Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A343112F86B11EE9E457B10017001B1.roa
File: 2A343112F86B11EE9E457B10017001B1.roa (raw, json)
Hash identifier: j6eA1AEYv5poiIPI2ti7INtw8WOuNEcgT+XikYabgSA=
Subject key identifier: 54:1D:24:3F:A3:2B:0F:48:18:E3:AF:43:41:65:DF:F6:B6:B2:A6:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A343112F86B11EE9E457B10017001B1.roa
Signing time: Fri 12 Apr 2024 01:22:45 +0000
ROA not before: Fri 12 Apr 2024 01:22:41 +0000
ROA not after: Sun 19 May 2024 01:22:41 +0000
asID: 138915
IP address blocks: 154.93.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43896 (0xab78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:22:41 2024 GMT
Not After : May 19 01:22:41 2024 GMT
Subject: CN=66188ce5-cef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:67:ed:fd:d7:e7:ce:d9:32:91:30:2e:cc:
40:05:0f:09:0c:aa:e5:3c:ae:9a:09:a7:9f:f7:a6:
4f:05:e8:d7:7d:24:42:08:4d:85:f3:e0:2b:da:ad:
5e:51:a5:27:ce:77:f2:d6:0f:3f:46:8f:68:b4:bd:
f5:57:3e:fb:d7:7a:f6:44:55:46:de:4b:8f:ea:59:
3a:ee:2d:00:13:27:cc:e4:3e:ec:6b:bc:15:29:57:
78:59:ef:06:03:df:72:99:40:b6:b8:a2:72:9c:2d:
6a:46:1b:38:2f:ce:5d:28:e5:a2:25:7c:5e:bd:bb:
d4:92:fb:ca:a9:0e:c0:16:70:db:2d:5c:78:6f:bc:
f7:9b:be:82:8f:a7:c3:ad:e5:54:c5:0e:e7:2f:cd:
2d:43:82:6b:59:6e:8b:77:59:56:89:1a:b9:c7:3c:
44:8d:45:17:0c:77:56:72:fd:7a:cb:7f:dc:f8:ec:
09:00:1d:8d:9b:1d:6a:45:2d:6a:31:06:34:a5:ad:
ce:ae:c2:6b:3d:ed:22:ca:5e:b6:02:ea:6c:a2:f7:
3d:7f:de:cc:f3:92:af:3e:b7:2a:8b:d8:d6:a3:7e:
fe:46:2f:a3:a4:fe:2f:b4:40:87:02:e0:84:46:98:
d4:2f:ea:fd:c0:b1:9d:7b:c1:d5:a5:39:69:87:33:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:24:3F:A3:2B:0F:48:18:E3:AF:43:41:65:DF:F6:B6:B2:A6:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A343112F86B11EE9E457B10017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.54.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e1:a7:37:22:a8:88:e3:60:a5:7d:f5:4d:ba:83:1f:93:d5:
36:5d:4e:a1:9d:7e:7a:7b:92:8d:29:3a:47:83:0c:7c:b9:13:
a8:bc:0b:04:8d:b2:15:ed:99:61:f1:38:c0:f4:02:d8:a8:de:
4f:73:69:48:cd:bf:a5:bd:4e:2b:a4:17:b2:0f:65:e8:16:22:
c9:8d:85:29:9c:0a:2c:a2:73:26:11:39:68:f4:f6:f1:e5:5c:
2b:41:6a:5f:af:7c:80:05:53:04:89:98:2b:f5:1d:10:62:ee:
fa:39:35:9c:26:76:0c:8f:64:c8:7c:9c:ac:90:e3:e6:14:4d:
5d:dc:9d:03:ab:ea:bd:4b:36:94:c2:cc:6a:13:af:06:4d:32:
a3:df:30:7d:33:cc:c0:76:11:2a:8e:53:e4:2d:3f:37:8c:dd:
ad:0d:12:10:7a:fc:25:eb:f6:b3:7a:c0:94:27:68:8c:b6:b2:
4d:4c:73:07:64:50:77:be:2e:72:9f:11:98:62:9e:53:cf:dd:
23:89:46:62:47:ac:5e:2c:42:35:34:84:81:95:6c:8d:a9:94:
50:2d:ed:43:0a:be:58:a8:2f:f7:9c:63:17:d2:9b:5d:35:41:
ff:60:e3:0c:fa:ee:43:c6:e8:b3:0e:af:ee:1b:28:b9:a1:c4:
3e:a6:e8:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKt4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEyMDEyMjQxWhcNMjQwNTE5MDEyMjQxWjAYMRYw
FAYDVQQDEw02NjE4OGNlNS1jZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvdpn7f3X587ZMpEwLsxABQ8JDKrlPK6aCaef96ZPBejXfSRCCE2F8+Ar
2q1eUaUnznfy1g8/Ro9otL31Vz7713r2RFVG3kuP6lk67i0AEyfM5D7sa7wVKVd4
We8GA99ymUC2uKJynC1qRhs4L85dKOWiJXxevbvUkvvKqQ7AFnDbLVx4b7z3m76C
j6fDreVUxQ7nL80tQ4JrWW6Ld1lWiRq5xzxEjUUXDHdWcv16y3/c+OwJAB2Nmx1q
RS1qMQY0pa3OrsJrPe0iyl62Aupsovc9f97M85KvPrcqi9jWo37+Ri+jpP4vtECH
AuCERpjUL+r9wLGde8HVpTlphzNwqQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFQd
JD+jKw9IGOOvQ0Fl3/a2sqZ7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQTM0MzExMkY4NkIxMUVFOUU0NTdCMTAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBml02MA0GCSqGSIb3DQEB
CwUAA4IBAQBU4ac3IqiI42ClffVNuoMfk9U2XU6hnX56e5KNKTpHgwx8uROovAsE
jbIV7Zlh8TjA9ALYqN5Pc2lIzb+lvU4rpBeyD2XoFiLJjYUpnAosonMmETlo9Pbx
5VwrQWpfr3yABVMEiZgr9R0QYu76OTWcJnYMj2TIfJyskOPmFE1d3J0Dq+q9SzaU
wsxqE68GTTKj3zB9M8zAdhEqjlPkLT83jN2tDRIQevwl6/azesCUJ2iMtrJNTHMH
ZFB3vi5ynxGYYp5Tz90jiUZiR6xeLEI1NISBlWyNqZRQLe1DCr5YqC/3nGMX0ptd
NUH/YOMM+u5DxuizDq/uGyi5ocQ+puj9
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org