Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A434870F7C011EEBB8ED728017001B1.roa
File: 1A434870F7C011EEBB8ED728017001B1.roa (raw, json)
Hash identifier: wJcbO23EdwVkH5nLqblO/MsoiItUTZjeRF/y2y2qNgo=
Subject key identifier: F8:ED:6C:F1:6A:F1:22:32:C1:7A:51:8B:7C:62:34:83:F6:A6:87:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A434870F7C011EEBB8ED728017001B1.roa
Signing time: Thu 11 Apr 2024 04:58:14 +0000
ROA not before: Thu 11 Apr 2024 04:58:11 +0000
ROA not after: Sun 19 May 2024 04:58:11 +0000
asID: 138915
IP address blocks: 154.93.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43811 (0xab23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 04:58:11 2024 GMT
Not After : May 19 04:58:11 2024 GMT
Subject: CN=66176de6-1326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:4e:19:03:78:0a:eb:0a:15:99:c4:ef:78:
a3:4e:75:1b:43:eb:f3:a3:cd:95:5a:d9:cc:dc:bd:
f4:da:d1:7f:be:de:2c:c1:5c:cb:a6:b6:fb:42:b4:
de:5f:41:65:89:2a:e4:52:09:cc:a6:74:5e:04:b3:
8e:94:f2:79:56:77:c9:2e:59:7b:51:17:68:b6:d8:
b6:ea:09:4e:2e:1c:6d:5e:f2:5d:5d:77:0d:15:ee:
c7:0e:d3:ce:78:b1:13:60:e0:3a:a6:98:17:a0:e9:
d6:77:20:cb:ca:43:d4:8d:29:0d:16:17:70:56:73:
05:e4:8a:a1:f0:6b:cf:bc:99:2a:74:b6:e1:36:f5:
ac:e2:79:71:ce:ef:68:73:2d:4b:f0:f6:df:25:b1:
80:12:9e:33:da:ec:8a:a1:76:67:18:fa:4b:e2:25:
4c:24:16:44:30:ae:47:20:d3:0e:85:ca:09:55:b5:
7a:a5:f8:68:a5:c5:5f:76:8c:2b:95:85:d3:fd:ed:
58:a5:f0:24:ee:4e:a9:f3:f8:b5:f4:fa:88:69:06:
8c:08:bc:5e:6b:a5:67:51:79:7c:1d:76:0c:68:a1:
33:67:3f:dd:0f:c9:21:3c:6d:16:fa:2a:93:0a:23:
f1:ae:9b:84:a5:85:8e:3f:db:f4:de:a4:9e:17:7a:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:ED:6C:F1:6A:F1:22:32:C1:7A:51:8B:7C:62:34:83:F6:A6:87:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A434870F7C011EEBB8ED728017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.61.0/24
Signature Algorithm: sha256WithRSAEncryption
32:73:c6:8c:41:60:c0:f2:61:16:f7:1d:da:49:42:d8:f6:21:
78:51:5e:10:43:99:2d:cb:fd:d7:92:41:6b:7c:b4:5a:0b:d8:
dc:f2:aa:b4:d4:da:cb:77:db:92:4d:b9:94:30:90:38:2f:ca:
25:45:a9:92:38:d8:17:27:3f:b8:cc:a5:d5:0d:33:16:89:16:
08:64:ff:a0:ba:f4:61:0e:26:a3:86:84:fb:c4:b0:f5:66:02:
b7:86:fa:3a:1e:9b:47:31:4d:00:df:84:f2:31:13:25:0b:a9:
20:54:80:a3:ec:77:6a:a7:50:54:a9:1d:58:5c:d7:82:81:0e:
d6:21:96:0f:62:c6:7c:4d:38:3c:bf:9c:84:6f:f4:f1:3a:b3:
f5:e3:e6:75:66:74:73:f2:43:21:c4:72:dd:59:e2:d9:9c:8a:
ab:3f:66:a7:91:c2:bb:70:2d:58:21:08:17:2d:24:af:26:37:
fe:01:dd:82:a8:c8:b7:87:6d:41:97:91:ef:e6:ec:ed:76:c2:
1c:69:eb:bc:c8:95:fe:f7:dc:8c:f7:40:7e:1c:5c:4a:3c:f1:
3e:df:de:93:e3:79:a6:c2:d1:f0:02:aa:56:f6:3e:48:b7:b0:
8c:6a:ec:f3:dd:a9:4c:93:9b:c8:42:1f:9b:5a:96:d7:59:92:
48:f5:8c:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKsjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDExMDQ1ODExWhcNMjQwNTE5MDQ1ODExWjAYMRYw
FAYDVQQDEw02NjE3NmRlNi0xMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwadOGQN4CusKFZnE73ijTnUbQ+vzo82VWtnM3L302tF/vt4swVzLprb7
QrTeX0FliSrkUgnMpnReBLOOlPJ5VnfJLll7URdotti26glOLhxtXvJdXXcNFe7H
DtPOeLETYOA6ppgXoOnWdyDLykPUjSkNFhdwVnMF5Iqh8GvPvJkqdLbhNvWs4nlx
zu9ocy1L8PbfJbGAEp4z2uyKoXZnGPpL4iVMJBZEMK5HINMOhcoJVbV6pfhopcVf
dowrlYXT/e1YpfAk7k6p8/i19PqIaQaMCLxea6VnUXl8HXYMaKEzZz/dD8khPG0W
+iqTCiPxrpuEpYWOP9v03qSeF3qJyQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPjt
bPFq8SIywXpRi3xiNIP2podHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQTQzNDg3MEY3QzAxMUVFQkI4RUQ3MjgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml09MA0GCSqGSIb3DQEB
CwUAA4IBAQAyc8aMQWDA8mEW9x3aSULY9iF4UV4QQ5kty/3XkkFrfLRaC9jc8qq0
1NrLd9uSTbmUMJA4L8olRamSONgXJz+4zKXVDTMWiRYIZP+guvRhDiajhoT7xLD1
ZgK3hvo6HptHMU0A34TyMRMlC6kgVICj7Hdqp1BUqR1YXNeCgQ7WIZYPYsZ8TTg8
v5yEb/TxOrP14+Z1ZnRz8kMhxHLdWeLZnIqrP2ankcK7cC1YIQgXLSSvJjf+Ad2C
qMi3h21Bl5Hv5uztdsIcaeu8yJX+99yM90B+HFxKPPE+396T43mmwtHwAqpW9j5I
t7CMauzz3alMk5vIQh+bWpbXWZJI9Yy+
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org