Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91812142B5911EE8B8F7D514AD9E6FC.roa
File: D91812142B5911EE8B8F7D514AD9E6FC.roa (raw, json)
Hash identifier: V/mIuH14gjzo2EK5WaZoHGrZiLwb4aQPMZ/QDkTEmK4=
Subject key identifier: 20:E0:57:FE:FB:47:13:05:27:B8:EC:55:B0:1D:3B:71:3F:29:E6:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3432
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91812142B5911EE8B8F7D514AD9E6FC.roa
Signing time: Wed 26 Jul 2023 02:12:19 +0000
ROA not before: Wed 26 Jul 2023 02:12:15 +0000
ROA not after: Fri 02 Aug 2024 02:12:15 +0000
asID: 9287
IP address blocks: 154.85.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13362 (0x3432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 02:12:15 2023 GMT
Not After : Aug 2 02:12:15 2024 GMT
Subject: CN=64c08103-7a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:73:f7:e6:17:c0:6a:c4:62:59:58:d8:d9:
5d:3f:8d:ad:c5:65:07:9f:e3:72:78:42:76:08:07:
a9:3d:1a:aa:ca:9f:44:0d:b9:b0:50:4d:3e:31:f0:
78:46:35:92:57:d4:e6:2a:9a:b1:2d:bd:df:96:ab:
98:50:0a:4a:c5:d1:0e:4d:e6:ae:27:21:a5:a3:24:
b0:57:14:4c:e6:8c:02:8f:b2:fc:64:5a:d6:df:e2:
a3:ab:86:a3:4a:61:cf:31:de:f4:29:fa:a8:3a:53:
a1:7d:ab:26:de:9f:f6:16:c9:1f:e5:8b:57:79:e0:
86:fd:31:3d:97:59:ae:43:17:c2:ee:f5:b1:03:54:
f6:4c:21:f7:4e:c8:6c:c8:25:38:25:fc:ae:b2:4e:
c6:b9:ca:62:cb:ec:46:44:29:7e:ec:c7:8f:7f:2f:
7e:81:9c:74:89:38:32:87:76:a1:04:ee:54:e3:5d:
65:2b:cf:ac:be:18:fc:ad:b1:25:e0:b5:d6:a3:55:
0b:9b:5d:8f:f9:ba:e3:22:47:65:ce:67:d4:5d:56:
e7:31:c0:6b:b8:04:01:be:a7:cc:76:a7:ad:d3:1f:
c3:e5:9b:92:81:fb:59:98:43:97:ee:d9:cd:93:a2:
91:90:ae:9e:f2:36:b4:90:18:d2:be:b4:dc:ec:cd:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E0:57:FE:FB:47:13:05:27:B8:EC:55:B0:1D:3B:71:3F:29:E6:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D91812142B5911EE8B8F7D514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.96.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b7:24:dd:18:dc:aa:a1:26:39:fe:3f:fa:3e:53:01:1f:fe:
7b:be:11:fc:f0:10:93:31:b2:1b:a7:c6:af:9e:4b:66:f8:ae:
19:ba:be:3b:b6:9e:13:62:47:38:16:0c:6b:05:6a:2b:b0:3d:
b5:ea:81:f0:79:64:c1:9f:3a:6f:33:9a:94:b6:a2:70:16:74:
89:4b:a1:d9:95:5d:95:3b:66:3f:79:9a:5f:71:57:43:6e:13:
33:96:bc:d9:bc:13:c6:cc:80:40:fa:a7:db:f9:3a:b0:d7:fa:
cb:d0:76:49:c0:04:c6:c8:35:05:ed:24:c6:20:80:47:76:48:
71:52:ff:eb:1d:98:5f:e1:5d:ea:c3:f6:b4:0e:68:8a:20:4c:
c8:e7:e1:b1:8c:65:7a:bd:2b:c6:4c:20:a5:5d:b8:67:30:72:
93:19:04:e6:6f:80:18:58:3a:68:d6:98:64:6c:6e:98:3c:dd:
1a:ee:28:dc:8c:86:8b:89:05:08:fa:0f:de:22:03:ab:78:bf:
32:c4:30:01:f3:bd:45:c2:e1:2f:9b:c8:b0:b1:9f:df:99:7f:
ec:9e:c4:2c:34:8c:cd:8a:07:c8:58:a5:6d:10:58:d8:08:c3:
65:fd:c8:42:74:f7:05:1b:89:2a:a7:76:f1:51:2b:01:c0:91:
36:19:ab:7e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICNDIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA3MjYwMjEyMTVaFw0yNDA4MDIwMjEyMTVaMBgxFjAU
BgNVBAMTDTY0YzA4MTAzLTdhMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrunP35hfAasRiWVjY2V0/ja3FZQef43J4QnYIB6k9GqrKn0QNubBQTT4x
8HhGNZJX1OYqmrEtvd+Wq5hQCkrF0Q5N5q4nIaWjJLBXFEzmjAKPsvxkWtbf4qOr
hqNKYc8x3vQp+qg6U6F9qyben/YWyR/li1d54Ib9MT2XWa5DF8Lu9bEDVPZMIfdO
yGzIJTgl/K6yTsa5ymLL7EZEKX7sx49/L36BnHSJODKHdqEE7lTjXWUrz6y+GPyt
sSXgtdajVQubXY/5uuMiR2XOZ9RdVucxwGu4BAG+p8x2p63TH8Plm5KB+1mYQ5fu
2c2TopGQrp7yNrSQGNK+tNzszdGrAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUIOBX
/vtHEwUnuOxVsB07cT8p5rUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Q5MTgxMjE0MkI1OTExRUU4QjhGN0Q1MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVWAwDQYJKoZIhvcNAQEL
BQADggEBABa3JN0Y3KqhJjn+P/o+UwEf/nu+EfzwEJMxshunxq+eS2b4rhm6vju2
nhNiRzgWDGsFaiuwPbXqgfB5ZMGfOm8zmpS2onAWdIlLodmVXZU7Zj95ml9xV0Nu
EzOWvNm8E8bMgED6p9v5OrDX+svQdknABMbINQXtJMYggEd2SHFS/+sdmF/hXerD
9rQOaIogTMjn4bGMZXq9K8ZMIKVduGcwcpMZBOZvgBhYOmjWmGRsbpg83RruKNyM
houJBQj6D94iA6t4vzLEMAHzvUXC4S+byLCxn9+Zf+yexCw0jM2KB8hYpW0QWNgI
w2X9yEJ09wUbiSqndvFRKwHAkTYZq34=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org