Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB092DFCF49111EEAD4C4259775412E6.roa
File: AB092DFCF49111EEAD4C4259775412E6.roa (raw, json)
Hash identifier: Q6VDSayY+TwTVso/eDBJcdbX7lR+nl6em3uKd9UXU20=
Subject key identifier: CD:EA:C2:30:F0:C1:D6:9E:53:30:52:8E:23:B4:37:2C:9E:9B:6F:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A9BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB092DFCF49111EEAD4C4259775412E6.roa
Signing time: Sun 07 Apr 2024 03:48:17 +0000
ROA not before: Sun 07 Apr 2024 03:48:14 +0000
ROA not after: Mon 13 May 2024 03:48:14 +0000
asID: 138915
IP address blocks: 154.206.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43454 (0xa9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 7 03:48:14 2024 GMT
Not After : May 13 03:48:14 2024 GMT
Subject: CN=66121781-b639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:ad:e1:29:58:2b:63:53:38:5f:f7:10:43:
ba:81:78:1c:50:13:2f:68:62:29:0a:3d:8c:62:28:
3b:c3:c1:a0:a9:bc:ea:a2:70:38:50:51:30:2f:ca:
1e:e3:8b:79:0c:de:30:78:a2:b8:8d:a1:ab:04:75:
21:ab:e1:c3:65:b7:91:ef:ac:c5:92:a9:ab:2a:59:
8a:99:17:d3:4b:6c:59:a3:c8:5d:ba:63:21:1f:c8:
79:ad:51:4d:8f:21:fa:40:d6:19:b7:14:15:64:44:
d4:9a:d2:80:a7:1f:ce:21:56:1d:41:46:cd:4c:06:
f7:c1:49:2f:5b:94:79:35:6b:94:92:29:f2:ac:eb:
a2:03:81:4c:b2:c8:bc:ac:80:20:55:c0:24:d4:8d:
66:05:65:88:9e:de:96:aa:93:58:e0:c5:26:d0:9e:
5b:34:5b:d9:de:1e:ad:5c:3a:c7:46:41:79:8e:85:
67:2f:44:db:e6:9b:23:1b:00:84:4a:3f:c4:dd:66:
4b:d3:25:78:85:8f:95:7a:06:35:ff:8d:48:ed:d8:
f1:f3:e8:b7:7d:77:ad:7e:70:54:bc:ff:ee:03:d2:
44:b7:0d:de:13:f8:68:dd:46:cd:e7:5f:cd:32:ae:
45:4a:2f:a7:9a:8e:b2:a7:1d:ac:9f:85:35:0f:22:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:C2:30:F0:C1:D6:9E:53:30:52:8E:23:B4:37:2C:9E:9B:6F:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB092DFCF49111EEAD4C4259775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.70.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:d0:f3:b6:f5:8b:72:ca:15:60:ec:c3:ce:67:ea:ea:e8:69:
21:d2:54:6f:fa:57:57:31:63:6e:c2:bc:c1:01:92:96:1f:af:
b7:4b:8b:20:01:33:1d:ea:6f:a1:59:f0:8c:7f:be:c4:73:d7:
32:1d:bd:63:81:cb:5b:b0:02:b1:00:6a:5a:b5:c4:dd:3e:1c:
96:e0:37:9b:dc:bd:c9:a1:cc:0b:00:5a:ee:dd:83:c7:e6:d4:
38:b0:14:98:0c:fe:04:8a:29:26:a4:45:e3:5e:12:a0:bd:31:
78:1a:88:a8:6f:e5:ff:8c:03:5b:25:28:61:cd:54:18:f1:64:
43:0b:72:81:0b:d8:f4:bb:19:79:77:ba:74:41:ac:69:ee:dc:
7c:87:26:e9:bc:72:5d:5a:ba:98:15:3d:79:1e:83:97:94:1a:
37:bf:8a:04:a0:cf:13:0f:86:12:ba:e0:33:5e:b7:04:ff:27:
80:fc:87:b2:ca:59:42:f2:d1:70:96:e9:05:f7:85:b8:7a:af:
60:53:08:d0:df:fc:0f:ed:c1:ac:4c:1a:22:33:f7:4b:07:af:
e5:03:15:26:e2:ea:81:02:2e:d9:de:db:2d:0d:99:1a:7a:2a:
32:11:41:8d:40:5a:97:7a:5a:65:cc:57:59:2f:46:a0:67:b8:
25:b4:34:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKm+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDA3MDM0ODE0WhcNMjQwNTEzMDM0ODE0WjAYMRYw
FAYDVQQDEw02NjEyMTc4MS1iNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6rCt4SlYK2NTOF/3EEO6gXgcUBMvaGIpCj2MYig7w8GgqbzqonA4UFEw
L8oe44t5DN4weKK4jaGrBHUhq+HDZbeR76zFkqmrKlmKmRfTS2xZo8hdumMhH8h5
rVFNjyH6QNYZtxQVZETUmtKApx/OIVYdQUbNTAb3wUkvW5R5NWuUkinyrOuiA4FM
ssi8rIAgVcAk1I1mBWWInt6WqpNY4MUm0J5bNFvZ3h6tXDrHRkF5joVnL0Tb5psj
GwCESj/E3WZL0yV4hY+VegY1/41I7djx8+i3fXetfnBUvP/uA9JEtw3eE/ho3UbN
51/NMq5FSi+nmo6ypx2sn4U1DyJw3QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM3q
wjDwwdaeUzBSjiO0Nyyem28GMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BQjA5MkRGQ0Y0OTExMUVFQUQ0QzQyNTk3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBms5GMA0GCSqGSIb3DQEB
CwUAA4IBAQCb0PO29YtyyhVg7MPOZ+rq6Gkh0lRv+ldXMWNuwrzBAZKWH6+3S4sg
ATMd6m+hWfCMf77Ec9cyHb1jgctbsAKxAGpatcTdPhyW4Deb3L3JocwLAFru3YPH
5tQ4sBSYDP4EiikmpEXjXhKgvTF4Goiob+X/jANbJShhzVQY8WRDC3KBC9j0uxl5
d7p0Qaxp7tx8hybpvHJdWrqYFT15HoOXlBo3v4oEoM8TD4YSuuAzXrcE/yeA/Iey
yllC8tFwlukF94W4eq9gUwjQ3/wP7cGsTBoiM/dLB6/lAxUm4uqBAi7Z3tstDZka
eioyEUGNQFqXelplzFdZL0agZ7gltDQv
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org