Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E438F68E278211EEA2FD33204AD9E6FC.roa
File: E438F68E278211EEA2FD33204AD9E6FC.roa (raw, json)
Hash identifier: vHbaU2wVNbXnij1Jd8VoQIYanATy289GKM0odokLgw8=
Subject key identifier: 25:C5:20:84:C3:C1:7E:31:71:2D:23:9E:77:F2:B2:72:17:C8:E3:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 33A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E438F68E278211EEA2FD33204AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:56:02 +0000
ROA not before: Fri 21 Jul 2023 04:55:59 +0000
ROA not after: Thu 13 Jun 2024 04:55:59 +0000
asID: 5065
IP address blocks: 154.85.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13223 (0x33a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:55:59 2023 GMT
Not After : Jun 13 04:55:59 2024 GMT
Subject: CN=64ba0fe2-65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:e1:d5:0e:5a:5b:55:a1:1f:ee:a1:d6:e2:
96:55:a5:4b:1c:26:0b:ac:73:e5:50:3f:e4:a1:d8:
37:76:10:c1:2e:41:11:a0:33:77:99:44:19:8a:71:
c2:c6:bc:e8:55:d9:a2:09:e7:4c:1b:5c:fb:69:0c:
01:eb:f0:37:31:ac:55:08:b0:df:13:6c:1e:db:1e:
8d:88:aa:78:16:b7:f2:27:09:7d:84:5e:65:ba:84:
3f:e5:10:6e:44:4e:28:20:38:3b:9c:e8:e7:cc:4c:
34:33:14:23:cd:40:b1:9c:6f:0f:31:1d:ae:5f:f1:
3c:ba:cf:01:be:6e:e3:db:f8:39:44:90:92:20:19:
57:14:68:5f:4a:09:14:1f:7f:a6:d9:ae:57:46:86:
f0:1e:aa:e6:43:9b:8d:b0:7f:29:6e:d1:13:2e:53:
96:91:89:70:83:4e:82:2c:47:ac:35:9f:68:ad:0f:
6b:1f:d6:ec:af:8d:7f:4d:79:94:a5:db:19:7a:6e:
ce:d1:90:80:96:70:d8:07:cb:e1:cf:43:d9:79:4c:
34:6f:89:09:b2:7e:4e:94:6a:81:e3:03:e6:14:00:
eb:45:63:fb:b8:8e:83:49:c3:25:06:2c:51:4f:cc:
7d:31:82:47:98:60:b5:5b:91:be:c2:92:ae:0b:6c:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:20:84:C3:C1:7E:31:71:2D:23:9E:77:F2:B2:72:17:C8:E3:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E438F68E278211EEA2FD33204AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:73:2c:4d:76:6e:a7:7b:64:1a:e2:a1:58:92:4c:c8:c3:84:
9a:76:15:76:28:f9:b6:06:03:05:2f:a0:4b:6d:b3:ab:26:ee:
4d:5e:b4:7b:16:76:a8:5b:fa:76:08:be:17:07:93:bd:f2:54:
1f:8f:4c:5c:94:09:1a:9e:1e:a7:1b:93:c5:02:19:12:0e:57:
72:04:41:29:2d:24:9e:c5:03:8f:16:32:c5:23:fd:62:0b:1e:
30:8c:92:04:df:92:ab:27:e9:6c:df:40:61:57:1b:37:82:8a:
bf:e3:16:33:cb:a1:f2:0c:53:13:b0:55:2a:6c:f1:c3:db:44:
7a:bc:8b:e1:03:5c:a3:36:b0:c4:1e:fe:d4:79:6f:ad:e7:3d:
93:2e:9d:a7:1b:9d:2c:e7:ee:e4:da:80:5a:55:93:13:9b:10:
c0:66:03:b3:ef:cd:20:f7:af:84:d4:54:6e:7d:fb:33:2e:7c:
e1:f6:dc:2a:86:eb:c8:53:24:5b:35:0e:85:8f:84:53:e8:2c:
99:12:df:66:e7:10:98:7f:47:db:d5:f9:2f:c1:ab:f5:b7:62:
d7:7f:93:9d:ed:de:10:3d:be:86:e5:fc:f1:ac:b8:66:51:99:
82:61:62:e3:b3:63:8c:45:b1:75:95:3a:23:32:3e:38:26:ae:
07:5b:34:f9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICM6cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA3MjEwNDU1NTlaFw0yNDA2MTMwNDU1NTlaMBgxFjAU
BgNVBAMTDTY0YmEwZmUyLTY1YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1NeHVDlpbVaEf7qHW4pZVpUscJgusc+VQP+Sh2Dd2EMEuQRGgM3eZRBmK
ccLGvOhV2aIJ50wbXPtpDAHr8DcxrFUIsN8TbB7bHo2IqngWt/InCX2EXmW6hD/l
EG5ETiggODuc6OfMTDQzFCPNQLGcbw8xHa5f8Ty6zwG+buPb+DlEkJIgGVcUaF9K
CRQff6bZrldGhvAequZDm42wfylu0RMuU5aRiXCDToIsR6w1n2itD2sf1uyvjX9N
eZSl2xl6bs7RkICWcNgHy+HPQ9l5TDRviQmyfk6UaoHjA+YUAOtFY/u4joNJwyUG
LFFPzH0xgkeYYLVbkb7Ckq4LbAfBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUJcUg
hMPBfjFxLSOed/KychfI414wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0U0MzhGNjhFMjc4MjExRUVBMkZEMzMyMDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaVXswDQYJKoZIhvcNAQEL
BQADggEBAD5zLE12bqd7ZBrioViSTMjDhJp2FXYo+bYGAwUvoEtts6sm7k1etHsW
dqhb+nYIvhcHk73yVB+PTFyUCRqeHqcbk8UCGRIOV3IEQSktJJ7FA48WMsUj/WIL
HjCMkgTfkqsn6WzfQGFXGzeCir/jFjPLofIMUxOwVSps8cPbRHq8i+EDXKM2sMQe
/tR5b63nPZMunacbnSzn7uTagFpVkxObEMBmA7PvzSD3r4TUVG59+zMufOH23CqG
68hTJFs1DoWPhFPoLJkS32bnEJh/R9vV+S/Bq/W3Ytd/k53t3hA9vobl/PGsuGZR
mYJhYuOzY4xFsXWVOiMyPjgmrgdbNPk=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org