Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1E0D98E75611EE9C5EF7C3775412E6.roa
File: DB1E0D98E75611EE9C5EF7C3775412E6.roa (raw, json)
Hash identifier: EOB2BPjy9hdP0HWdVxX+o8GJnLTulfaP0hDamTpqMR4=
Subject key identifier: 9E:9B:35:EA:7D:D8:DD:CC:C6:75:4C:BE:B7:2E:18:3D:E9:45:80:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1E0D98E75611EE9C5EF7C3775412E6.roa
Signing time: Thu 21 Mar 2024 07:44:32 +0000
ROA not before: Thu 21 Mar 2024 07:44:28 +0000
ROA not after: Tue 23 Apr 2024 07:44:28 +0000
asID: 44559
IP address blocks: 154.218.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42153 (0xa4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:44:28 2024 GMT
Not After : Apr 23 07:44:28 2024 GMT
Subject: CN=65fbe560-d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:29:fe:2b:0c:ec:bc:e3:92:24:e7:d5:f6:
b1:5a:2e:12:e9:d6:c0:61:57:3e:b1:e4:83:fb:62:
c4:8c:5b:b0:62:53:6a:fa:46:f0:b8:24:04:3a:c3:
cf:2f:44:28:95:50:81:05:47:4d:d7:37:9e:c1:12:
ec:8f:06:41:6c:d4:06:59:a1:b0:aa:cf:90:9a:73:
1a:f1:c6:a4:19:7d:b8:ea:93:10:d6:9c:d6:a7:63:
e0:94:63:1b:82:b7:02:68:52:47:da:03:a0:fc:32:
d9:53:c4:67:a4:f1:f7:6c:98:93:b2:91:55:8a:9f:
de:4b:47:5e:5a:48:78:b2:ae:f2:e3:96:1d:07:e2:
d5:c9:54:db:43:ea:cb:f5:fa:63:f4:29:f5:80:dd:
62:ba:52:ae:87:1d:33:ff:94:97:8b:91:83:d5:8d:
06:c4:fe:e4:ba:43:ea:d0:df:f6:75:d2:e0:ff:a8:
89:37:48:c4:45:f6:86:70:dc:20:7b:b8:3e:15:d4:
c1:c2:d7:f9:d9:65:c9:4e:2e:17:f2:3b:5e:c8:aa:
6d:5a:51:d8:f2:f8:07:0b:c2:d1:89:bb:fa:bb:01:
e4:0a:bf:2d:a8:f9:d4:71:d5:a1:98:fd:34:1f:9d:
b3:76:a4:66:9f:43:5f:31:9d:16:1a:f2:02:94:40:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:35:EA:7D:D8:DD:CC:C6:75:4C:BE:B7:2E:18:3D:E9:45:80:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1E0D98E75611EE9C5EF7C3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a7:d5:70:72:bc:63:b8:24:5b:c8:20:cf:ca:82:4a:37:51:
71:05:76:d2:c8:3b:0b:20:7e:8c:96:db:0d:eb:d5:29:31:79:
8f:9f:93:f0:30:48:5a:64:b8:e7:12:b0:ea:ac:08:99:f0:e1:
5c:0a:98:d4:97:ad:2b:81:0f:f6:c6:d5:b1:d2:57:9f:f2:b2:
e6:9d:e7:e9:b1:8d:1e:17:8d:6c:fc:ac:0e:f7:47:34:3b:af:
54:cc:cb:cc:77:8e:97:2c:0c:41:cc:d6:be:5c:d2:5b:00:7e:
15:98:24:39:ba:89:c5:53:61:6d:56:db:08:e2:2b:05:38:98:
a2:21:85:a6:79:05:62:82:65:96:d7:a1:d9:7c:91:c4:01:d5:
72:9a:d2:7e:68:f9:e4:50:b4:04:a9:07:73:1d:e5:66:8e:9d:
b7:43:ab:4b:fd:18:d4:98:c0:0e:86:0e:e1:14:59:84:e3:9f:
fb:e1:02:0c:50:f7:ca:bb:e1:f6:a3:bf:1d:46:63:da:4a:80:
61:10:07:e3:eb:62:a7:6d:63:92:a4:41:df:e2:64:0c:70:f7:
42:b3:de:c2:de:b3:8c:62:ae:41:f5:b5:e6:5e:bc:0a:93:03:
ac:f4:8e:ac:80:66:79:f3:42:e5:bf:21:f3:1b:70:2c:29:d5:
d2:4c:8d:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKSpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDc0NDI4WhcNMjQwNDIzMDc0NDI4WjAYMRYw
FAYDVQQDEw02NWZiZTU2MC1kNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Xsp/isM7LzjkiTn1faxWi4S6dbAYVc+seSD+2LEjFuwYlNq+kbwuCQE
OsPPL0QolVCBBUdN1zeewRLsjwZBbNQGWaGwqs+QmnMa8cakGX246pMQ1pzWp2Pg
lGMbgrcCaFJH2gOg/DLZU8RnpPH3bJiTspFVip/eS0deWkh4sq7y45YdB+LVyVTb
Q+rL9fpj9Cn1gN1iulKuhx0z/5SXi5GD1Y0GxP7kukPq0N/2ddLg/6iJN0jERfaG
cNwge7g+FdTBwtf52WXJTi4X8jteyKptWlHY8vgHC8LRibv6uwHkCr8tqPnUcdWh
mP00H52zdqRmn0NfMZ0WGvIClEA6ZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJ6b
Nep92N3MxnVMvrcuGD3pRYACMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjFFMEQ5OEU3NTYxMUVFOUM1RUY3QzM3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtokMA0GCSqGSIb3DQEB
CwUAA4IBAQAtp9VwcrxjuCRbyCDPyoJKN1FxBXbSyDsLIH6MltsN69UpMXmPn5Pw
MEhaZLjnErDqrAiZ8OFcCpjUl60rgQ/2xtWx0lef8rLmnefpsY0eF41s/KwO90c0
O69UzMvMd46XLAxBzNa+XNJbAH4VmCQ5uonFU2FtVtsI4isFOJiiIYWmeQVigmWW
16HZfJHEAdVymtJ+aPnkULQEqQdzHeVmjp23Q6tL/RjUmMAOhg7hFFmE45/74QIM
UPfKu+H2o78dRmPaSoBhEAfj62KnbWOSpEHf4mQMcPdCs97C3rOMYq5B9bXmXrwK
kwOs9I6sgGZ580LlvyHzG3AsKdXSTI1M
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org