Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9824468E69111EEB81463B8775412E6.roa
File: F9824468E69111EEB81463B8775412E6.roa (raw, json)
Hash identifier: J8CjrvxDpWiEvKXKDQ2Yy2wLyagcsfJfU5CB7z4jAaY=
Subject key identifier: 24:BB:B0:0F:8B:D1:2E:80:79:02:31:F5:83:63:D3:0D:D0:04:BE:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A31D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9824468E69111EEB81463B8775412E6.roa
Signing time: Wed 20 Mar 2024 08:15:13 +0000
ROA not before: Wed 20 Mar 2024 08:15:09 +0000
ROA not after: Wed 18 Sep 2024 08:15:09 +0000
asID: 2914
IP address blocks: 154.214.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41757 (0xa31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 08:15:09 2024 GMT
Not After : Sep 18 08:15:09 2024 GMT
Subject: CN=65fa9b11-a79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:3d:61:51:12:a7:ba:60:cf:3d:47:86:de:
fd:44:ee:ac:11:8d:51:1e:4c:7a:dc:c6:eb:b1:26:
49:33:79:5d:a2:4e:55:79:3d:b2:b7:88:67:df:8b:
e0:72:40:4b:74:48:38:32:87:56:b6:f5:f5:bc:ec:
20:5f:6a:a2:d8:7f:82:22:64:b4:9d:c1:fe:8a:30:
0b:8b:92:58:28:01:cd:69:d6:6a:b6:79:af:22:60:
71:10:f8:b1:15:9e:75:0e:23:5e:6e:19:74:55:f6:
ce:56:27:c5:d5:9f:02:3a:c8:97:29:37:78:23:89:
b8:82:af:ed:c4:94:a4:15:83:63:ab:cb:5e:8b:03:
72:91:0a:d1:66:09:7e:6c:6d:55:63:d5:46:e4:4b:
01:ac:67:91:93:81:c2:b6:06:ea:99:bb:4b:e2:60:
55:80:10:2b:5f:26:c7:56:0d:73:0b:18:14:d9:ae:
db:e8:7b:5c:d2:a7:84:d0:59:04:0e:b7:07:a6:20:
ef:60:36:ab:04:47:23:6f:ce:9f:a3:03:98:cc:81:
0a:44:ee:d9:02:a8:a8:39:cb:52:2b:cf:d7:fb:4d:
6d:f5:cb:71:f6:6c:c5:20:0e:75:53:ce:9d:de:d7:
74:97:31:54:61:f9:30:0e:64:96:a6:0b:95:84:e5:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:B0:0F:8B:D1:2E:80:79:02:31:F5:83:63:D3:0D:D0:04:BE:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9824468E69111EEB81463B8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.196.0/24
Signature Algorithm: sha256WithRSAEncryption
53:78:89:68:8f:94:0b:49:28:9b:29:70:5e:a5:1b:25:e7:62:
2f:1b:d8:35:51:11:08:e4:6e:41:99:49:8f:40:dd:a5:9b:b6:
84:70:39:10:a6:0f:2c:e3:e2:3f:ec:08:66:30:19:94:59:c6:
98:b1:67:1f:5c:8e:0b:80:ce:2d:e8:20:6f:fc:63:3c:d5:64:
4a:c0:c3:ef:4f:85:50:75:90:38:ba:e7:1a:e4:1e:cb:03:9e:
38:18:72:c4:87:7d:f2:c4:ee:d6:16:cb:a0:63:3c:06:0c:f5:
24:25:9e:d2:8f:c3:09:42:6f:23:a0:cf:5d:1f:8f:cc:38:66:
39:2f:bc:b2:a1:ad:42:ab:c7:1b:c1:fa:b8:80:bf:a6:bb:c5:
10:49:e8:1a:dd:7d:09:53:50:99:e6:ae:74:3d:29:b3:ba:eb:
f8:87:9e:31:65:79:d1:a1:f7:c2:15:04:14:bc:f3:4f:68:bb:
42:4a:01:ab:eb:58:fc:29:a9:89:5e:0e:e8:3e:05:f4:c3:27:
f6:9d:08:10:07:60:38:37:d7:d4:ce:39:7f:51:dc:7f:0a:44:
d8:9e:69:a2:b1:14:de:ef:1f:5e:44:c4:29:e8:7a:19:f8:c0:
6c:ef:1f:84:f7:12:3f:37:bd:ac:0f:85:ca:fa:1e:da:84:b6:
51:4b:26:5a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKMdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIwMDgxNTA5WhcNMjQwOTE4MDgxNTA5WjAYMRYw
FAYDVQQDEw02NWZhOWIxMS1hNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5h09YVESp7pgzz1Hht79RO6sEY1RHkx63MbrsSZJM3ldok5VeT2yt4hn
34vgckBLdEg4ModWtvX1vOwgX2qi2H+CImS0ncH+ijALi5JYKAHNadZqtnmvImBx
EPixFZ51DiNebhl0VfbOVifF1Z8COsiXKTd4I4m4gq/txJSkFYNjq8teiwNykQrR
Zgl+bG1VY9VG5EsBrGeRk4HCtgbqmbtL4mBVgBArXybHVg1zCxgU2a7b6Htc0qeE
0FkEDrcHpiDvYDarBEcjb86fowOYzIEKRO7ZAqioOctSK8/X+01t9ctx9mzFIA51
U86d3td0lzFUYfkwDmSWpguVhOXNQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCS7
sA+L0S6AeQIx9YNj0w3QBL4MMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GOTgyNDQ2OEU2OTExMUVFQjgxNDYzQjg3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtbEMA0GCSqGSIb3DQEB
CwUAA4IBAQBTeIloj5QLSSibKXBepRsl52IvG9g1UREI5G5BmUmPQN2lm7aEcDkQ
pg8s4+I/7AhmMBmUWcaYsWcfXI4LgM4t6CBv/GM81WRKwMPvT4VQdZA4uuca5B7L
A544GHLEh33yxO7WFsugYzwGDPUkJZ7Sj8MJQm8joM9dH4/MOGY5L7yyoa1Cq8cb
wfq4gL+mu8UQSega3X0JU1CZ5q50PSmzuuv4h54xZXnRoffCFQQUvPNPaLtCSgGr
61j8KamJXg7oPgX0wyf2nQgQB2A4N9fUzjl/Udx/CkTYnmmisRTe7x9eRMQp6HoZ
+MBs7x+E9xI/N72sD4XK+h7ahLZRSyZa
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org