Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44159FD6037D11EFBD588356017001B1.roa
File: 44159FD6037D11EFBD588356017001B1.roa (raw, json)
Hash identifier: urvLvOVBG4y8L4GkWWHphAT6nIeFkBBGlOkjNCHoK/o=
Subject key identifier: 44:1A:00:4D:7D:EA:73:0B:16:1F:47:BA:96:6C:C5:32:D9:12:77:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B134
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44159FD6037D11EFBD588356017001B1.roa
Signing time: Fri 26 Apr 2024 03:30:02 +0000
ROA not before: Fri 26 Apr 2024 03:29:59 +0000
ROA not after: Sun 26 May 2024 03:29:59 +0000
asID: 62240
IP address blocks: 154.195.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45364 (0xb134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:29:59 2024 GMT
Not After : May 26 03:29:59 2024 GMT
Subject: CN=662b1fba-70be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:30:eb:1a:30:26:55:03:3e:86:f5:2b:91:
84:0d:b2:a4:78:f8:c5:45:c2:43:ee:53:da:b5:fa:
e5:ab:2d:c7:41:b9:50:44:43:2f:7c:53:4c:cc:ee:
4e:07:f7:3f:9f:0b:e6:68:f9:fd:b3:21:c2:c4:33:
a6:c7:93:94:92:62:3f:b8:e1:01:23:1f:11:6a:c8:
9f:88:0b:9c:c7:fb:ef:94:3d:73:f4:d1:09:ff:4a:
43:d6:d6:ee:55:2b:bd:df:15:a8:79:d3:c6:e5:c6:
30:34:53:e0:ce:a8:5d:29:f0:e7:49:19:7a:3a:8e:
49:0f:e6:82:8b:d6:96:45:2a:c6:27:20:4d:56:dc:
6a:0a:97:c1:43:cd:42:f7:f3:a9:38:34:74:d8:ed:
7a:95:31:71:2c:63:aa:0f:68:0c:95:54:23:10:1e:
7f:6d:15:cf:06:91:6b:b4:c0:d7:3f:2d:0d:42:f8:
fc:f8:cc:81:2d:79:b6:b4:20:84:a8:89:e2:e7:30:
bb:78:02:2f:ab:01:49:b5:d5:5a:bf:e9:53:3d:41:
9a:65:7c:55:cd:4b:de:8a:b4:02:ef:6a:4a:08:73:
9b:23:a4:c4:f4:47:4d:3b:d3:97:6c:ea:0e:4d:be:
c6:0a:6b:b5:a6:49:5a:73:7d:2f:45:90:72:7b:bb:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1A:00:4D:7D:EA:73:0B:16:1F:47:BA:96:6C:C5:32:D9:12:77:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/44159FD6037D11EFBD588356017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:8c:e6:f8:c0:a2:c0:f5:85:92:b5:b7:60:9e:88:31:bb:37:
0a:c9:cf:55:2d:a9:fa:bb:f3:26:53:06:61:f6:a6:2b:4f:68:
6d:d8:3f:98:95:01:7c:f5:70:90:96:18:4f:3b:da:cc:a8:5b:
2f:d4:84:3c:eb:e6:7b:aa:cf:8b:1f:50:bc:05:a1:99:d2:07:
ce:ba:f5:01:18:d4:84:04:c1:cf:35:ff:61:a3:0e:2b:08:e2:
92:cc:3d:ab:54:b4:ef:fb:cf:2e:66:03:d5:42:bf:e1:3f:3a:
b2:c6:61:e7:47:92:84:02:fc:80:88:fe:26:33:f5:27:77:fb:
f1:14:a5:9a:5e:a1:8c:25:3d:fa:99:8e:28:95:ec:29:aa:34:
9b:f3:85:f7:3e:bc:0c:b3:15:76:c7:8e:54:ef:14:f1:b7:14:
90:fa:f6:37:99:53:5b:46:12:07:1a:4f:4b:6e:d0:de:d4:16:
4d:67:a5:33:45:e3:4d:a3:ef:77:b2:4c:1d:f7:39:4d:c9:26:
4c:b7:cf:ec:16:9f:2b:0b:9a:e7:4c:c4:3c:3d:70:58:80:7a:
90:f5:6c:e3:20:07:bb:e1:91:db:94:52:71:bb:08:6b:af:94:
10:eb:47:66:af:44:bf:79:68:5d:2d:dc:9d:bc:75:58:ca:cd:
49:7b:0d:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALE0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDMyOTU5WhcNMjQwNTI2MDMyOTU5WjAYMRYw
FAYDVQQDEw02NjJiMWZiYS03MGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxJow6xowJlUDPob1K5GEDbKkePjFRcJD7lPatfrlqy3HQblQREMvfFNM
zO5OB/c/nwvmaPn9syHCxDOmx5OUkmI/uOEBIx8RasifiAucx/vvlD1z9NEJ/0pD
1tbuVSu93xWoedPG5cYwNFPgzqhdKfDnSRl6Oo5JD+aCi9aWRSrGJyBNVtxqCpfB
Q81C9/OpODR02O16lTFxLGOqD2gMlVQjEB5/bRXPBpFrtMDXPy0NQvj8+MyBLXm2
tCCEqIni5zC7eAIvqwFJtdVav+lTPUGaZXxVzUveirQC72pKCHObI6TE9EdNO9OX
bOoOTb7GCmu1pklac30vRZBye7uK3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEQa
AE196nMLFh9HupZsxTLZEnf4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80NDE1OUZENjAzN0QxMUVGQkQ1ODgzNTYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsNgMA0GCSqGSIb3DQEB
CwUAA4IBAQC6jOb4wKLA9YWStbdgnogxuzcKyc9VLan6u/MmUwZh9qYrT2ht2D+Y
lQF89XCQlhhPO9rMqFsv1IQ86+Z7qs+LH1C8BaGZ0gfOuvUBGNSEBMHPNf9how4r
COKSzD2rVLTv+88uZgPVQr/hPzqyxmHnR5KEAvyAiP4mM/Und/vxFKWaXqGMJT36
mY4olewpqjSb84X3PrwMsxV2x45U7xTxtxSQ+vY3mVNbRhIHGk9LbtDe1BZNZ6Uz
ReNNo+93skwd9zlNySZMt8/sFp8rC5rnTMQ8PXBYgHqQ9WzjIAe74ZHblFJxuwhr
r5QQ60dmr0S/eWhdLdydvHVYys1Jew2F
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:21 2024 by rpki-client on console-ams.rpki-client.org