Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D284B69CF91711EDBD3B081A4AD9E6FC.roa
File: D284B69CF91711EDBD3B081A4AD9E6FC.roa (raw, json)
Hash identifier: 6lQu1MCuRBQ1v2VsN75w+MfRL3XWPOEJsvkHkbLp40o=
Subject key identifier: 8A:BC:BC:B4:6C:F8:C0:60:20:4C:7E:AB:49:22:DF:8D:88:87:8F:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2648
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D284B69CF91711EDBD3B081A4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:13:43 +0000
ROA not before: Tue 23 May 2023 03:13:39 +0000
ROA not after: Tue 20 Aug 2024 03:13:39 +0000
asID: 399674
IP address blocks: 154.205.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9800 (0x2648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 03:13:39 2023 GMT
Not After : Aug 20 03:13:39 2024 GMT
Subject: CN=646c2f67-6859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:45:ef:cb:59:fd:46:92:03:bb:ea:b1:45:
cf:a2:64:4b:de:59:18:62:d9:99:d5:3c:0d:34:a0:
d1:fa:2c:e9:79:08:54:ba:29:a4:a9:1b:31:ad:4f:
5c:dc:aa:58:16:86:56:ce:31:cd:1d:64:be:db:4d:
f1:51:c4:c2:23:65:2d:fc:11:30:fc:c0:43:7a:b7:
fa:23:e6:aa:bc:09:af:75:e0:40:34:49:9f:f0:fb:
cb:de:4b:d1:f0:dd:77:bb:16:f4:19:dc:08:96:08:
99:a1:e1:4f:37:28:de:0a:4c:b2:d8:5f:1e:c7:15:
aa:88:11:cb:55:b0:bc:18:c0:b8:84:cc:cf:94:9b:
8f:09:b8:98:a6:12:7a:e7:a1:b6:55:27:e1:6d:52:
1e:6e:f7:d4:12:cf:47:a8:25:bf:6b:09:02:74:d4:
cb:c3:de:7a:38:a2:7d:84:c9:6c:77:52:af:e5:d7:
be:31:bf:ed:de:a3:6c:e8:ea:69:70:cf:aa:ea:92:
90:5a:f3:70:56:e0:cb:06:74:c9:1e:43:c2:d2:53:
af:28:d9:78:17:71:60:b9:32:c1:a9:e3:29:0b:d9:
ee:33:ae:ad:b3:43:49:13:97:ca:75:1b:1c:79:3a:
14:ba:e1:45:4d:a5:77:bb:70:a6:71:48:76:86:88:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BC:BC:B4:6C:F8:C0:60:20:4C:7E:AB:49:22:DF:8D:88:87:8F:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D284B69CF91711EDBD3B081A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:1c:c6:31:a4:07:0b:dc:16:01:c4:23:98:bd:07:5c:42:d9:
29:65:75:52:c7:9e:97:d3:0c:ea:54:14:f3:49:e6:40:3a:dd:
e1:03:49:66:79:24:a9:89:18:72:1a:55:02:c9:67:8a:7c:4e:
79:e9:2e:6f:e9:db:25:e3:3e:b8:80:a8:6e:c3:1f:41:5b:23:
31:16:64:18:09:c7:b1:63:0a:f1:ad:7e:27:50:9d:c5:c7:fa:
36:a9:f8:0a:73:b2:0e:ef:80:27:18:35:94:11:68:e7:3e:93:
db:c9:31:0c:85:39:78:68:63:49:71:14:23:02:d6:3f:7a:af:
bb:02:31:f3:e0:d9:07:3c:2d:9f:a7:77:a8:bc:4a:4e:cb:3d:
b8:38:19:69:ee:94:cc:f5:64:af:4a:8e:58:11:f3:65:b8:f5:
d0:43:80:90:cf:c4:f4:9a:6c:8e:eb:bc:59:99:b3:af:ab:1c:
1c:9d:c2:0e:7c:b2:c5:52:1a:53:bb:0f:fe:68:06:7d:b8:6d:
e7:62:b2:ff:83:45:62:b4:b8:d0:e4:5c:c1:f9:c2:af:12:5c:
ea:9d:73:47:8e:21:e4:d1:21:e9:31:8c:5d:1c:46:82:d7:eb:
f5:0f:a0:67:39:31:a8:f9:df:c5:d9:50:41:6e:c5:f8:51:8a:
23:8d:f4:5c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICJkgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA1MjMwMzEzMzlaFw0yNDA4MjAwMzEzMzlaMBgxFjAU
BgNVBAMTDTY0NmMyZjY3LTY4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPdEXvy1n9RpIDu+qxRc+iZEveWRhi2ZnVPA00oNH6LOl5CFS6KaSpGzGt
T1zcqlgWhlbOMc0dZL7bTfFRxMIjZS38ETD8wEN6t/oj5qq8Ca914EA0SZ/w+8ve
S9Hw3Xe7FvQZ3AiWCJmh4U83KN4KTLLYXx7HFaqIEctVsLwYwLiEzM+Um48JuJim
EnrnobZVJ+FtUh5u99QSz0eoJb9rCQJ01MvD3no4on2EyWx3Uq/l174xv+3eo2zo
6mlwz6rqkpBa83BW4MsGdMkeQ8LSU68o2XgXcWC5MsGp4ykL2e4zrq2zQ0kTl8p1
Gxx5OhS64UVNpXe7cKZxSHaGiPJFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUiry8
tGz4wGAgTH6rSSLfjYiHj+AwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0QyODRCNjlDRjkxNzExRURCRDNCMDgxQTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOazfgwDQYJKoZIhvcNAQEL
BQADggEBAKEcxjGkBwvcFgHEI5i9B1xC2SlldVLHnpfTDOpUFPNJ5kA63eEDSWZ5
JKmJGHIaVQLJZ4p8TnnpLm/p2yXjPriAqG7DH0FbIzEWZBgJx7FjCvGtfidQncXH
+jap+Apzsg7vgCcYNZQRaOc+k9vJMQyFOXhoY0lxFCMC1j96r7sCMfPg2Qc8LZ+n
d6i8Sk7LPbg4GWnulMz1ZK9KjlgR82W49dBDgJDPxPSabI7rvFmZs6+rHBydwg58
ssVSGlO7D/5oBn24bedisv+DRWK0uNDkXMH5wq8SXOqdc0eOIeTRIekxjF0cRoLX
6/UPoGc5Maj538XZUEFuxfhRiiON9Fw=
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org