Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F40049E4150011EE8819462B4AD9E6FC.roa
File: F40049E4150011EE8819462B4AD9E6FC.roa (raw, json)
Hash identifier: +L5sF4ae8j8hoIX0OSo1vHUqAEbZlWFvaIuv9gtnEjg=
Subject key identifier: 5B:0A:28:4F:9E:7B:47:3E:14:DE:80:6F:24:52:0C:92:F3:E8:25:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2E14
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F40049E4150011EE8819462B4AD9E6FC.roa
Signing time: Tue 27 Jun 2023 15:40:33 +0000
ROA not before: Tue 27 Jun 2023 15:40:30 +0000
ROA not after: Fri 07 Mar 2025 15:40:30 +0000
asID: 22411
IP address blocks: 154.212.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11796 (0x2e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 15:40:30 2023 GMT
Not After : Mar 7 15:40:30 2025 GMT
Subject: CN=649b02f1-d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:c3:4e:c0:64:c7:84:98:09:0f:26:98:aa:
79:c8:44:29:a9:4b:05:93:d6:da:45:41:2a:74:82:
19:84:c5:b8:44:5b:7d:f0:5a:e4:39:06:08:78:4d:
cb:4d:72:6c:07:40:b6:f9:74:bd:92:c5:ce:e6:61:
1c:00:fe:60:83:a5:d9:ae:7b:6e:b6:82:f6:bc:71:
dc:b1:77:6d:be:f2:67:38:c9:17:af:7d:5a:5e:af:
12:68:f3:a9:83:29:ac:6a:21:e7:fc:39:92:c8:e5:
2e:19:25:2d:4f:94:bf:d8:7d:a6:ed:cb:1e:54:24:
89:03:bf:04:8f:cc:77:ad:22:74:e7:d4:fb:f2:d9:
71:62:70:f9:c9:9f:7d:8b:7b:a7:78:d6:f4:83:ac:
9c:de:90:91:9a:89:94:6f:c5:67:c9:7e:37:11:67:
d6:c6:9d:01:61:1c:03:6c:e8:cc:41:c5:01:c2:bf:
73:37:25:a6:a2:b4:fe:84:a9:7f:4f:c9:91:30:e0:
8c:d7:91:d3:70:74:02:fe:3d:d6:79:38:2d:6a:aa:
05:f5:d3:49:62:0f:cf:0f:2a:16:69:01:e1:cf:72:
73:99:6d:61:68:20:9b:7d:c6:fd:c3:87:54:5a:bf:
e0:8c:b5:35:7f:b1:77:4b:d3:79:65:7b:e5:0e:db:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:28:4F:9E:7B:47:3E:14:DE:80:6F:24:52:0C:92:F3:E8:25:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F40049E4150011EE8819462B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:14:af:e3:63:61:b3:ab:64:15:18:02:72:d2:7d:ff:f8:2b:
c3:12:9f:f1:76:f6:7b:bb:9e:5a:4c:85:51:86:ee:63:72:bd:
01:36:c9:7a:a4:c7:0b:90:5d:48:b6:d0:9f:c3:ba:c0:67:eb:
b0:45:02:fa:f7:99:64:7f:9b:62:84:89:22:24:7b:a6:e8:65:
3e:1b:0c:b7:b3:cc:49:3e:af:99:d2:6f:74:fe:b6:04:0f:1b:
22:77:22:c9:de:a8:9d:ac:08:f3:d8:25:3e:64:bd:5c:4a:c0:
39:23:40:32:82:6d:7e:fb:69:f9:e3:9e:d3:85:b3:bc:fa:9d:
eb:98:bd:5c:96:eb:8b:26:97:03:02:91:11:0b:c8:b0:f8:ad:
a1:7b:de:a6:ea:1c:ec:a6:85:47:8f:6b:40:2a:d3:a9:28:c2:
7a:23:77:56:25:dc:68:ac:ad:f6:c4:68:9c:cf:6f:f2:fd:9c:
20:7b:df:e0:33:89:99:64:9d:1d:3b:77:ba:58:1a:6a:78:9e:
69:73:9b:cc:48:a9:1f:76:c6:fd:db:15:41:7b:68:2e:b3:78:
0d:9a:b5:96:ad:42:33:45:6d:e5:c1:b5:89:e0:25:ab:b7:2e:
8b:71:2a:2f:6b:3d:ed:3c:f8:70:9e:53:ef:8f:59:de:ee:ba:
18:14:46:b1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLhQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjcxNTQwMzBaFw0yNTAzMDcxNTQwMzBaMBgxFjAU
BgNVBAMTDTY0OWIwMmYxLWQwOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYcMNOwGTHhJgJDyaYqnnIRCmpSwWT1tpFQSp0ghmExbhEW33wWuQ5Bgh4
TctNcmwHQLb5dL2Sxc7mYRwA/mCDpdmue262gva8cdyxd22+8mc4yRevfVperxJo
86mDKaxqIef8OZLI5S4ZJS1PlL/Yfabtyx5UJIkDvwSPzHetInTn1Pvy2XFicPnJ
n32Le6d41vSDrJzekJGaiZRvxWfJfjcRZ9bGnQFhHANs6MxBxQHCv3M3JaaitP6E
qX9PyZEw4IzXkdNwdAL+PdZ5OC1qqgX100liD88PKhZpAeHPcnOZbWFoIJt9xv3D
h1Rav+CMtTV/sXdL03lle+UO2+mXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWwoo
T557Rz4U3oBvJFIMkvPoJQAwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0Y0MDA0OUU0MTUwMDExRUU4ODE5NDYyQjRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACa1I4wDQYJKoZIhvcNAQEL
BQADggEBALAUr+NjYbOrZBUYAnLSff/4K8MSn/F29nu7nlpMhVGG7mNyvQE2yXqk
xwuQXUi20J/DusBn67BFAvr3mWR/m2KEiSIke6boZT4bDLezzEk+r5nSb3T+tgQP
GyJ3IsneqJ2sCPPYJT5kvVxKwDkjQDKCbX77afnjntOFs7z6neuYvVyW64smlwMC
kRELyLD4raF73qbqHOymhUePa0Aq06kownojd1Yl3GisrfbEaJzPb/L9nCB73+Az
iZlknR07d7pYGmp4nmlzm8xIqR92xv3bFUF7aC6zeA2atZatQjNFbeXBtYngJau3
LotxKi9rPe08+HCeU++PWd7uuhgURrE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:14 2024 by rpki-client on console-ams.rpki-client.org