Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD194EDEF86911EE9B2D1400017001B1.roa
File: AD194EDEF86911EE9B2D1400017001B1.roa (raw, json)
Hash identifier: v1wQCAy9uhRf10a0PrnVr3FXmWv7MzOL8DWhRWPsSj8=
Subject key identifier: 98:C5:F0:DA:45:1F:D0:36:A9:37:98:F9:32:85:9F:4D:B0:52:E1:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD194EDEF86911EE9B2D1400017001B1.roa
Signing time: Fri 12 Apr 2024 01:12:05 +0000
ROA not before: Fri 12 Apr 2024 01:12:02 +0000
ROA not after: Sun 19 May 2024 01:12:02 +0000
asID: 138915
IP address blocks: 154.90.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43878 (0xab66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:12:02 2024 GMT
Not After : May 19 01:12:02 2024 GMT
Subject: CN=66188a65-b1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:03:99:20:1a:13:b8:93:a7:9f:a8:5c:8a:
d3:c4:ce:ca:3a:92:d7:b2:e6:71:f6:6d:8f:d2:e5:
b8:d2:32:13:db:ed:68:59:02:36:b9:41:9e:cb:0f:
ad:14:4f:99:b2:f1:76:00:62:c2:e6:85:cc:2d:18:
b1:5a:6c:7e:b3:97:f3:bc:4f:3f:d4:c3:b1:79:36:
a7:63:7f:40:79:e6:a9:cc:2d:0e:06:be:94:6e:09:
dc:90:ca:fb:7f:68:1d:0c:8a:a5:6c:0e:d4:8e:9e:
47:5d:06:1f:9d:02:81:0a:26:95:8b:33:09:03:d9:
ae:fc:19:db:2b:a7:b9:11:c9:70:8e:27:ee:79:65:
93:e4:be:7a:32:20:dd:91:42:bb:e9:f9:f0:e9:8a:
47:1a:c6:15:28:94:aa:cb:58:b4:f3:08:96:09:42:
6d:3d:ff:39:83:2a:8b:a9:b6:c7:3b:64:45:be:ed:
12:bc:74:2b:0a:67:39:a9:1d:1b:7f:04:11:3b:4b:
82:08:6b:57:0c:5c:71:45:40:5e:4f:0a:c5:56:c3:
ae:9c:99:39:7b:76:e4:39:56:c3:f8:3e:d8:8a:4a:
1d:37:2c:b4:bd:18:4f:21:97:09:b2:b8:c9:c0:d1:
74:f1:74:65:8c:de:a8:e1:c3:b9:c7:c0:d2:5b:66:
5b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C5:F0:DA:45:1F:D0:36:A9:37:98:F9:32:85:9F:4D:B0:52:E1:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD194EDEF86911EE9B2D1400017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.50.0/23
Signature Algorithm: sha256WithRSAEncryption
31:67:4a:5c:47:db:30:08:0e:a6:19:49:0c:26:00:d6:4c:64:
3a:4f:5f:e3:16:55:2c:b4:6f:ee:68:c5:51:d3:b5:73:5f:3d:
28:82:6c:f9:00:3b:99:f6:3e:d1:8d:84:53:1a:1a:cb:ff:b7:
6f:12:51:02:16:58:db:27:6e:5e:9b:de:6b:f1:ad:33:02:c4:
f3:fa:38:04:bb:e0:84:7c:d4:93:a2:a8:72:8a:54:ef:c1:b4:
4b:01:fb:19:5c:c3:c4:43:dd:6a:d8:78:ea:15:dd:78:36:72:
e5:b4:95:65:30:0a:e4:19:37:8d:cc:a9:cf:54:6a:a4:e9:93:
d6:f9:d4:ec:66:99:7a:9c:ac:8f:ff:e7:f3:97:d7:80:20:1a:
c7:76:4f:b0:96:35:5e:7f:4e:f3:6b:7f:76:0c:24:04:b5:c2:
e1:7e:61:3c:e0:9d:58:65:d4:c9:3a:1d:bb:a1:3d:6a:56:0e:
4c:c7:83:bc:01:7b:3a:fe:76:eb:8e:0a:f2:d4:ca:ab:62:67:
3a:43:82:7c:83:41:95:18:a7:ae:dd:18:d9:bc:cb:38:e7:1a:
72:35:cc:c9:1f:fc:b1:ea:59:c5:46:f6:d2:da:b3:77:4a:c9:
94:a9:21:a6:5e:97:ba:12:dc:f3:66:e2:06:90:65:65:c1:5f:
ac:e5:dc:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKtmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEyMDExMjAyWhcNMjQwNTE5MDExMjAyWjAYMRYw
FAYDVQQDEw02NjE4OGE2NS1iMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0M4DmSAaE7iTp5+oXIrTxM7KOpLXsuZx9m2P0uW40jIT2+1oWQI2uUGe
yw+tFE+ZsvF2AGLC5oXMLRixWmx+s5fzvE8/1MOxeTanY39AeeapzC0OBr6Ubgnc
kMr7f2gdDIqlbA7Ujp5HXQYfnQKBCiaVizMJA9mu/BnbK6e5EclwjifueWWT5L56
MiDdkUK76fnw6YpHGsYVKJSqy1i08wiWCUJtPf85gyqLqbbHO2RFvu0SvHQrCmc5
qR0bfwQRO0uCCGtXDFxxRUBeTwrFVsOunJk5e3bkOVbD+D7YikodNyy0vRhPIZcJ
srjJwNF08XRljN6o4cO5x8DSW2ZblQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJjF
8NpFH9A2qTeY+TKFn02wUuGTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BRDE5NEVERUY4NjkxMUVFOUIyRDE0MDAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmloyMA0GCSqGSIb3DQEB
CwUAA4IBAQAxZ0pcR9swCA6mGUkMJgDWTGQ6T1/jFlUstG/uaMVR07VzXz0ogmz5
ADuZ9j7RjYRTGhrL/7dvElECFljbJ25em95r8a0zAsTz+jgEu+CEfNSToqhyilTv
wbRLAfsZXMPEQ91q2HjqFd14NnLltJVlMArkGTeNzKnPVGqk6ZPW+dTsZpl6nKyP
/+fzl9eAIBrHdk+wljVef07za392DCQEtcLhfmE84J1YZdTJOh27oT1qVg5Mx4O8
AXs6/nbrjgry1MqrYmc6Q4J8g0GVGKeu3RjZvMs45xpyNczJH/yx6lnFRvbS2rN3
SsmUqSGmXpe6EtzzZuIGkGVlwV+s5dyB
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:28 2024 by rpki-client on console-ams.rpki-client.org