Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E4DD1AF70511EEB0569B8D775412E6.roa
File: D1E4DD1AF70511EEB0569B8D775412E6.roa (raw, json)
Hash identifier: 3CB8MGf8yZyHUxrTIyfLESzLWTsIvjUr9b2XETbMoGY=
Subject key identifier: 23:66:96:DD:83:E0:7A:5B:C4:0B:89:B9:23:4A:5E:60:3F:FB:34:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AACC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E4DD1AF70511EEB0569B8D775412E6.roa
Signing time: Wed 10 Apr 2024 06:44:46 +0000
ROA not before: Wed 10 Apr 2024 06:44:43 +0000
ROA not after: Sat 20 Apr 2024 06:44:43 +0000
asID: 135097
IP address blocks: 154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43724 (0xaacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 06:44:43 2024 GMT
Not After : Apr 20 06:44:43 2024 GMT
Subject: CN=6616355e-19ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:a5:d5:cb:b2:60:b6:0e:b5:cd:a2:dd:0b:
f7:c1:a8:68:9b:a0:70:47:a5:9a:16:fb:55:b8:41:
f7:4d:9d:85:27:65:e9:48:df:58:81:72:29:ab:06:
3c:86:da:e7:95:fe:e0:f2:5f:e7:ee:28:a7:19:ac:
f2:dc:f9:a3:86:0c:e8:50:85:5e:13:f9:76:55:97:
33:96:52:a5:75:97:8b:8d:15:7e:bd:45:67:90:6d:
e5:ab:0a:b9:bd:cf:0e:34:62:41:9a:d6:f8:e3:f9:
da:9f:51:51:28:62:83:9d:50:e9:0a:4c:49:3c:bc:
31:e3:08:e5:8f:ff:0a:c7:a3:08:2a:c5:ea:03:ec:
d1:65:0d:04:05:96:1f:a8:2f:ec:f4:a8:ee:0a:56:
54:cf:9a:82:b4:0a:76:e7:8a:f3:22:13:a8:9a:18:
54:04:0d:97:b7:f8:ab:2d:b4:4a:da:61:48:7c:73:
2b:7e:82:ff:93:69:97:6c:a8:9f:0c:17:43:26:2c:
da:a6:5a:a5:e1:70:ba:07:6b:c1:1a:92:66:7a:9b:
7a:05:9f:5d:0d:45:64:de:bb:63:9a:f0:7b:03:6f:
50:8a:c2:0c:f5:03:b2:fd:a0:7f:63:56:ca:b9:06:
11:1f:47:23:3c:3e:24:56:40:2a:22:bd:de:c2:d4:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:96:DD:83:E0:7A:5B:C4:0B:89:B9:23:4A:5E:60:3F:FB:34:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1E4DD1AF70511EEB0569B8D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:ab:49:44:0c:49:d1:6c:f9:cf:e1:61:9c:42:0a:8a:ba:bf:
d8:48:95:c2:cf:03:e5:7a:1c:9d:fa:d9:e5:9c:48:c2:45:14:
99:67:fc:f8:5c:45:17:d4:c9:0c:96:63:e1:83:2b:68:fe:37:
26:02:62:43:cb:c9:f8:e4:11:18:ed:54:3e:5c:6a:ef:92:a1:
ba:7f:5b:11:17:2e:57:76:d5:fb:eb:ab:f4:ce:69:d8:17:35:
60:74:fe:c6:66:7a:91:92:eb:bc:ec:73:5d:0b:3d:5b:52:db:
6c:c3:a2:40:b4:62:3f:bc:86:88:5d:9c:ef:40:0b:27:40:80:
21:a6:ad:fa:5f:04:49:72:da:57:e1:a6:c6:fb:83:50:7f:a4:
f7:5a:a4:1b:04:96:68:2a:e7:72:47:5c:66:3a:22:bc:60:09:
e8:3b:d7:ab:0a:0e:45:a5:10:be:50:d6:91:2d:ca:bc:28:62:
23:7c:a8:05:fd:a7:a9:48:39:29:b0:8e:07:48:4d:86:a9:95:
47:73:1f:a6:54:8e:e4:f1:85:6a:11:f9:7a:7c:18:f7:43:64:
14:4b:96:8f:e7:bd:5c:fd:3a:7c:f7:15:d1:65:96:33:ee:c3:
36:1e:76:73:ba:6a:c6:c0:cf:99:c5:5b:70:13:d2:ea:5c:4f:
ef:8a:26:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKrMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEwMDY0NDQzWhcNMjQwNDIwMDY0NDQzWjAYMRYw
FAYDVQQDEw02NjE2MzU1ZS0xOWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzi2l1cuyYLYOtc2i3Qv3wahom6BwR6WaFvtVuEH3TZ2FJ2XpSN9YgXIp
qwY8htrnlf7g8l/n7iinGazy3PmjhgzoUIVeE/l2VZczllKldZeLjRV+vUVnkG3l
qwq5vc8ONGJBmtb44/nan1FRKGKDnVDpCkxJPLwx4wjlj/8Kx6MIKsXqA+zRZQ0E
BZYfqC/s9KjuClZUz5qCtAp254rzIhOomhhUBA2Xt/irLbRK2mFIfHMrfoL/k2mX
bKifDBdDJizaplql4XC6B2vBGpJmept6BZ9dDUVk3rtjmvB7A29QisIM9QOy/aB/
Y1bKuQYRH0cjPD4kVkAqIr3ewtQMDQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCNm
lt2D4HpbxAuJuSNKXmA/+zSZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EMUU0REQxQUY3MDUxMUVFQjA1NjlCOEQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtZAMA0GCSqGSIb3DQEB
CwUAA4IBAQClq0lEDEnRbPnP4WGcQgqKur/YSJXCzwPlehyd+tnlnEjCRRSZZ/z4
XEUX1MkMlmPhgyto/jcmAmJDy8n45BEY7VQ+XGrvkqG6f1sRFy5XdtX766v0zmnY
FzVgdP7GZnqRkuu87HNdCz1bUttsw6JAtGI/vIaIXZzvQAsnQIAhpq36XwRJctpX
4abG+4NQf6T3WqQbBJZoKudyR1xmOiK8YAnoO9erCg5FpRC+UNaRLcq8KGIjfKgF
/aepSDkpsI4HSE2GqZVHcx+mVI7k8YVqEfl6fBj3Q2QUS5aP571c/Tp89xXRZZYz
7sM2HnZzumrGwM+ZxVtwE9LqXE/viibh
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:36 2024 by rpki-client on console-fra.rpki-client.org