Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E8EB5E43E711EE806A074A4AD9E6FC.roa
File: D4E8EB5E43E711EE806A074A4AD9E6FC.roa (raw, json)
Hash identifier: 1ajrz7SJKguZOIJoX86Ow9oKHlliQBACQUwc1QZRBaU=
Subject key identifier: B4:2D:7D:89:FE:84:FE:AB:E3:AD:58:8A:69:54:61:A3:2D:78:39:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 39D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E8EB5E43E711EE806A074A4AD9E6FC.roa
Signing time: Sat 26 Aug 2023 08:09:08 +0000
ROA not before: Sat 26 Aug 2023 08:09:05 +0000
ROA not after: Thu 11 Jul 2024 08:09:05 +0000
asID: 136933
IP address blocks: 154.91.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14804 (0x39d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 26 08:09:05 2023 GMT
Not After : Jul 11 08:09:05 2024 GMT
Subject: CN=64e9b324-23ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:33:7b:fe:82:61:d8:c0:e5:4f:23:14:33:
2c:b2:bc:7f:1b:06:ec:06:b5:32:14:71:c2:4f:c8:
fd:49:f2:81:92:14:65:3c:7d:4b:d3:23:d6:83:1c:
b9:51:dd:4a:f7:50:a4:ba:ea:04:79:5c:04:13:2d:
f5:9f:b2:ac:36:e5:12:34:ed:85:3c:4b:dc:d1:7a:
6b:4c:94:0a:e4:a7:cd:96:4c:e7:db:48:5c:7e:3f:
84:35:c2:05:d6:14:3a:e9:77:e0:a6:19:4a:b8:42:
63:92:7f:63:03:f9:c4:12:2e:61:0e:1c:05:e5:42:
8c:e6:2c:ca:24:65:a5:20:04:dc:ff:e9:fe:0c:46:
0b:8f:d9:62:c8:42:c0:1c:e2:4d:b9:3d:15:18:f2:
ca:a9:8c:51:3b:83:0a:2b:cd:5c:7a:0a:ef:05:6b:
34:52:56:3b:c4:e7:f9:1c:05:1e:16:99:86:3f:75:
0d:c6:50:d8:e9:50:28:bc:3a:99:29:07:78:7f:bd:
c0:60:7a:54:8d:94:d1:44:a1:60:46:27:12:f1:73:
ca:3f:6b:d9:0b:17:7b:0c:b3:11:4b:d4:37:0e:6b:
7f:2c:ab:1b:d0:19:c4:e2:12:33:c0:52:48:e4:09:
38:cf:0e:cf:f9:fb:70:35:0b:1a:b8:8b:1c:88:35:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:7D:89:FE:84:FE:AB:E3:AD:58:8A:69:54:61:A3:2D:78:39:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4E8EB5E43E711EE806A074A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.197.0/24
Signature Algorithm: sha256WithRSAEncryption
12:06:a6:a7:a7:b5:73:75:bd:57:89:b1:2c:bd:d0:43:87:71:
97:91:43:f7:b8:d6:e1:84:5e:62:2f:48:dc:32:00:00:7b:ef:
dc:e7:37:c4:49:23:9c:80:2b:99:a5:e8:76:04:7e:92:b7:0d:
9a:b8:4a:ea:36:39:05:a5:d1:ce:29:ac:34:7f:90:ed:62:f9:
ad:11:03:98:bc:61:16:46:f2:25:81:01:dd:a7:14:de:43:ef:
ca:b9:08:77:4c:04:71:a9:c3:14:4f:dc:71:16:3a:92:c6:99:
f2:36:55:a0:a0:f3:87:07:3e:c5:84:60:6c:2a:85:87:01:31:
41:26:e8:7a:b0:e2:90:6b:53:84:60:fb:f3:45:47:e9:d8:23:
6d:03:3f:3c:e1:36:83:c5:bc:2c:a8:28:91:86:22:41:e9:a5:
b5:3c:14:ff:6c:76:5e:da:56:ff:e9:c1:f2:44:ab:8e:51:25:
ba:cc:30:0a:cc:1b:12:ae:76:d1:02:43:9f:8b:fc:b8:ae:2a:
ff:ce:46:fb:03:0c:37:4d:86:0c:12:95:6b:d4:a6:09:95:ec:
af:7e:f8:fe:f8:8c:d2:c1:d4:44:30:02:07:e3:9c:98:90:29:
2d:91:80:8d:78:42:ce:23:1c:d1:59:e6:36:58:b1:49:1f:a2:
a5:64:8b:8f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICOdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA4MjYwODA5MDVaFw0yNDA3MTEwODA5MDVaMBgxFjAU
BgNVBAMTDTY0ZTliMzI0LTIzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxvDN7/oJh2MDlTyMUMyyyvH8bBuwGtTIUccJPyP1J8oGSFGU8fUvTI9aD
HLlR3Ur3UKS66gR5XAQTLfWfsqw25RI07YU8S9zRemtMlArkp82WTOfbSFx+P4Q1
wgXWFDrpd+CmGUq4QmOSf2MD+cQSLmEOHAXlQozmLMokZaUgBNz/6f4MRguP2WLI
QsAc4k25PRUY8sqpjFE7gworzVx6Cu8FazRSVjvE5/kcBR4WmYY/dQ3GUNjpUCi8
OpkpB3h/vcBgelSNlNFEoWBGJxLxc8o/a9kLF3sMsxFL1DcOa38sqxvQGcTiEjPA
UkjkCTjPDs/5+3A1Cxq4ixyINfCHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtC19
if6E/qvjrViKaVRhoy14OZIwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Q0RThFQjVFNDNFNzExRUU4MDZBMDc0QTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaW8UwDQYJKoZIhvcNAQEL
BQADggEBABIGpqentXN1vVeJsSy90EOHcZeRQ/e41uGEXmIvSNwyAAB779znN8RJ
I5yAK5ml6HYEfpK3DZq4Suo2OQWl0c4prDR/kO1i+a0RA5i8YRZG8iWBAd2nFN5D
78q5CHdMBHGpwxRP3HEWOpLGmfI2VaCg84cHPsWEYGwqhYcBMUEm6Hqw4pBrU4Rg
+/NFR+nYI20DPzzhNoPFvCyoKJGGIkHppbU8FP9sdl7aVv/pwfJEq45RJbrMMArM
GxKudtECQ5+L/LiuKv/ORvsDDDdNhgwSlWvUpgmV7K9++P74jNLB1EQwAgfjnJiQ
KS2RgI14Qs4jHNFZ5jZYsUkfoqVki48=
-----END CERTIFICATE-----
Generated at Thu May 2 14:41:14 2024 by rpki-client on console-ams.rpki-client.org