Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D92351AF86B11EEB3AC3412017001B1.roa
File: 8D92351AF86B11EEB3AC3412017001B1.roa (raw, json)
Hash identifier: gLG9HB5JSUyxdNBos+1/LRzBGz/xMvD8/BKlQfhbuyk=
Subject key identifier: 66:F1:CE:CF:53:CD:32:2A:CC:6C:1A:29:98:79:21:13:FD:08:8F:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D92351AF86B11EEB3AC3412017001B1.roa
Signing time: Fri 12 Apr 2024 01:25:31 +0000
ROA not before: Fri 12 Apr 2024 01:25:28 +0000
ROA not after: Sun 19 May 2024 01:25:28 +0000
asID: 138915
IP address blocks: 154.93.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43900 (0xab7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:25:28 2024 GMT
Not After : May 19 01:25:28 2024 GMT
Subject: CN=66188d8b-9cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:a8:d2:5c:dc:74:a4:41:57:41:68:5a:78:
b5:6b:47:db:85:6f:61:e9:a9:93:c2:21:07:26:23:
c0:9c:f4:48:59:0b:c7:10:d5:13:e2:c3:7f:e5:f8:
a4:de:07:cc:49:4d:98:c8:c8:a9:bd:4d:9c:b7:1d:
35:a5:7b:b4:65:cd:87:6c:55:a9:9f:ca:78:7c:d0:
9d:31:96:e7:7d:61:86:c3:d6:b3:90:27:f3:59:8c:
9c:93:46:ee:67:52:c1:a6:9c:f0:01:fb:3a:fc:f4:
97:dd:6a:04:a0:45:2e:b5:03:ab:75:d5:8f:d6:b0:
51:bd:b3:70:21:1d:2f:8d:a8:aa:30:3d:54:5f:c3:
60:14:db:2c:28:5c:ab:a2:f6:a9:67:be:3e:fa:c6:
a9:d5:75:fb:0f:74:7c:6a:36:7e:72:90:bc:56:34:
ff:b2:c2:67:17:74:29:8f:0f:1b:23:2f:df:e8:ba:
e6:8c:cf:f6:7a:29:28:23:00:32:a5:34:cf:57:d9:
b1:ec:33:a6:72:59:79:4b:fc:09:37:74:ad:79:6a:
fe:4b:63:f5:cf:c3:f1:4a:c3:81:8d:35:ae:ff:c0:
db:dd:95:f2:44:39:fd:94:e2:5c:55:64:94:8d:0b:
db:4d:fc:16:fd:4d:41:19:c0:76:fc:7a:80:a5:50:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F1:CE:CF:53:CD:32:2A:CC:6C:1A:29:98:79:21:13:FD:08:8F:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D92351AF86B11EEB3AC3412017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0e:e6:74:39:f1:00:05:a5:1a:92:9d:44:9f:64:0e:84:ba:
5f:78:e4:36:c8:aa:78:67:b9:7b:60:2c:db:b7:f7:db:54:ce:
38:66:be:d2:2a:37:0d:ed:d4:a1:ff:4a:11:f2:97:63:ed:db:
4b:07:c6:7d:8b:87:b5:4d:98:01:48:44:f5:6d:d8:27:1c:55:
eb:7d:c8:1f:22:60:3e:b5:8b:47:c0:5f:c6:43:b6:c0:77:67:
34:38:2a:86:28:cc:eb:ca:07:a7:0f:c4:37:2d:47:96:4d:96:
56:cf:9e:7f:b2:25:59:cd:98:89:73:33:d8:70:63:d2:6f:21:
c6:3c:95:bc:78:87:aa:85:c3:69:1e:76:56:d2:ba:54:b3:31:
90:c2:ea:9d:3f:d2:82:ae:38:62:0b:80:3e:55:0f:79:4c:aa:
66:c2:17:a7:6f:db:e1:36:fd:8f:ed:07:8f:7b:90:0f:7d:aa:
4d:81:7b:40:cd:80:94:62:46:17:27:56:c1:32:f9:e7:bc:ba:
9c:14:0d:4b:42:26:3e:a3:b6:f3:8c:41:9a:2e:3b:f7:c9:3b:
89:54:63:65:81:1d:2b:40:ff:4c:1f:5c:96:a2:b2:db:dd:42:
cd:6a:09:f2:cf:fa:5d:ed:cf:4e:35:58:fe:66:59:65:fd:e1:
f1:04:37:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKt8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEyMDEyNTI4WhcNMjQwNTE5MDEyNTI4WjAYMRYw
FAYDVQQDEw02NjE4OGQ4Yi05Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz0uo0lzcdKRBV0FoWni1a0fbhW9h6amTwiEHJiPAnPRIWQvHENUT4sN/
5fik3gfMSU2YyMipvU2ctx01pXu0Zc2HbFWpn8p4fNCdMZbnfWGGw9azkCfzWYyc
k0buZ1LBppzwAfs6/PSX3WoEoEUutQOrddWP1rBRvbNwIR0vjaiqMD1UX8NgFNss
KFyrovapZ74++sap1XX7D3R8ajZ+cpC8VjT/ssJnF3Qpjw8bIy/f6LrmjM/2eiko
IwAypTTPV9mx7DOmcll5S/wJN3SteWr+S2P1z8PxSsOBjTWu/8Db3ZXyRDn9lOJc
VWSUjQvbTfwW/U1BGcB2/HqApVB07wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGbx
zs9TzTIqzGwaKZh5IRP9CI8JMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDkyMzUxQUY4NkIxMUVFQjNBQzM0MTIwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml09MA0GCSqGSIb3DQEB
CwUAA4IBAQAfDuZ0OfEABaUakp1En2QOhLpfeOQ2yKp4Z7l7YCzbt/fbVM44Zr7S
KjcN7dSh/0oR8pdj7dtLB8Z9i4e1TZgBSET1bdgnHFXrfcgfImA+tYtHwF/GQ7bA
d2c0OCqGKMzrygenD8Q3LUeWTZZWz55/siVZzZiJczPYcGPSbyHGPJW8eIeqhcNp
HnZW0rpUszGQwuqdP9KCrjhiC4A+VQ95TKpmwhenb9vhNv2P7QePe5APfapNgXtA
zYCUYkYXJ1bBMvnnvLqcFA1LQiY+o7bzjEGaLjv3yTuJVGNlgR0rQP9MH1yWorLb
3ULNagnyz/pd7c9ONVj+Zlll/eHxBDey
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org