Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11459A4EF86E11EE83F9332B017001B1.roa
File: 11459A4EF86E11EE83F9332B017001B1.roa (raw, json)
Hash identifier: Ouube9iX5QWEWzl88AimcwkUJZhTwBAssqbmjKrCR3s=
Subject key identifier: CE:21:A1:7B:4E:4F:43:AC:3E:10:D9:39:FC:7B:2E:26:B7:AE:43:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11459A4EF86E11EE83F9332B017001B1.roa
Signing time: Fri 12 Apr 2024 01:43:31 +0000
ROA not before: Fri 12 Apr 2024 01:43:28 +0000
ROA not after: Sun 19 May 2024 01:43:28 +0000
asID: 138915
IP address blocks: 154.90.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43930 (0xab9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:43:28 2024 GMT
Not After : May 19 01:43:28 2024 GMT
Subject: CN=661891c3-7fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:8b:e4:a8:08:51:9c:5e:cc:26:a5:02:1f:
51:d1:a9:6e:07:c0:7f:85:47:39:60:d6:9a:a9:4c:
d3:f2:c4:5d:70:55:5d:c1:52:f1:22:a5:a6:0e:28:
d4:02:5a:ef:16:cc:a1:b2:53:4c:14:84:6f:66:e9:
89:d2:fc:cd:b3:80:93:6e:30:20:15:35:80:f2:9c:
12:66:2d:ba:a0:40:78:a8:6f:09:fc:de:0b:47:25:
52:db:6d:53:91:f0:c7:e6:c3:c0:dc:cc:1e:ed:87:
67:57:f1:51:4c:a0:59:05:92:43:10:7b:66:d2:f5:
a5:aa:2e:be:c9:8e:63:15:ee:35:6b:b8:d3:9d:70:
34:30:03:79:9b:d0:a1:05:1b:b9:ba:cd:c9:bb:34:
69:57:24:9c:d8:42:20:f9:93:c2:19:77:c1:ae:e9:
ec:03:1e:ce:e4:1d:b3:26:62:84:14:6a:a8:8a:65:
38:d8:4f:db:f3:02:fc:14:c7:2e:13:fc:9b:e3:0a:
d5:94:1c:94:3f:d2:51:4c:17:d6:3b:4f:21:f7:dc:
f5:46:e3:65:59:20:ef:6d:90:ba:79:fd:83:26:f6:
1d:86:90:90:15:42:11:fa:ad:dc:b6:90:ac:d5:4e:
72:eb:c6:af:3c:3a:97:72:83:f2:f0:91:9b:92:a5:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:A1:7B:4E:4F:43:AC:3E:10:D9:39:FC:7B:2E:26:B7:AE:43:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11459A4EF86E11EE83F9332B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.34.0/23
Signature Algorithm: sha256WithRSAEncryption
15:fe:b5:c9:91:36:61:6e:3d:18:71:c3:75:55:71:9d:7c:e2:
3f:a8:2f:f3:fb:3c:a7:a8:8a:ed:8b:aa:04:ad:b7:bf:79:e0:
4d:c7:ab:10:e1:e4:23:ad:30:4e:87:e4:f9:1e:47:00:e6:bc:
fd:3a:ca:af:e3:78:86:61:b2:fe:d2:a1:88:51:20:78:3c:5a:
90:d6:db:7d:9a:03:70:f6:39:47:d2:22:7b:b3:e5:59:b6:93:
c6:26:76:8b:c7:ed:e0:cb:45:55:78:68:f4:ec:35:1e:6c:0d:
37:42:1b:c3:7a:8b:b6:bc:14:c0:e2:29:71:06:93:a7:d7:a1:
cd:c6:f7:31:60:e0:3c:de:22:bd:ad:38:24:43:a9:6d:68:61:
67:08:1d:67:09:cf:9e:6d:8c:89:0d:ed:e7:05:bb:3e:6c:0c:
5e:c1:2a:11:c5:b8:ea:92:b2:3d:d9:64:b6:d2:bd:9a:2d:7d:
29:90:36:75:19:d0:71:c4:e2:be:7c:1b:b4:25:ca:82:0f:ba:
b7:45:89:02:62:64:02:1a:74:44:c6:6b:aa:4f:ab:1f:cc:ce:
92:0c:5f:07:cc:5b:be:bc:7e:ac:49:02:23:a0:bb:e7:ba:72:
9e:01:b0:be:7c:af:b0:79:32:05:78:26:fe:fc:d4:f0:d3:1b:
93:c4:f3:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKuaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEyMDE0MzI4WhcNMjQwNTE5MDE0MzI4WjAYMRYw
FAYDVQQDEw02NjE4OTFjMy03ZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxbqL5KgIUZxezCalAh9R0aluB8B/hUc5YNaaqUzT8sRdcFVdwVLxIqWm
DijUAlrvFsyhslNMFIRvZumJ0vzNs4CTbjAgFTWA8pwSZi26oEB4qG8J/N4LRyVS
221TkfDH5sPA3Mwe7YdnV/FRTKBZBZJDEHtm0vWlqi6+yY5jFe41a7jTnXA0MAN5
m9ChBRu5us3JuzRpVySc2EIg+ZPCGXfBrunsAx7O5B2zJmKEFGqoimU42E/b8wL8
FMcuE/yb4wrVlByUP9JRTBfWO08h99z1RuNlWSDvbZC6ef2DJvYdhpCQFUIR+q3c
tpCs1U5y68avPDqXcoPy8JGbkqWdAwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM4h
oXtOT0OsPhDZOfx7Lia3rkPEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMTQ1OUE0RUY4NkUxMUVFODNGOTMzMkIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmloiMA0GCSqGSIb3DQEB
CwUAA4IBAQAV/rXJkTZhbj0YccN1VXGdfOI/qC/z+zynqIrti6oErbe/eeBNx6sQ
4eQjrTBOh+T5HkcA5rz9Osqv43iGYbL+0qGIUSB4PFqQ1tt9mgNw9jlH0iJ7s+VZ
tpPGJnaLx+3gy0VVeGj07DUebA03QhvDeou2vBTA4ilxBpOn16HNxvcxYOA83iK9
rTgkQ6ltaGFnCB1nCc+ebYyJDe3nBbs+bAxewSoRxbjqkrI92WS20r2aLX0pkDZ1
GdBxxOK+fBu0JcqCD7q3RYkCYmQCGnRExmuqT6sfzM6SDF8HzFu+vH6sSQIjoLvn
unKeAbC+fK+weTIFeCb+/NTw0xuTxPPJ
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org