Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56E1932B34411EEA7E95B6B775412E6.roa
File: E56E1932B34411EEA7E95B6B775412E6.roa (raw, json)
Hash identifier: /ElFRvjqgcJsNnoeUIYXhmKajyEQCg6hinaSW9Tzncc=
Subject key identifier: 46:5D:03:CA:64:A1:33:42:7A:54:F1:86:28:C3:AB:0E:FC:8A:6F:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7528
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56E1932B34411EEA7E95B6B775412E6.roa
Signing time: Mon 15 Jan 2024 01:24:59 +0000
ROA not before: Mon 15 Jan 2024 01:24:55 +0000
ROA not after: Fri 13 Dec 2024 01:24:55 +0000
asID: 8796
IP address blocks: 154.205.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29992 (0x7528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:24:55 2024 GMT
Not After : Dec 13 01:24:55 2024 GMT
Subject: CN=65a4896a-fab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:33:1d:6d:8c:9b:0e:53:84:9d:00:cc:04:
7f:05:b8:4e:2f:c5:38:d2:9c:e7:e4:5a:46:5e:a7:
6b:92:da:e9:5f:8f:9f:78:01:34:83:1c:1c:28:70:
b9:9f:b7:71:b9:78:8a:ae:5b:29:c2:6d:af:e6:ac:
61:46:97:35:26:97:33:44:32:b6:a9:52:90:f0:b5:
81:7e:7a:0e:ac:48:76:8a:8b:b2:01:84:ab:91:6f:
89:8b:79:3b:11:d0:9c:0c:dd:f3:c2:33:e8:84:79:
e1:ef:31:c7:55:c1:7b:ea:4d:64:e7:1c:3e:93:91:
b0:1f:47:aa:c0:fa:68:3b:df:08:44:92:0f:51:68:
a3:d1:6c:46:aa:2f:ac:bd:bc:1c:2d:15:87:84:1e:
67:90:f5:cc:97:9c:64:ec:5c:24:41:23:eb:cf:c2:
61:fd:b2:a3:d0:bd:ee:3f:b7:40:5e:09:95:4e:3f:
7c:26:0c:1d:60:22:82:fe:24:41:1f:53:72:36:61:
c5:76:6e:36:57:76:d4:ad:a4:07:f4:40:2e:59:d9:
45:b8:66:37:f4:f3:ae:11:7e:a0:6e:ef:76:20:2b:
8b:4e:70:54:1c:98:45:35:f5:2a:a4:4a:e3:0d:d3:
be:51:e8:d8:d5:ec:96:5c:e2:3d:de:1e:fd:b7:9d:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5D:03:CA:64:A1:33:42:7A:54:F1:86:28:C3:AB:0E:FC:8A:6F:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E56E1932B34411EEA7E95B6B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.216.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8d:d9:a4:80:a5:14:06:21:a9:6c:c9:83:f6:6e:50:6d:8f:
a0:54:15:5c:8d:72:63:3c:8c:8b:fa:d0:01:a1:5f:e8:8e:ca:
ed:c9:21:a8:e9:6d:37:73:03:d9:bc:84:c5:b0:b5:d6:56:4f:
d4:5e:8b:af:fb:29:13:ff:91:ef:14:81:bf:9a:8c:98:dc:09:
fa:55:4d:1b:a0:4f:ee:fa:29:c8:fa:f8:f2:6a:33:42:6e:8e:
33:f5:58:4d:a0:a7:d5:89:80:0d:a6:04:00:43:56:37:53:6a:
ac:6b:f5:e8:16:33:dc:c7:87:aa:f1:5e:a4:58:9c:28:5e:9f:
ab:3d:35:2f:3f:f6:c8:c4:ba:a1:e8:ac:f7:85:c2:fd:fb:1e:
56:07:8c:47:12:79:6c:c0:2b:b1:1e:fd:4b:73:a7:7d:9d:86:
d7:c6:60:b1:f6:3c:d5:58:54:b4:ce:5a:68:22:59:b4:64:72:
6e:b9:23:4e:41:20:e4:5e:98:19:87:3e:5c:c2:31:cd:10:12:
e4:b0:4e:9a:56:3b:fd:f5:af:6b:00:a4:f8:a5:72:dd:5b:c8:
95:f6:f9:13:1f:a4:10:51:34:fc:1d:fa:80:cd:d1:d0:17:a9:
18:e9:8e:73:4e:68:0f:35:67:45:c1:d8:75:ab:c1:38:0a:85:
66:5f:19:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICdSgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMTUwMTI0NTVaFw0yNDEyMTMwMTI0NTVaMBgxFjAU
BgNVBAMTDTY1YTQ4OTZhLWZhYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC56zMdbYybDlOEnQDMBH8FuE4vxTjSnOfkWkZep2uS2ulfj594ATSDHBwo
cLmft3G5eIquWynCba/mrGFGlzUmlzNEMrapUpDwtYF+eg6sSHaKi7IBhKuRb4mL
eTsR0JwM3fPCM+iEeeHvMcdVwXvqTWTnHD6TkbAfR6rA+mg73whEkg9RaKPRbEaq
L6y9vBwtFYeEHmeQ9cyXnGTsXCRBI+vPwmH9sqPQve4/t0BeCZVOP3wmDB1gIoL+
JEEfU3I2YcV2bjZXdtStpAf0QC5Z2UW4Zjf0864RfqBu73YgK4tOcFQcmEU19Sqk
SuMN075R6NjV7JZc4j3eHv23nVUnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQURl0D
ymShM0J6VPGGKMOrDvyKb9wwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0U1NkUxOTMyQjM0NDExRUVBN0U5NUI2Qjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACazdgwDQYJKoZIhvcNAQEL
BQADggEBAH6N2aSApRQGIalsyYP2blBtj6BUFVyNcmM8jIv60AGhX+iOyu3JIajp
bTdzA9m8hMWwtdZWT9Rei6/7KRP/ke8Ugb+ajJjcCfpVTRugT+76Kcj6+PJqM0Ju
jjP1WE2gp9WJgA2mBABDVjdTaqxr9egWM9zHh6rxXqRYnChen6s9NS8/9sjEuqHo
rPeFwv37HlYHjEcSeWzAK7Ee/Utzp32dhtfGYLH2PNVYVLTOWmgiWbRkcm65I05B
IORemBmHPlzCMc0QEuSwTppWO/31r2sApPilct1byJX2+RMfpBBRNPwd+oDN0dAX
qRjpjnNOaA81Z0XB2HWrwTgKhWZfGRc=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:41 2024 by rpki-client on console-fra.rpki-client.org