Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA211ED4A63911EEA7FAAEB2775412E6.roa
File: DA211ED4A63911EEA7FAAEB2775412E6.roa (raw, json)
Hash identifier: 5yd7tOsSwM/CEPVKpflssWOITUn0yYE+LRW0ZOJvHDA=
Subject key identifier: AC:6A:90:5C:40:FB:01:C8:CE:3E:92:EA:D3:56:A4:B9:FC:2B:65:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6AE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA211ED4A63911EEA7FAAEB2775412E6.roa
Signing time: Fri 29 Dec 2023 11:03:10 +0000
ROA not before: Fri 29 Dec 2023 11:03:06 +0000
ROA not after: Wed 01 Jan 2025 11:03:06 +0000
asID: 140883
IP address blocks: 154.201.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27365 (0x6ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 11:03:06 2023 GMT
Not After : Jan 1 11:03:06 2025 GMT
Subject: CN=658ea76e-5a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:5c:44:6e:f5:d6:d8:34:37:32:f8:7f:10:
f8:5a:6e:eb:3e:f1:97:c2:aa:2f:06:17:56:1f:32:
31:34:1c:76:9d:cd:f6:46:8b:5a:76:a0:a2:1c:19:
64:8e:35:e7:57:f0:45:25:b9:ef:ce:bf:15:fb:e2:
6f:84:28:95:df:f6:ec:6a:df:4c:2e:9b:5b:67:d5:
4c:0d:f9:9a:89:da:c3:2a:c3:99:b3:21:23:25:2e:
6a:e4:a3:61:65:73:4d:64:55:ff:de:09:36:7f:2e:
8d:f5:46:b9:cf:77:05:71:1b:a1:93:e9:fd:eb:17:
0d:5f:ff:91:46:74:b4:28:89:7e:1c:92:0b:d5:df:
d2:7b:d3:7c:b9:f9:b3:9f:0a:32:13:08:1b:c4:69:
ca:57:01:5a:af:99:b3:df:b1:67:a9:c8:24:63:10:
2c:ec:90:5e:b4:cc:1f:85:60:51:1e:a0:99:52:af:
81:49:34:73:5f:24:17:d0:8d:f3:40:29:5d:89:58:
11:db:07:9b:43:89:bc:c4:d0:f3:26:b1:e3:64:1f:
15:86:ec:32:7a:9d:32:7a:d5:3c:24:d0:32:86:a8:
be:e7:c2:e1:34:50:b6:c0:5d:f2:a6:2f:fd:eb:c8:
74:10:c8:8c:a9:98:48:c1:db:c6:de:c7:80:79:18:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:90:5C:40:FB:01:C8:CE:3E:92:EA:D3:56:A4:B9:FC:2B:65:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA211ED4A63911EEA7FAAEB2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:69:17:f9:7f:fe:97:8a:fc:27:d1:77:99:d0:8f:2d:dd:86:
72:61:ca:42:36:42:b2:06:4e:a4:53:31:e6:89:a0:23:24:31:
73:f8:68:84:3b:2d:ea:a8:f3:38:1f:e9:5b:fa:34:54:dd:b7:
88:ab:40:e7:68:23:b2:07:7a:81:e4:9b:04:69:0a:d5:57:51:
7d:96:ce:df:54:bf:82:8d:d9:ab:11:b8:8b:74:ed:7d:40:ae:
3f:88:5b:b0:2a:dc:ca:0c:3b:8c:82:3e:ad:ff:30:91:e4:17:
7d:71:5b:7d:fe:58:12:ca:01:5d:fb:05:3a:5d:e0:3e:77:08:
74:69:60:84:11:fd:1f:2d:c2:19:98:5c:96:8e:c0:9b:2f:5d:
ef:22:c8:e2:72:72:06:bb:af:dc:ad:25:34:65:8f:0c:3f:49:
9f:c9:52:95:bd:56:92:a3:3a:20:ad:d4:0f:bd:66:5c:a7:90:
79:f4:83:75:ec:06:37:fa:a3:76:fe:57:57:79:e6:fb:29:5c:
f1:2d:4b:c1:27:b0:6f:49:fc:ea:09:ac:5f:b8:f9:26:92:ae:
37:bd:30:30:2d:52:20:6b:1d:aa:1d:0d:b2:3d:a4:9c:a1:d6:
15:38:3f:94:6c:09:c6:22:cf:1e:f2:6c:f4:ff:bd:4b:a0:24:
4e:6c:05:f4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICauUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzEyMjkxMTAzMDZaFw0yNTAxMDExMTAzMDZaMBgxFjAU
BgNVBAMTDTY1OGVhNzZlLTVhMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYuFxEbvXW2DQ3Mvh/EPhabus+8ZfCqi8GF1YfMjE0HHadzfZGi1p2oKIc
GWSONedX8EUlue/OvxX74m+EKJXf9uxq30wum1tn1UwN+ZqJ2sMqw5mzISMlLmrk
o2Flc01kVf/eCTZ/Lo31RrnPdwVxG6GT6f3rFw1f/5FGdLQoiX4ckgvV39J703y5
+bOfCjITCBvEacpXAVqvmbPfsWepyCRjECzskF60zB+FYFEeoJlSr4FJNHNfJBfQ
jfNAKV2JWBHbB5tDibzE0PMmseNkHxWG7DJ6nTJ61Twk0DKGqL7nwuE0ULbAXfKm
L/3ryHQQyIypmEjB28bex4B5GDyvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrGqQ
XED7AcjOPpLq01akufwrZXswHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0RBMjExRUQ0QTYzOTExRUVBN0ZBQUVCMjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACayQUwDQYJKoZIhvcNAQEL
BQADggEBAKBpF/l//peK/CfRd5nQjy3dhnJhykI2QrIGTqRTMeaJoCMkMXP4aIQ7
Leqo8zgf6Vv6NFTdt4irQOdoI7IHeoHkmwRpCtVXUX2Wzt9Uv4KN2asRuIt07X1A
rj+IW7Aq3MoMO4yCPq3/MJHkF31xW33+WBLKAV37BTpd4D53CHRpYIQR/R8twhmY
XJaOwJsvXe8iyOJycga7r9ytJTRljww/SZ/JUpW9VpKjOiCt1A+9ZlynkHn0g3Xs
Bjf6o3b+V1d55vspXPEtS8EnsG9J/OoJrF+4+SaSrje9MDAtUiBrHaodDbI9pJyh
1hU4P5RsCcYizx7ybPT/vUugJE5sBfQ=
-----END CERTIFICATE-----
Generated at Thu May 2 04:04:11 2024 by rpki-client on console-fra.rpki-client.org