Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04556FE14F411EEB6D04B844AD9E6FC.roa
File: D04556FE14F411EEB6D04B844AD9E6FC.roa (raw, json)
Hash identifier: SmpxpFgZZIoBVuKtOzLZXr2b5afg/dlO6FIGoUGHflM=
Subject key identifier: 00:0D:20:9C:28:EC:09:8F:87:CD:57:C1:F8:E3:7C:92:1F:3A:2B:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2DCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04556FE14F411EEB6D04B844AD9E6FC.roa
Signing time: Tue 27 Jun 2023 14:13:39 +0000
ROA not before: Tue 27 Jun 2023 14:13:36 +0000
ROA not after: Sat 26 Apr 2025 14:13:36 +0000
asID: 138995
IP address blocks: 154.218.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11726 (0x2dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 14:13:36 2023 GMT
Not After : Apr 26 14:13:36 2025 GMT
Subject: CN=649aee93-2e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:2e:8f:e7:3e:12:0b:91:86:d1:c9:93:fe:
0c:2f:c1:d7:18:b7:50:6a:3c:8d:c4:a9:6e:e9:6d:
21:86:0a:fd:8c:31:7e:df:8b:77:99:19:3b:61:79:
cc:c1:07:39:26:e9:f1:4f:6f:dd:f0:5a:c8:e7:ea:
2a:a5:d2:c3:9d:b0:3e:4a:5b:3e:7e:95:82:1e:c6:
9d:c5:00:e6:cd:b7:d7:49:8c:d1:e9:ca:d4:72:36:
c0:46:28:1e:d2:c0:04:72:4f:92:32:31:03:c9:8c:
02:5c:cb:6a:14:e1:4b:61:ef:8b:89:8d:a7:93:6b:
8f:ee:5c:68:d4:15:95:a2:f0:f9:0d:42:70:22:a2:
aa:40:8e:52:86:03:c1:fd:60:cc:7a:4b:a1:03:3a:
dd:11:b6:fc:8b:b9:30:25:a8:7d:ad:e2:8c:1b:68:
b0:96:02:40:dd:bc:61:25:8b:7c:68:b0:3f:cb:9b:
2a:87:56:df:f7:07:c7:c2:d5:3b:c9:cd:4f:48:f3:
46:0e:64:53:b1:ad:08:fa:d2:ce:1b:8a:83:51:29:
ec:2e:f6:14:97:90:e6:01:56:a5:09:f8:de:18:38:
ff:48:f4:3b:9d:56:55:08:df:a6:c5:98:64:3c:03:
f6:cf:bc:37:93:e3:b4:f5:ef:5f:98:f3:aa:66:54:
74:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:20:9C:28:EC:09:8F:87:CD:57:C1:F8:E3:7C:92:1F:3A:2B:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04556FE14F411EEB6D04B844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.3.0/24
Signature Algorithm: sha256WithRSAEncryption
42:66:0c:3b:a4:00:9a:bc:d4:e0:b1:f2:f0:5e:6f:58:53:a3:
d8:10:c6:20:68:db:8b:88:45:5c:9c:f5:79:44:17:9b:2b:38:
87:8e:30:2d:0f:39:18:c9:c1:13:0c:bb:c6:36:c1:de:ec:f6:
ca:aa:8c:5c:dd:08:17:90:18:f4:0b:66:dd:b6:83:65:b4:b9:
fd:a6:17:94:e8:4c:65:01:bd:ab:a8:d9:7c:79:53:d4:c1:d7:
0d:a8:cb:40:d6:54:97:8e:e2:7f:ff:f0:b2:2e:ad:60:a3:05:
54:fd:7f:a9:47:6f:b0:dc:e3:c9:50:df:b5:29:e5:c8:d0:5a:
e0:1f:d5:69:0a:1e:75:ba:86:a4:10:40:be:47:23:20:54:ce:
b1:22:1d:ac:05:db:53:49:d8:93:23:54:23:e1:9c:8b:14:2b:
71:51:de:97:d5:09:6b:4c:76:a1:e2:d5:41:7b:b1:b7:f3:ed:
af:42:3f:bf:bb:49:58:81:f5:d3:99:fd:a0:7e:f2:a8:00:e7:
16:7e:ea:ec:d9:c7:e2:bd:29:26:81:b8:90:d7:75:1d:8b:12:
77:d6:e7:6b:9f:e7:c8:98:1c:82:ff:da:a6:43:53:49:5a:42:
ae:e8:2a:82:b9:c9:e2:28:2b:18:a1:8a:6d:9b:88:74:47:bf:
19:66:44:86
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLc4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjcxNDEzMzZaFw0yNTA0MjYxNDEzMzZaMBgxFjAU
BgNVBAMTDTY0OWFlZTkzLTJlMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDomi6P5z4SC5GG0cmT/gwvwdcYt1BqPI3EqW7pbSGGCv2MMX7fi3eZGTth
eczBBzkm6fFPb93wWsjn6iql0sOdsD5KWz5+lYIexp3FAObNt9dJjNHpytRyNsBG
KB7SwARyT5IyMQPJjAJcy2oU4Uth74uJjaeTa4/uXGjUFZWi8PkNQnAioqpAjlKG
A8H9YMx6S6EDOt0RtvyLuTAlqH2t4owbaLCWAkDdvGEli3xosD/LmyqHVt/3B8fC
1TvJzU9I80YOZFOxrQj60s4bioNRKewu9hSXkOYBVqUJ+N4YOP9I9DudVlUI36bF
mGQ8A/bPvDeT47T171+Y86pmVHQtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUAA0g
nCjsCY+HzVfB+ON8kh86K/cwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0QwNDU1NkZFMTRGNDExRUVCNkQwNEI4NDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa2gMwDQYJKoZIhvcNAQEL
BQADggEBAEJmDDukAJq81OCx8vBeb1hTo9gQxiBo24uIRVyc9XlEF5srOIeOMC0P
ORjJwRMMu8Y2wd7s9sqqjFzdCBeQGPQLZt22g2W0uf2mF5ToTGUBvauo2Xx5U9TB
1w2oy0DWVJeO4n//8LIurWCjBVT9f6lHb7Dc48lQ37Up5cjQWuAf1WkKHnW6hqQQ
QL5HIyBUzrEiHawF21NJ2JMjVCPhnIsUK3FR3pfVCWtMdqHi1UF7sbfz7a9CP7+7
SViB9dOZ/aB+8qgA5xZ+6uzZx+K9KSaBuJDXdR2LEnfW52uf58iYHIL/2qZDU0la
Qq7oKoK5yeIoKxihim2biHRHvxlmRIY=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:39 2024 by rpki-client on console-fra.rpki-client.org