Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8136CEDB211EEBAAA6F8B775412E6.roa
File: CEA8136CEDB211EEBAAA6F8B775412E6.roa (raw, json)
Hash identifier: 0157ngDIXdHpwyMErwJMlD0vKMFXPb5/KnqLMxX216A=
Subject key identifier: DF:E9:15:DD:D7:D0:52:83:71:98:C5:F6:E3:E8:6A:DA:30:AF:81:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A707
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8136CEDB211EEBAAA6F8B775412E6.roa
Signing time: Fri 29 Mar 2024 09:57:52 +0000
ROA not before: Fri 29 Mar 2024 09:57:49 +0000
ROA not after: Fri 26 Apr 2024 09:57:49 +0000
asID: 62240
IP address blocks: 154.196.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 09:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42759 (0xa707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:57:49 2024 GMT
Not After : Apr 26 09:57:49 2024 GMT
Subject: CN=660690a0-1305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:b1:0b:b7:53:c3:b4:26:7f:27:e3:83:e6:
b6:8f:57:83:0e:18:a4:e3:03:4d:e0:15:ed:96:9c:
7f:5c:4f:73:2f:56:ed:d6:bf:9e:2a:d9:a1:e1:21:
dd:c6:78:ba:fd:85:ab:f6:bd:89:da:b2:4d:0a:33:
14:67:b0:96:da:9b:fb:5a:87:3f:44:33:29:be:8c:
8e:29:c4:9b:64:13:ec:73:77:31:63:db:6f:ec:df:
da:e3:26:ad:21:ab:e4:3b:cf:62:79:5c:02:33:70:
1a:fc:9d:6d:68:94:99:e1:e9:7b:f7:5a:28:92:df:
6f:e9:73:07:ec:4a:e2:c6:4d:ab:ec:44:7c:8c:13:
34:8a:ad:0e:a4:27:9f:92:57:76:93:ff:3f:3f:f6:
1d:b1:9d:e6:d7:d7:a6:d0:40:c7:aa:d9:1d:b9:cb:
df:1b:08:18:aa:ab:2d:02:02:a7:20:a4:63:97:bd:
e8:96:90:1a:34:65:c9:13:d4:bb:84:49:b1:cb:1a:
ad:ff:d8:83:6e:94:92:af:61:41:3e:c4:49:15:3c:
0c:28:8f:60:5a:c0:a3:ab:6a:b8:ed:49:e8:df:1f:
c2:dc:ea:6f:e1:d9:9d:24:15:c4:6c:2b:3b:75:f0:
2c:b5:fb:45:61:c9:be:44:08:7e:de:a6:98:96:7b:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:15:DD:D7:D0:52:83:71:98:C5:F6:E3:E8:6A:DA:30:AF:81:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEA8136CEDB211EEBAAA6F8B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.64.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:70:cc:15:35:ae:68:8a:aa:2f:e3:aa:21:b5:d8:02:47:43:
c9:c5:61:7a:2d:f6:3d:1a:fe:c5:f4:47:83:7d:11:a0:da:33:
b9:cf:f3:67:e5:ae:f4:d0:70:1e:bd:e3:64:79:46:97:af:ed:
29:d7:a1:74:bd:53:29:a0:12:4f:90:77:05:5c:03:43:ae:e5:
44:63:1e:14:14:6a:02:d0:06:a5:65:fe:cc:92:a9:1b:54:73:
56:2c:bf:4c:1b:79:7e:2a:78:37:a8:7a:e0:0d:02:85:ea:34:
62:c9:14:e1:e0:fa:51:7a:48:44:75:4c:33:b2:c4:10:83:b3:
18:11:11:90:11:e4:27:2c:71:43:9c:2c:87:ae:6a:bb:b8:bf:
f4:52:ba:d7:13:99:e4:2e:0e:4e:53:c7:f1:89:ae:2b:ed:44:
af:35:e5:39:78:ed:8e:e7:2c:03:18:75:b6:28:52:b4:1a:70:
3d:0e:02:4d:4f:0b:ca:5f:ff:ca:05:b0:51:09:48:6b:ef:92:
2c:07:9c:9f:f3:cf:11:3b:c2:4c:da:50:3a:55:55:d2:07:44:
d2:ec:cc:f2:9f:23:dd:e9:1e:f4:02:53:e6:d0:8d:f7:da:6e:
3b:d2:df:22:e7:5f:a9:0d:48:46:fc:6b:e9:b9:ae:0e:37:85:
99:1a:71:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKcHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzI5MDk1NzQ5WhcNMjQwNDI2MDk1NzQ5WjAYMRYw
FAYDVQQDEw02NjA2OTBhMC0xMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsuyxC7dTw7Qmfyfjg+a2j1eDDhik4wNN4BXtlpx/XE9zL1bt1r+eKtmh
4SHdxni6/YWr9r2J2rJNCjMUZ7CW2pv7Woc/RDMpvoyOKcSbZBPsc3cxY9tv7N/a
4yatIavkO89ieVwCM3Aa/J1taJSZ4el791ookt9v6XMH7Erixk2r7ER8jBM0iq0O
pCefkld2k/8/P/YdsZ3m19em0EDHqtkducvfGwgYqqstAgKnIKRjl73olpAaNGXJ
E9S7hEmxyxqt/9iDbpSSr2FBPsRJFTwMKI9gWsCjq2q47Uno3x/C3Opv4dmdJBXE
bCs7dfAstftFYcm+RAh+3qaYlnvA7wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN/p
Fd3X0FKDcZjF9uPoatowr4FBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRUE4MTM2Q0VEQjIxMUVFQkFBQTZGOEI3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmsRAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6cMwVNa5oiqov46ohtdgCR0PJxWF6LfY9Gv7F9EeDfRGg2jO5z/Nn
5a700HAeveNkeUaXr+0p16F0vVMpoBJPkHcFXANDruVEYx4UFGoC0AalZf7Mkqkb
VHNWLL9MG3l+Kng3qHrgDQKF6jRiyRTh4PpRekhEdUwzssQQg7MYERGQEeQnLHFD
nCyHrmq7uL/0UrrXE5nkLg5OU8fxia4r7USvNeU5eO2O5ywDGHW2KFK0GnA9DgJN
TwvKX//KBbBRCUhr75IsB5yf888RO8JM2lA6VVXSB0TS7MzynyPd6R70AlPm0I33
2m470t8i51+pDUhG/Gvpua4ON4WZGnF6
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:39 2024 by rpki-client on console-fra.rpki-client.org