Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61BF57EF00E11EEB55E867D775412E6.roa
File: D61BF57EF00E11EEB55E867D775412E6.roa (raw, json)
Hash identifier: gx7k4yeYXBSmZb4rhB8UdOf8JGNWW8kKqrSNsAYncpA=
Subject key identifier: 43:A5:3A:A9:C5:46:0B:30:34:EA:EB:BB:9B:D9:6B:89:9F:C7:7D:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A86E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61BF57EF00E11EEB55E867D775412E6.roa
Signing time: Mon 01 Apr 2024 10:01:41 +0000
ROA not before: Mon 01 Apr 2024 10:01:37 +0000
ROA not after: Sat 11 May 2024 10:01:37 +0000
asID: 63139
IP address blocks: 154.203.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43118 (0xa86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:01:37 2024 GMT
Not After : May 11 10:01:37 2024 GMT
Subject: CN=660a8605-fc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:00:c7:61:67:4d:9e:65:58:b6:ea:e6:51:
0f:55:82:78:72:1e:f0:e9:14:3b:54:36:46:ef:78:
e1:64:e0:d5:24:7f:1c:02:9c:47:f3:00:31:f3:57:
46:90:7f:db:7f:9a:08:6e:a9:bf:b8:6e:bf:9c:e4:
e5:bd:9a:6f:2b:b8:fc:d9:3e:59:35:2d:9f:4e:6c:
17:d2:61:3c:5a:3b:75:50:4d:f6:6a:ba:6e:e0:b2:
c2:52:55:e7:44:45:53:9f:1e:ee:9e:43:7a:b4:79:
91:bb:e4:bd:98:17:15:db:58:96:a8:41:89:c7:11:
63:52:b7:0e:0b:43:82:8d:e3:69:9a:46:1a:f7:03:
ff:6c:3b:3d:3f:75:dd:dd:fc:75:51:12:42:70:82:
4f:20:0c:51:af:e3:c2:03:40:31:0c:92:4a:7d:b8:
38:e8:fa:2c:5a:8f:ba:f2:8b:88:0f:04:1b:68:d3:
f5:69:cd:0d:b6:4c:39:46:e6:29:81:7f:c8:bb:00:
02:ea:cb:bc:d3:c7:f5:cd:1a:02:3e:a3:37:c8:98:
ba:ed:9a:36:2e:71:da:88:d8:10:8a:40:ba:9d:95:
a1:08:ce:3f:3d:f3:8c:00:18:b8:81:7c:40:81:9e:
88:b2:5f:4b:3a:fb:11:8a:e6:d5:c3:21:8b:70:ab:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:3A:A9:C5:46:0B:30:34:EA:EB:BB:9B:D9:6B:89:9F:C7:7D:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61BF57EF00E11EEB55E867D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.176.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2b:00:ee:82:1b:27:fe:e2:fb:c1:7b:9c:62:6c:bf:f8:d8:
e0:71:f8:a6:38:74:5a:43:a5:b6:26:10:d7:3d:81:46:24:ef:
4f:6b:44:c3:90:59:67:ba:8f:70:a2:6f:ca:8b:b0:d4:af:25:
c7:30:63:44:63:56:31:7a:e3:a9:81:c4:d7:a4:80:b8:00:45:
8b:26:f7:6f:22:ec:9a:c7:12:ac:59:b2:2d:34:20:cd:cb:fe:
d3:0a:72:cd:5f:ff:6a:2a:04:1a:65:89:f3:5f:08:b4:dc:e7:
79:e7:da:10:08:57:5e:f0:f1:51:24:15:83:7d:c7:88:82:dd:
11:6e:d6:a7:43:2a:90:c1:30:5a:4a:9e:55:51:83:e8:41:38:
5d:8d:f4:66:dc:74:d5:ea:5f:15:57:b0:73:f0:21:93:69:b6:
f4:44:c3:c6:76:18:c1:97:68:c3:65:6a:78:d3:89:55:24:2b:
34:e8:30:b1:6d:8f:fb:83:c5:47:3e:a7:a9:bb:7e:4d:79:50:
1a:39:01:3c:15:67:8e:20:79:49:38:69:fe:ec:2d:1d:4e:32:
e7:5d:3c:26:aa:18:93:07:ac:87:2e:4d:52:6b:42:1e:32:99:
55:51:75:57:60:b5:14:c4:bb:cb:dc:0e:d6:b5:f6:01:af:09:
2e:d7:6d:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKhuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDAxMTAwMTM3WhcNMjQwNTExMTAwMTM3WjAYMRYw
FAYDVQQDEw02NjBhODYwNS1mYzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0xoAx2FnTZ5lWLbq5lEPVYJ4ch7w6RQ7VDZG73jhZODVJH8cApxH8wAx
81dGkH/bf5oIbqm/uG6/nOTlvZpvK7j82T5ZNS2fTmwX0mE8Wjt1UE32arpu4LLC
UlXnREVTnx7unkN6tHmRu+S9mBcV21iWqEGJxxFjUrcOC0OCjeNpmkYa9wP/bDs9
P3Xd3fx1URJCcIJPIAxRr+PCA0AxDJJKfbg46PosWo+68ouIDwQbaNP1ac0Ntkw5
RuYpgX/IuwAC6su808f1zRoCPqM3yJi67Zo2LnHaiNgQikC6nZWhCM4/PfOMABi4
gXxAgZ6Isl9LOvsRiubVwyGLcKuwawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEOl
OqnFRgswNOrru5vZa4mfx30lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjFCRjU3RUYwMEUxMUVFQjU1RTg2N0Q3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsuwMA0GCSqGSIb3DQEB
CwUAA4IBAQBZKwDughsn/uL7wXucYmy/+NjgcfimOHRaQ6W2JhDXPYFGJO9Pa0TD
kFlnuo9wom/Ki7DUryXHMGNEY1YxeuOpgcTXpIC4AEWLJvdvIuyaxxKsWbItNCDN
y/7TCnLNX/9qKgQaZYnzXwi03Od559oQCFde8PFRJBWDfceIgt0RbtanQyqQwTBa
Sp5VUYPoQThdjfRm3HTV6l8VV7Bz8CGTabb0RMPGdhjBl2jDZWp404lVJCs06DCx
bY/7g8VHPqepu35NeVAaOQE8FWeOIHlJOGn+7C0dTjLnXTwmqhiTB6yHLk1Sa0Ie
MplVUXVXYLUUxLvL3A7WtfYBrwku120m
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org