Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FF8C4E311111EEAE34DE294AD9E6FC.roa
File: D4FF8C4E311111EEAE34DE294AD9E6FC.roa (raw, json)
Hash identifier: 3/CSLp+KptMI7A0cG85KQ9ygKuNaS2kxKQbvewHDL+0=
Subject key identifier: BD:CB:2A:4F:53:5C:26:8B:FA:08:ED:D4:C6:36:76:6E:9E:D3:6E:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3471
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FF8C4E311111EEAE34DE294AD9E6FC.roa
Signing time: Wed 02 Aug 2023 08:51:55 +0000
ROA not before: Wed 02 Aug 2023 08:51:51 +0000
ROA not after: Wed 07 Aug 2024 08:51:51 +0000
asID: 137962
IP address blocks: 154.209.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13425 (0x3471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:51:51 2023 GMT
Not After : Aug 7 08:51:51 2024 GMT
Subject: CN=64ca192b-9263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:94:b1:7c:85:9d:cf:df:dd:d7:a0:9c:f1:
65:c2:cc:f6:5c:a9:e9:d9:62:1f:cf:8e:25:12:8a:
9f:c9:41:06:e6:33:da:1c:b0:b4:d1:f2:3e:da:69:
f5:53:b8:1f:ab:35:3f:56:9a:c3:2f:6d:dd:b4:84:
3f:61:a2:ca:cb:4c:31:52:94:05:1b:38:fd:36:2a:
8e:73:63:75:af:d5:10:2b:a1:11:e1:56:45:c2:fb:
70:14:04:6c:ea:65:be:a6:5c:0a:a5:c7:d2:a4:de:
7b:1c:36:5e:8f:0b:5f:94:29:97:08:a6:d3:99:ec:
07:fd:96:b7:a3:1a:5b:b3:d5:6f:56:6d:61:5d:fd:
47:30:a3:be:b0:3b:89:75:8d:12:6f:94:cd:41:1e:
11:e1:63:fc:f2:28:7a:95:00:5f:c3:bc:c1:93:19:
42:9c:f1:6c:ba:a4:33:13:a0:dc:79:5b:00:04:57:
68:55:f2:fb:95:e0:7a:0d:1f:26:b3:24:ff:b5:01:
10:74:f8:d8:73:20:10:4e:1d:5a:29:63:53:20:e4:
91:7a:06:fd:9f:d6:b7:d0:94:f3:5a:8c:d0:9d:27:
07:6d:aa:08:03:1a:43:a1:7f:0e:0a:dd:78:4a:cf:
7e:42:9d:b0:06:2a:a5:48:ac:f9:f8:cb:eb:ed:f3:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:2A:4F:53:5C:26:8B:FA:08:ED:D4:C6:36:76:6E:9E:D3:6E:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4FF8C4E311111EEAE34DE294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6c:0d:47:b5:dd:fd:a5:d4:e7:76:7b:35:43:d3:42:a7:3a:
ae:6e:6b:03:fd:c0:fa:a1:b4:df:01:16:e8:0a:86:38:29:81:
7c:8f:07:3b:39:b1:9e:4d:fc:9d:28:3f:e1:05:6b:47:7e:01:
d0:e1:ec:0c:81:b9:9d:7e:b7:47:f9:db:ac:71:c5:8b:0e:40:
07:0a:a0:38:f0:ef:61:f1:56:87:5f:77:88:5a:e3:5c:49:d3:
31:03:8b:2f:17:48:27:c5:c0:9e:bf:2b:06:c2:52:30:98:3a:
42:10:f5:ed:eb:b4:83:ae:db:3b:a4:fe:68:d7:ed:f5:e8:8e:
e8:47:68:51:6d:c7:90:0b:7c:6c:e2:13:ac:ce:c8:d8:c1:30:
c3:93:d4:76:99:51:cc:82:4e:ac:fb:cf:cc:c7:a8:ea:84:ea:
51:57:45:83:33:87:23:f8:80:d3:11:0e:54:37:08:34:8d:8c:
ee:00:0e:ac:b8:16:e6:ff:01:78:58:42:af:0f:84:02:9a:8c:
ae:d4:f2:05:b2:84:1c:6f:bf:72:74:2a:56:ba:83:e7:cb:e3:
43:cd:9f:5c:ae:43:b2:95:d3:f2:78:a5:fe:7a:ff:32:09:91:
1d:0e:67:13:6d:bb:2f:4a:06:30:dc:56:d7:e8:1a:22:10:02:
a8:66:b6:f7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA4MDIwODUxNTFaFw0yNDA4MDcwODUxNTFaMBgxFjAU
BgNVBAMTDTY0Y2ExOTJiLTkyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaipSxfIWdz9/d16Cc8WXCzPZcqenZYh/PjiUSip/JQQbmM9ocsLTR8j7a
afVTuB+rNT9WmsMvbd20hD9hosrLTDFSlAUbOP02Ko5zY3Wv1RAroRHhVkXC+3AU
BGzqZb6mXAqlx9Kk3nscNl6PC1+UKZcIptOZ7Af9lrejGluz1W9WbWFd/Ucwo76w
O4l1jRJvlM1BHhHhY/zyKHqVAF/DvMGTGUKc8Wy6pDMToNx5WwAEV2hV8vuV4HoN
HyazJP+1ARB0+NhzIBBOHVopY1Mg5JF6Bv2f1rfQlPNajNCdJwdtqggDGkOhfw4K
3XhKz35CnbAGKqVIrPn4y+vt87ZZAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUvcsq
T1NcJov6CO3UxjZ2bp7TbgYwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Q0RkY4QzRFMzExMTExRUVBRTM0REUyOTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa0QAwDQYJKoZIhvcNAQEL
BQADggEBAH5sDUe13f2l1Od2ezVD00KnOq5uawP9wPqhtN8BFugKhjgpgXyPBzs5
sZ5N/J0oP+EFa0d+AdDh7AyBuZ1+t0f526xxxYsOQAcKoDjw72HxVodfd4ha41xJ
0zEDiy8XSCfFwJ6/KwbCUjCYOkIQ9e3rtIOu2zuk/mjX7fXojuhHaFFtx5ALfGzi
E6zOyNjBMMOT1HaZUcyCTqz7z8zHqOqE6lFXRYMzhyP4gNMRDlQ3CDSNjO4ADqy4
Fub/AXhYQq8PhAKajK7U8gWyhBxvv3J0Kla6g+fL40PNn1yuQ7KV0/J4pf56/zIJ
kR0OZxNtuy9KBjDcVtfoGiIQAqhmtvc=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org