Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D505BB5E430F11EE93C7D6174AD9E6FC.roa
File: D505BB5E430F11EE93C7D6174AD9E6FC.roa (raw, json)
Hash identifier: bsG5aEiySuoboKzH+YmmP8jBaA9l5Qmzc0cWIPSeGdA=
Subject key identifier: 64:4D:12:25:5D:96:31:97:A3:1D:B7:11:6C:14:EF:2A:C6:42:0F:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 37EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D505BB5E430F11EE93C7D6174AD9E6FC.roa
Signing time: Fri 25 Aug 2023 06:22:57 +0000
ROA not before: Fri 25 Aug 2023 06:22:54 +0000
ROA not after: Mon 30 Dec 2024 06:22:54 +0000
asID: 134548
IP address blocks: 154.88.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14319 (0x37ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 25 06:22:54 2023 GMT
Not After : Dec 30 06:22:54 2024 GMT
Subject: CN=64e848c1-caeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:7b:dd:b5:98:80:d4:4e:61:f9:b0:d9:bd:
84:0c:91:53:0a:0c:69:e7:cb:02:19:24:84:31:a6:
43:d3:ac:ac:b5:25:f8:e4:e6:ea:e3:2d:52:13:2d:
d3:4a:f2:1f:95:6f:2d:db:1e:44:92:08:02:11:a7:
bf:42:34:16:e6:dd:00:49:b4:50:c6:57:e5:c2:03:
0d:b2:27:37:44:e7:cc:a3:ca:c2:cd:e4:31:10:b3:
23:68:d3:70:d2:66:8a:a8:16:b2:4b:22:51:e8:22:
99:09:da:75:6d:82:4e:e7:d6:e6:57:ec:c4:4d:b9:
a8:ce:71:a9:5d:2d:63:bb:cc:b5:28:e2:7e:b1:b2:
b6:82:f0:89:68:49:fd:f9:5d:76:f8:83:2c:10:bb:
57:da:42:53:63:b8:15:d1:50:79:e9:5c:14:1c:15:
07:1c:bb:8f:78:61:ec:14:73:c5:9b:24:64:e4:65:
48:aa:0f:5f:71:d8:d3:12:c3:78:85:da:e9:30:ac:
f1:05:84:58:f8:4b:66:fe:6f:ac:6b:d4:ba:cc:d7:
75:b0:44:16:d4:94:02:60:1b:33:ba:93:fc:1e:48:
5e:8f:ff:10:bc:5c:e0:cf:5b:df:c8:21:b5:b1:3a:
b8:eb:83:d9:78:11:21:a6:05:67:d3:be:64:a3:68:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4D:12:25:5D:96:31:97:A3:1D:B7:11:6C:14:EF:2A:C6:42:0F:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D505BB5E430F11EE93C7D6174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:41:74:94:97:e3:a1:30:be:f1:24:3e:4a:05:ab:77:0f:a4:
eb:76:b6:b3:0d:18:f4:19:ff:4b:2d:5e:6c:ee:59:ba:7b:54:
39:6d:fd:fb:90:cf:4e:45:f5:4a:01:67:c7:66:ea:8d:6d:dc:
29:fb:72:65:1f:09:0f:a7:3d:11:af:09:bb:bb:cd:2b:25:36:
1b:c6:ee:a8:e7:97:6c:8f:c2:b0:c1:d1:90:d6:8d:a3:85:3d:
8a:96:72:59:34:9a:44:e5:0d:dd:f9:26:71:ed:9e:4c:17:e8:
27:f7:19:48:66:79:17:43:9c:25:7b:a7:f6:dd:71:cf:fc:40:
dd:97:91:8e:1c:b7:fc:43:ac:d7:44:b5:f3:6a:13:d4:81:e4:
de:cf:02:57:67:89:72:c8:f4:e0:b9:70:cd:41:db:e3:52:a4:
5e:a9:39:27:5e:bc:d9:7e:c3:12:30:99:29:86:54:e5:18:38:
67:b6:99:0c:b3:4a:10:aa:a5:4e:e9:47:6a:87:62:ff:d3:30:
b6:9f:34:bf:7d:41:0e:d7:e3:7c:87:64:8e:40:8a:4b:a8:c0:
4a:96:d7:ad:f7:df:bd:d7:ec:fc:df:62:53:b8:16:af:97:80:
81:e0:e1:1e:57:66:29:a9:10:7c:0e:11:da:b0:04:7e:e1:d2:
06:41:7b:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICN+8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA4MjUwNjIyNTRaFw0yNDEyMzAwNjIyNTRaMBgxFjAU
BgNVBAMTDTY0ZTg0OGMxLWNhZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBwnvdtZiA1E5h+bDZvYQMkVMKDGnnywIZJIQxpkPTrKy1Jfjk5urjLVIT
LdNK8h+Vby3bHkSSCAIRp79CNBbm3QBJtFDGV+XCAw2yJzdE58yjysLN5DEQsyNo
03DSZoqoFrJLIlHoIpkJ2nVtgk7n1uZX7MRNuajOcaldLWO7zLUo4n6xsraC8Ilo
Sf35XXb4gywQu1faQlNjuBXRUHnpXBQcFQccu494YewUc8WbJGTkZUiqD19x2NMS
w3iF2ukwrPEFhFj4S2b+b6xr1LrM13WwRBbUlAJgGzO6k/weSF6P/xC8XODPW9/I
IbWxOrjrg9l4ESGmBWfTvmSjaEpRAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZE0S
JV2WMZejHbcRbBTvKsZCD1cwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Q1MDVCQjVFNDMwRjExRUU5M0M3RDYxNzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaWAgwDQYJKoZIhvcNAQEL
BQADggEBAIxBdJSX46EwvvEkPkoFq3cPpOt2trMNGPQZ/0stXmzuWbp7VDlt/fuQ
z05F9UoBZ8dm6o1t3Cn7cmUfCQ+nPRGvCbu7zSslNhvG7qjnl2yPwrDB0ZDWjaOF
PYqWclk0mkTlDd35JnHtnkwX6Cf3GUhmeRdDnCV7p/bdcc/8QN2XkY4ct/xDrNdE
tfNqE9SB5N7PAldniXLI9OC5cM1B2+NSpF6pOSdevNl+wxIwmSmGVOUYOGe2mQyz
ShCqpU7pR2qHYv/TMLafNL99QQ7X43yHZI5AikuowEqW1633373X7PzfYlO4Fq+X
gIHg4R5XZimpEHwOEdqwBH7h0gZBeww=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:29 2024 by rpki-client on console-ams.rpki-client.org