Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E987E60AAE1D11EE8A851E9F775412E6.roa
File: E987E60AAE1D11EE8A851E9F775412E6.roa (raw, json)
Hash identifier: YgedXdrZzLKJ/Phgeg83fTJikB2ERQZLX6EVWjcieek=
Subject key identifier: 39:3C:D7:4E:0C:92:E5:B0:A4:EF:74:3E:CE:E7:A1:8F:11:2E:5A:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E987E60AAE1D11EE8A851E9F775412E6.roa
Signing time: Mon 08 Jan 2024 12:03:19 +0000
ROA not before: Mon 08 Jan 2024 12:03:15 +0000
ROA not after: Tue 14 Jan 2025 12:03:15 +0000
asID: 138965
IP address blocks: 154.222.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29374 (0x72be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:03:15 2024 GMT
Not After : Jan 14 12:03:15 2025 GMT
Subject: CN=659be487-7f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:af:ad:2d:67:0b:45:20:ca:26:0d:2a:fe:
bd:5d:a0:63:8d:38:c0:2b:49:d0:4b:97:f2:61:8b:
56:98:ac:38:80:38:92:4c:e8:13:a6:49:e3:e4:ec:
ee:5c:f5:87:7a:ec:6a:6e:d1:49:eb:23:ff:e4:4c:
32:6c:3e:10:f8:c5:5a:7d:0d:d1:42:b5:a9:8c:7c:
67:2a:80:62:b5:5e:27:d3:23:de:41:91:d0:30:60:
d0:35:2f:a0:b5:4a:62:c4:06:14:3b:b7:fc:3e:56:
f5:a4:c0:c8:f5:06:ba:0a:ac:04:4d:11:da:69:12:
eb:0d:c0:a7:b9:59:64:63:21:3c:3d:fe:d0:96:f2:
50:98:09:a5:e9:21:4a:20:ff:ae:68:7c:9c:58:6b:
69:69:ee:43:4a:bf:64:be:9b:57:e3:3c:3f:a5:cf:
31:39:23:20:5a:b4:67:80:23:0f:3c:36:09:f2:f1:
e6:01:b5:d8:ca:4b:f7:6d:1f:44:2f:2a:ab:fa:9e:
35:d4:c7:56:10:18:58:f1:79:1a:25:3e:2c:7c:1f:
57:31:1f:e2:e8:ab:0e:dc:4c:24:9d:ad:2f:f7:cb:
79:60:64:b2:f6:72:c3:fe:fc:97:08:49:0c:30:e3:
6b:4b:48:fe:52:18:e6:03:ea:d7:56:f2:52:e9:52:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3C:D7:4E:0C:92:E5:B0:A4:EF:74:3E:CE:E7:A1:8F:11:2E:5A:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E987E60AAE1D11EE8A851E9F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.60.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c5:08:f7:2b:89:9a:78:ff:41:a6:e9:55:04:2b:15:84:5c:
39:2b:cb:f0:51:3d:27:84:67:c9:e0:78:63:01:2e:b8:f4:15:
5e:2c:96:25:41:a9:85:8d:4f:70:9b:51:8f:77:6c:31:d8:e0:
85:f9:4a:b7:a4:69:90:21:07:cf:50:74:df:fd:81:68:60:00:
da:65:9b:96:7d:6d:7c:15:61:51:78:6f:48:c1:51:39:7a:e5:
89:82:44:be:02:d7:f1:83:3f:df:26:fb:f3:22:25:8c:2d:5d:
8c:b8:12:86:62:d2:d0:a3:73:59:3f:29:58:48:d6:a3:67:cb:
76:a7:29:55:9a:d1:ac:44:28:d9:52:95:f9:50:04:77:e9:e5:
2c:0f:11:d9:32:b5:78:08:66:f0:70:c6:82:d3:6e:df:e3:90:
d3:b1:f4:74:c8:9c:47:8b:f7:54:93:6f:d3:57:74:a9:4e:ba:
54:b0:20:e8:93:46:d7:d4:fe:1f:84:40:85:b0:ab:d9:e0:76:
c6:56:d5:5c:4f:a9:9e:5f:a7:0c:ec:96:32:01:54:b1:6e:bb:
58:52:65:b6:f0:c9:d7:a8:6c:3c:19:50:be:d3:c9:c6:9f:58:
19:fe:dd:fe:64:84:39:04:cf:dd:76:1d:f3:96:35:9d:48:0b:
84:75:d0:c9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICcr4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yNDAxMDgxMjAzMTVaFw0yNTAxMTQxMjAzMTVaMBgxFjAU
BgNVBAMTDTY1OWJlNDg3LTdmNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZ96+tLWcLRSDKJg0q/r1doGONOMArSdBLl/Jhi1aYrDiAOJJM6BOmSePk
7O5c9Yd67Gpu0UnrI//kTDJsPhD4xVp9DdFCtamMfGcqgGK1XifTI95BkdAwYNA1
L6C1SmLEBhQ7t/w+VvWkwMj1BroKrARNEdppEusNwKe5WWRjITw9/tCW8lCYCaXp
IUog/65ofJxYa2lp7kNKv2S+m1fjPD+lzzE5IyBatGeAIw88Ngny8eYBtdjKS/dt
H0QvKqv6njXUx1YQGFjxeRolPix8H1cxH+Loqw7cTCSdrS/3y3lgZLL2csP+/JcI
SQww42tLSP5SGOYD6tdW8lLpUjvvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUOTzX
TgyS5bCk73Q+zuehjxEuWrAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0U5ODdFNjBBQUUxRDExRUU4QTg1MUU5Rjc3NTQxMkU2LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa3jwwDQYJKoZIhvcNAQEL
BQADggEBAADFCPcriZp4/0Gm6VUEKxWEXDkry/BRPSeEZ8ngeGMBLrj0FV4sliVB
qYWNT3CbUY93bDHY4IX5SrekaZAhB89QdN/9gWhgANplm5Z9bXwVYVF4b0jBUTl6
5YmCRL4C1/GDP98m+/MiJYwtXYy4EoZi0tCjc1k/KVhI1qNny3anKVWa0axEKNlS
lflQBHfp5SwPEdkytXgIZvBwxoLTbt/jkNOx9HTInEeL91STb9NXdKlOulSwIOiT
RtfU/h+EQIWwq9ngdsZW1VxPqZ5fpwzsljIBVLFuu1hSZbbwydeobDwZUL7Tycaf
WBn+3f5khDkEz912HfOWNZ1IC4R10Mk=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org