:6f:55:5c:a7:25:
65:6f:02:a8:db:65:fe:0c:29:e6:eb:c9:43:fb:ac:
54:59:a1:28:e3:47:a8:26:b1:5f:3a:61:14:4f:b8:
08:b3:2e:ca:c2:9f:e8:cf:db:e7:01:29:ca:e8:f5:
3b:ff:87:45:1b:34:b0:dc:ad:18:f9:b4:4c:c6:f1:
8f:4c:47:9c:50:e2:e0:9f:4e:ac:32:ec:94:33:15:
f4:04:5e:55:08:5b:a7:96:2c:20:ec:d8:cb:71:55:
2f:b4:a8:c1:38:78:c2:9b:4f:7c:52:95:1f:39:b8:
65:68:46:50:94:2d:c8:bc:1b:49:0f:38:0d:b5:ce:
fe:28:91:b5:c8:fe:64:06:6e:86:44:96:2d:1b:b8:
53:88:de:ab:4a:b5:61:4d:7b:a4:f6:96:85:91:98:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3F:A0:F4:11:AD:DB:48:1E:2B:4B:82:8C:D9:72:42:C2:E7:F2:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBFAD3B483C911EE9F3E528A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a0:d7:bf:30:d4:ce:32:5d:94:f7:88:68:55:a1:8c:a9:7b:
55:51:fe:2b:16:f8:06:85:b2:56:2e:14:21:bc:17:89:b2:ed:
0c:a8:a5:d5:bc:27:8a:ed:ac:93:cd:02:24:fa:c0:7c:b7:ce:
7b:bf:bc:fa:81:6b:6f:7e:ad:4e:65:5f:7b:79:a3:d2:27:c4:
30:ec:e8:bd:1d:29:77:c4:a9:77:fe:93:68:3c:55:ff:a4:5c:
c7:4e:91:e9:1f:51:16:88:1b:73:d4:71:25:58:80:af:4b:12:
6e:63:2d:61:14:a1:db:df:c6:a2:ab:7f:8f:e9:dd:6d:5c:78:
6b:d5:7f:9b:f6:3f:26:0b:6f:70:8f:53:f7:5f:13:46:9a:b9:
f2:4b:08:86:b2:c4:34:7d:5a:5e:9e:89:e5:21:68:af:29:e1:
b3:de:4a:7d:cd:f2:ee:13:b7:fe:29:99:20:73:83:07:6d:d1:
ff:10:7c:a3:2f:79:4b:6d:5f:9a:8c:ca:98:d0:cb:74:a2:84:
3d:d1:c7:9e:8e:9b:07:29:9f:fd:92:49:11:53:d9:53:e3:2a:
78:9b:6b:da:46:1a:ac:ba:d8:74:e7:93:14:85:1a:fd:b6:2c:
af:60:50:1f:68:61:fb:27:14:34:56:a5:24:2b:fa:76:2a:0e:
ee:ed:f8:a1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTUxNTE1MjBaFw0yNDExMTIxNTE1MjBaMBgxFjAU
BgNVBAMTDTY1NTRlMDhiLWE1NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQcFQXqB1hI6jlQolQju8DEnZK40+3ZWhJ7J38S7I0EIz7X3eIAHA407wB
3aNh92am4Bp1LdrGcNqVyLn+Swg+QtVkXWf6WM3YQoZ/mELd13PVdJE6ppZhJUOM
lYIeGJepzwpvVVynJWVvAqjbZf4MKebryUP7rFRZoSjjR6gmsV86YRRPuAizLsrC
n+jP2+cBKcro9Tv/h0UbNLDcrRj5tEzG8Y9MR5xQ4uCfTqwy7JQzFfQEXlUIW6eW
LCDs2MtxVS+0qME4eMKbT3xSlR85uGVoRlCULci8G0kPOA21zv4okbXI/mQGboZE
li0buFOI3qtKtWFNe6T2loWRmB3FAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUUz+g
9BGt20geK0uCjNlyQsLn8lAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0NCRkFEM0I0ODNDOTExRUU5RjNFNTI4QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayn0wDQYJKoZIhvcNAQEL
BQADggEBAJqg178w1M4yXZT3iGhVoYype1VR/isW+AaFslYuFCG8F4my7QyopdW8
J4rtrJPNAiT6wHy3znu/vPqBa29+rU5lX3t5o9InxDDs6L0dKXfEqXf+k2g8Vf+k
XMdOkekfURaIG3PUcSVYgK9LEm5jLWEUodvfxqKrf4/p3W1ceGvVf5v2PyYLb3CP
U/dfE0aaufJLCIayxDR9Wl6eieUhaK8p4bPeSn3N8u4Tt/4pmSBzgwdt0f8QfKMv
eUttX5qMypjQy3SihD3Rx56Omwcpn/2SSRFT2VPjKniba9pGGqy62HTnkxSFGv22
LK9gUB9oYfsnFDRWpSQr+nYqDu7t+KE=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org