Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5694D86F00711EE99232BC6775412E6.roa
File: D5694D86F00711EE99232BC6775412E6.roa (raw, json)
Hash identifier: xpM+vHTFKP0IABnH83DXpaaR9FJzQZlNgLTBylIzhkg=
Subject key identifier: 71:14:9C:1D:38:17:26:6C:2B:88:55:75:FD:AC:21:D6:E3:55:1C:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A81C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5694D86F00711EE99232BC6775412E6.roa
Signing time: Mon 01 Apr 2024 09:11:34 +0000
ROA not before: Mon 01 Apr 2024 09:11:29 +0000
ROA not after: Sat 11 May 2024 09:11:29 +0000
asID: 138915
IP address blocks: 154.205.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43036 (0xa81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:11:29 2024 GMT
Not After : May 11 09:11:29 2024 GMT
Subject: CN=660a7a46-6d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:6c:94:bb:ff:c0:cf:6f:af:73:57:3b:ab:
5c:d7:0e:e4:ea:16:ef:8d:4c:b9:8d:f3:87:f5:db:
a7:9e:71:6b:49:64:e1:cb:d8:64:ba:f2:d9:9d:bd:
ac:85:47:d9:2e:85:a9:79:a6:13:5b:c4:d6:3c:30:
50:60:e5:6d:c5:bf:02:3f:55:82:03:c3:51:2c:9c:
75:70:7b:f2:73:4e:e1:3f:26:f5:96:95:d1:ef:41:
b4:7f:02:be:2e:f8:2f:18:dc:4d:cd:c1:0d:f3:21:
7f:48:75:34:1b:c5:5e:9c:d4:b8:b3:0a:c0:39:4b:
dd:13:34:74:84:97:da:69:6d:4e:dd:e2:e1:b4:23:
32:9c:fa:a7:d8:d4:88:24:bc:b9:bf:68:56:1d:2c:
8b:a2:5e:cd:0d:a3:65:7e:91:78:70:51:b2:a5:67:
c9:9e:87:94:00:d0:8e:5a:c4:4f:d9:cc:cf:b0:73:
9a:3d:6c:86:a7:fb:0a:20:da:3f:3e:33:27:b2:7b:
f2:4c:fb:7a:ee:5e:4e:a3:79:a0:4b:5e:4e:e7:69:
ae:b0:c9:c5:a5:9e:7c:25:69:8f:cc:14:1d:ff:cb:
26:6b:85:82:3a:f1:5c:96:75:de:03:f9:b1:ec:78:
7d:49:75:8b:75:e4:c7:c3:45:92:50:d4:9b:a3:fe:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:9C:1D:38:17:26:6C:2B:88:55:75:FD:AC:21:D6:E3:55:1C:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5694D86F00711EE99232BC6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.157.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b9:8e:2d:df:7f:25:ff:25:e8:23:60:a9:6e:33:8d:4e:6c:
30:e6:1c:a7:27:90:81:b1:6c:e9:1d:33:b2:e5:5a:d0:2b:6d:
89:0b:25:2c:ed:b5:e8:67:4f:c5:a8:89:15:dc:0a:42:3b:7a:
72:0e:0c:41:9d:e5:c5:16:01:c3:9d:82:bf:ba:70:13:cd:ad:
2b:e6:d5:16:de:3e:ac:b5:2c:f6:ae:8b:8f:1a:f0:2a:4e:c5:
1c:84:95:bf:ac:c4:9b:e8:28:f4:d4:89:9b:50:48:07:44:e5:
23:ac:98:0b:59:78:4d:d4:d4:7b:a9:2c:71:e4:2b:a2:ab:81:
1a:d5:f1:1f:34:d3:77:2b:af:c8:27:da:be:04:91:3d:80:c6:
d4:ed:4c:ab:aa:8b:2f:3d:d8:67:4b:7e:ef:15:e3:45:f4:bc:
dc:b9:39:cf:1b:9c:89:7b:d5:b3:26:50:90:91:1c:e1:a0:d4:
42:4d:2d:a9:2e:c8:6d:b7:9d:42:40:7a:66:b4:5e:5f:f6:74:
1f:1a:48:41:e6:54:3c:f0:43:61:ce:95:5c:cc:db:1e:49:12:
c6:31:ac:cd:e5:ce:79:7e:78:9c:50:7b:fb:39:6c:a5:0a:6b:
2f:48:22:dd:1f:1d:4b:20:df:c6:85:c8:7e:60:9e:5b:c2:65:
a0:da:fb:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKgcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMDkxMTI5WhcNMjQwNTExMDkxMTI5WjAYMRYw
FAYDVQQDEw02NjBhN2E0Ni02ZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuB9slLv/wM9vr3NXO6tc1w7k6hbvjUy5jfOH9dunnnFrSWThy9hkuvLZ
nb2shUfZLoWpeaYTW8TWPDBQYOVtxb8CP1WCA8NRLJx1cHvyc07hPyb1lpXR70G0
fwK+LvgvGNxNzcEN8yF/SHU0G8VenNS4swrAOUvdEzR0hJfaaW1O3eLhtCMynPqn
2NSIJLy5v2hWHSyLol7NDaNlfpF4cFGypWfJnoeUANCOWsRP2czPsHOaPWyGp/sK
INo/PjMnsnvyTPt67l5Oo3mgS15O52musMnFpZ58JWmPzBQd/8sma4WCOvFclnXe
A/mx7Hh9SXWLdeTHw0WSUNSbo/70jwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHEU
nB04FyZsK4hVdf2sIdbjVRw+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENTY5NEQ4NkYwMDcxMUVFOTkyMzJCQzY3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2dMA0GCSqGSIb3DQEB
CwUAA4IBAQCVuY4t338l/yXoI2CpbjONTmww5hynJ5CBsWzpHTOy5VrQK22JCyUs
7bXoZ0/FqIkV3ApCO3pyDgxBneXFFgHDnYK/unATza0r5tUW3j6stSz2rouPGvAq
TsUchJW/rMSb6Cj01ImbUEgHROUjrJgLWXhN1NR7qSxx5Cuiq4Ea1fEfNNN3K6/I
J9q+BJE9gMbU7UyrqosvPdhnS37vFeNF9LzcuTnPG5yJe9WzJlCQkRzhoNRCTS2p
Lshtt51CQHpmtF5f9nQfGkhB5lQ88ENhzpVczNseSRLGMazN5c55fnicUHv7OWyl
CmsvSCLdHx1LIN/Ghch+YJ5bwmWg2vus
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org