Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B66D7C54F8C711EEBE35C606017001B1.roa
File: B66D7C54F8C711EEBE35C606017001B1.roa (raw, json)
Hash identifier: pU/59BomDHnSNMWJ+VVZBVKxARj8e4pecwbz2LsxblQ=
Subject key identifier: E9:AC:41:C4:20:20:9E:ED:C1:53:E3:EE:AE:13:19:1C:7B:76:6C:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B66D7C54F8C711EEBE35C606017001B1.roa
Signing time: Fri 12 Apr 2024 12:25:14 +0000
ROA not before: Fri 12 Apr 2024 12:25:10 +0000
ROA not after: Tue 15 Apr 2025 12:25:10 +0000
asID: 150698
IP address blocks: 154.196.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43968 (0xabc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 12:25:10 2024 GMT
Not After : Apr 15 12:25:10 2025 GMT
Subject: CN=6619282a-65a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:7c:0c:a7:7c:00:90:ad:d6:a7:63:39:3c:
90:4f:14:d6:52:9b:36:6f:f0:40:f9:d1:cf:70:60:
04:a5:4f:73:dd:d0:be:d2:e8:0d:45:62:7c:f7:3e:
82:1e:c3:be:06:41:3f:25:4c:64:3b:a5:98:18:f2:
80:1e:c9:4d:87:a7:ae:bd:b5:d9:1b:09:af:db:9e:
3d:ac:32:7b:a3:01:e4:cc:0b:8e:3d:ac:75:00:5f:
3d:81:02:d2:b4:e2:e7:17:d4:ac:09:de:8d:2d:c7:
e7:c5:9f:e6:9c:19:90:ca:b9:6e:4c:20:b8:ea:b0:
96:52:ba:d6:c9:e1:0a:c7:7c:1a:83:fc:12:99:2b:
7c:1f:d8:16:2d:1e:bc:80:70:ce:3a:1c:7b:53:b3:
61:04:fe:32:9c:70:7b:00:d5:d7:1f:29:79:bc:19:
a1:6e:6f:1c:7e:50:82:18:32:ba:6e:b8:4e:d2:80:
b5:d2:f3:03:64:3f:5e:83:47:09:4a:8a:73:1d:d3:
02:0a:1a:14:76:4f:bd:b2:d7:e5:bb:fe:6f:46:56:
87:59:0a:1a:19:2b:af:27:c2:01:82:f3:a1:4e:53:
c4:c3:64:f8:99:c9:89:11:99:ea:90:b7:a3:59:51:
e5:63:b2:b6:12:8b:61:4b:48:ce:5d:e5:1f:37:bb:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:41:C4:20:20:9E:ED:C1:53:E3:EE:AE:13:19:1C:7B:76:6C:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B66D7C54F8C711EEBE35C606017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:60:3d:48:e5:2a:e4:b5:ed:dc:66:db:02:14:3a:95:11:22:
d3:f4:09:e3:2a:7a:4d:ae:9b:5f:45:ec:1a:c8:94:a9:fa:31:
a1:20:54:fe:35:c0:c0:df:70:9c:68:3a:84:a0:ae:ae:d9:a1:
68:14:6e:b9:6c:7b:15:e8:f4:f0:bc:83:17:b6:94:37:70:c9:
6f:c5:39:f5:d7:01:1a:5e:09:17:8d:8a:3d:49:cf:ec:a8:b7:
4f:18:f8:e6:7e:83:fa:c6:8e:7e:c0:b8:d5:83:b6:1e:ce:38:
cc:f7:f5:22:ad:fc:d2:54:bf:17:a2:a8:cc:74:17:74:2d:40:
9f:44:1f:93:85:27:1b:63:82:53:5b:c7:c1:d5:d9:ad:9b:6e:
13:af:e7:a3:19:87:f0:e2:d3:94:fb:a4:52:36:15:ec:9e:c5:
85:9a:d7:97:b7:e7:59:75:ab:98:42:9a:b3:bb:3f:51:f0:cc:
91:da:a8:e2:b8:13:17:0d:be:43:d0:76:8e:f4:30:e9:4c:63:
43:bf:e0:91:88:3a:26:c4:f7:10:ee:bb:bd:30:7e:1c:72:73:
d3:ea:a2:53:d4:62:4b:67:2a:c2:fd:99:93:2e:25:63:f5:fa:
ac:63:60:76:9c:af:57:b6:9c:e7:fc:c5:14:83:81:8f:c7:c2:
e5:bd:ef:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKvAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEyMTIyNTEwWhcNMjUwNDE1MTIyNTEwWjAYMRYw
FAYDVQQDEw02NjE5MjgyYS02NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5bF8DKd8AJCt1qdjOTyQTxTWUps2b/BA+dHPcGAEpU9z3dC+0ugNRWJ8
9z6CHsO+BkE/JUxkO6WYGPKAHslNh6euvbXZGwmv2549rDJ7owHkzAuOPax1AF89
gQLStOLnF9SsCd6NLcfnxZ/mnBmQyrluTCC46rCWUrrWyeEKx3wag/wSmSt8H9gW
LR68gHDOOhx7U7NhBP4ynHB7ANXXHyl5vBmhbm8cflCCGDK6brhO0oC10vMDZD9e
g0cJSopzHdMCChoUdk+9stflu/5vRlaHWQoaGSuvJ8IBgvOhTlPEw2T4mcmJEZnq
kLejWVHlY7K2EothS0jOXeUfN7tuYwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOms
QcQgIJ7twVPj7q4TGRx7dmzpMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjZEN0M1NEY4QzcxMUVFQkUzNUM2MDYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsRcMA0GCSqGSIb3DQEB
CwUAA4IBAQBsYD1I5Srkte3cZtsCFDqVESLT9AnjKnpNrptfRewayJSp+jGhIFT+
NcDA33CcaDqEoK6u2aFoFG65bHsV6PTwvIMXtpQ3cMlvxTn11wEaXgkXjYo9Sc/s
qLdPGPjmfoP6xo5+wLjVg7YezjjM9/UirfzSVL8XoqjMdBd0LUCfRB+ThScbY4JT
W8fB1dmtm24Tr+ejGYfw4tOU+6RSNhXsnsWFmteXt+dZdauYQpqzuz9R8MyR2qji
uBMXDb5D0HaO9DDpTGNDv+CRiDomxPcQ7ru9MH4ccnPT6qJT1GJLZyrC/ZmTLiVj
9fqsY2B2nK9Xtpzn/MUUg4GPx8Llve9F
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org