Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB0857DCF47E11EE925BDEB8775412E6.roa
File: FB0857DCF47E11EE925BDEB8775412E6.roa (raw, json)
Hash identifier: WJaJLfu9WBZ2URO7+34vnNE2XG8TZjkXktm5Zab6Hk8=
Subject key identifier: E0:4A:4C:F6:77:E2:66:2D:5E:F7:A8:DA:BB:30:2E:90:61:F6:88:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A99E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB0857DCF47E11EE925BDEB8775412E6.roa
Signing time: Sun 07 Apr 2024 01:34:31 +0000
ROA not before: Sun 07 Apr 2024 01:34:27 +0000
ROA not after: Mon 13 May 2024 01:34:27 +0000
asID: 138915
IP address blocks: 154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43422 (0xa99e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 01:34:27 2024 GMT
Not After : May 13 01:34:27 2024 GMT
Subject: CN=6611f827-19e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:be:65:00:60:3f:f7:72:22:e0:47:7f:9a:
bf:64:33:93:2a:ee:95:74:21:99:c7:c5:63:a3:0e:
57:05:97:4a:7d:05:3c:8e:95:45:4d:db:ff:6e:4e:
b6:19:0d:4f:8c:de:f6:14:59:6b:68:20:77:83:56:
ac:1a:d1:26:1d:f9:cf:17:7d:d8:c4:db:60:88:46:
43:8a:9c:8f:7b:af:fd:3b:b4:a5:af:05:bc:8b:83:
ab:da:80:c2:43:08:e6:61:ef:ad:c0:bb:9d:f7:05:
a2:5b:3e:8b:85:13:87:f5:02:41:a3:b8:56:16:64:
e2:ea:54:47:96:49:24:5e:d4:1f:2d:d6:53:61:64:
00:f4:d5:27:f6:09:a3:85:54:0e:c6:c7:40:46:1f:
c4:3a:87:28:04:14:54:a1:6c:69:e7:0b:60:73:98:
98:f1:e0:b9:ed:6b:40:6a:af:d0:76:8e:d6:a8:71:
08:a3:ec:56:27:12:44:c6:c8:35:82:32:f9:13:80:
2d:bb:78:1b:10:85:d7:a7:12:60:21:81:23:04:6a:
82:e9:40:4e:57:2f:b8:56:27:17:fc:54:99:c7:bb:
c3:09:ae:c5:89:c9:dd:80:49:9b:14:34:f6:1c:a7:
e4:d0:d0:df:58:ad:08:12:89:5a:f8:5c:24:37:f6:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:4C:F6:77:E2:66:2D:5E:F7:A8:DA:BB:30:2E:90:61:F6:88:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB0857DCF47E11EE925BDEB8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:b6:d6:33:5a:82:3d:0b:8e:81:fb:c9:02:42:e4:45:53:22:
87:45:7c:fb:1a:c8:0d:6f:45:2e:89:ff:b2:3b:82:35:da:a6:
7c:56:d3:6f:56:97:fb:72:09:af:e1:69:63:fb:11:d8:ca:92:
42:03:4b:05:b7:53:8d:83:91:2a:31:24:00:59:99:16:51:bf:
68:e8:3f:2d:49:b8:c4:32:b4:ae:51:2c:4a:24:bf:77:ae:de:
82:e0:72:e0:bd:0e:89:7f:63:fc:b8:a7:57:56:03:08:61:ae:
a7:aa:a2:33:5d:ca:cd:1f:ea:3a:75:c2:e5:65:22:62:f9:9a:
03:2e:61:52:73:7d:92:c5:5c:80:4b:81:00:89:38:0a:3a:54:
a5:e7:a3:2a:53:df:96:e2:29:b1:a3:10:aa:50:9e:1e:12:9c:
70:87:20:8a:bb:87:d0:85:37:00:f1:fe:3e:51:e0:32:60:a2:
16:ac:cd:71:8c:e0:d9:6c:25:27:f9:98:0b:02:41:a3:6a:4b:
10:cf:cd:99:ed:9b:5b:db:45:e1:39:90:6c:d5:15:be:1b:3e:
c5:78:49:86:eb:97:3f:5a:55:d4:c2:4d:41:63:c6:6c:14:bc:
da:e5:cb:4a:8c:46:c2:b3:c5:64:22:73:a0:11:e3:1b:8a:48:
31:f2:f6:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKmeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDA3MDEzNDI3WhcNMjQwNTEzMDEzNDI3WjAYMRYw
FAYDVQQDEw02NjExZjgyNy0xOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHO+ZQBgP/dyIuBHf5q/ZDOTKu6VdCGZx8Vjow5XBZdKfQU8jpVFTdv/
bk62GQ1PjN72FFlraCB3g1asGtEmHfnPF33YxNtgiEZDipyPe6/9O7SlrwW8i4Or
2oDCQwjmYe+twLud9wWiWz6LhROH9QJBo7hWFmTi6lRHlkkkXtQfLdZTYWQA9NUn
9gmjhVQOxsdARh/EOocoBBRUoWxp5wtgc5iY8eC57WtAaq/Qdo7WqHEIo+xWJxJE
xsg1gjL5E4Atu3gbEIXXpxJgIYEjBGqC6UBOVy+4VicX/FSZx7vDCa7FicndgEmb
FDT2HKfk0NDfWK0IEola+FwkN/Zb6wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOBK
TPZ34mYtXveo2rswLpBh9ojBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9GQjA4NTdEQ0Y0N0UxMUVFOTI1QkRFQjg3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms52MA0GCSqGSIb3DQEB
CwUAA4IBAQAqttYzWoI9C46B+8kCQuRFUyKHRXz7GsgNb0Uuif+yO4I12qZ8VtNv
Vpf7cgmv4Wlj+xHYypJCA0sFt1ONg5EqMSQAWZkWUb9o6D8tSbjEMrSuUSxKJL93
rt6C4HLgvQ6Jf2P8uKdXVgMIYa6nqqIzXcrNH+o6dcLlZSJi+ZoDLmFSc32SxVyA
S4EAiTgKOlSl56MqU9+W4imxoxCqUJ4eEpxwhyCKu4fQhTcA8f4+UeAyYKIWrM1x
jODZbCUn+ZgLAkGjaksQz82Z7Ztb20XhOZBs1RW+Gz7FeEmG65c/WlXUwk1BY8Zs
FLza5ctKjEbCs8VkInOgEeMbikgx8vYn
-----END CERTIFICATE-----
Generated at Fri May 3 01:30:08 2024 by rpki-client on console-fra.rpki-client.org