Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E243D0F0F86B11EEA12DE116017001B1.roa
File: E243D0F0F86B11EEA12DE116017001B1.roa (raw, json)
Hash identifier: WnZpSeyYDInqiDzklrfpVPONg4YZr3MVq6BFZKE6DEw=
Subject key identifier: 88:90:E0:ED:A3:C0:D6:D2:4C:84:88:23:30:7D:A7:F8:33:E9:68:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E243D0F0F86B11EEA12DE116017001B1.roa
Signing time: Fri 12 Apr 2024 01:27:54 +0000
ROA not before: Fri 12 Apr 2024 01:27:50 +0000
ROA not after: Sun 19 May 2024 01:27:50 +0000
asID: 138915
IP address blocks: 154.93.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43904 (0xab80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 01:27:50 2024 GMT
Not After : May 19 01:27:50 2024 GMT
Subject: CN=66188e1a-e0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:9b:f2:3e:ad:32:c4:0b:d3:f1:02:db:1c:
f4:9f:63:be:b3:59:71:7f:8b:e4:fd:bf:7c:a9:a6:
9e:f7:d9:d1:7d:f0:e5:cb:84:ff:60:75:2a:92:aa:
83:3f:74:6d:4b:77:6e:53:8b:2c:82:3f:48:1f:bc:
90:b5:1e:b8:2f:b6:cc:98:cd:58:36:97:bf:13:12:
e1:52:90:ed:0e:3e:0f:fe:da:a7:79:1a:ce:03:2e:
4f:c3:0f:6b:d6:ac:67:2f:55:e6:4b:7a:f6:8f:b4:
50:db:db:3c:16:e9:50:9e:bf:7d:f5:ab:33:69:66:
dd:82:69:46:44:4f:7a:39:2b:14:7c:84:5d:59:c7:
3d:80:6f:e3:6e:e7:b9:b6:e7:a8:59:91:be:16:13:
6f:d5:8c:bd:c6:2c:ec:c5:e9:f4:08:8a:31:4a:e9:
dc:78:75:02:21:46:d6:42:08:31:b7:66:18:25:f4:
98:b6:1b:c5:06:4b:93:d4:ca:1c:4e:55:63:ab:91:
77:e8:bd:57:b6:0e:e0:9c:7a:53:ee:c7:69:df:d6:
56:16:4b:c3:c0:de:f3:4e:c2:d7:72:0f:78:e0:74:
8c:8a:fd:0b:cf:b4:3c:e6:78:a1:09:eb:65:2d:cd:
30:93:25:0a:33:6a:35:a9:95:44:71:65:d6:d5:88:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:E0:ED:A3:C0:D6:D2:4C:84:88:23:30:7D:A7:F8:33:E9:68:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E243D0F0F86B11EEA12DE116017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.48.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ff:25:f9:57:fc:d3:89:21:35:2c:c5:3b:c6:2a:1d:11:65:
ef:4d:90:f6:58:57:24:b2:6d:5b:e1:3c:fe:9e:35:ba:49:59:
bf:c5:5e:24:e6:5b:14:17:8d:fd:e3:a9:84:5a:3f:4c:79:e3:
9c:72:89:5e:29:d9:91:69:36:fe:a8:11:6f:30:6f:8b:a0:bd:
46:c0:b8:28:50:fd:98:89:4d:27:7f:96:12:e6:31:43:85:96:
63:7d:52:8d:7f:db:4b:6a:0b:a4:1d:1a:eb:d5:b7:01:fa:9c:
b7:9c:b6:e0:52:fa:e6:80:e9:39:16:04:da:c2:ab:43:b1:5a:
c5:38:50:8c:f6:91:ac:88:2b:35:b5:20:08:67:c9:bd:eb:98:
cd:92:11:ed:c8:78:12:aa:b6:6f:56:b1:64:f8:7d:11:d2:75:
76:90:2f:4a:12:71:d7:4b:d2:d8:f7:97:ce:2c:fd:fa:84:56:
b3:57:48:c5:03:d6:b0:2a:8e:0e:59:f5:65:87:a5:1c:2b:6d:
17:ce:f7:25:aa:96:3d:08:6d:71:ea:63:c9:23:c9:f2:b8:90:
07:9e:33:c2:12:74:ca:cf:61:e2:88:80:59:13:73:c8:de:ee:
35:c8:74:84:66:5b:9b:36:ff:c2:b3:6e:2f:d8:58:4e:b5:cf:
cc:c7:e9:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKuAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDEyMDEyNzUwWhcNMjQwNTE5MDEyNzUwWjAYMRYw
FAYDVQQDEw02NjE4OGUxYS1lMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0GKb8j6tMsQL0/EC2xz0n2O+s1lxf4vk/b98qaae99nRffDly4T/YHUq
kqqDP3RtS3duU4ssgj9IH7yQtR64L7bMmM1YNpe/ExLhUpDtDj4P/tqneRrOAy5P
ww9r1qxnL1XmS3r2j7RQ29s8FulQnr999aszaWbdgmlGRE96OSsUfIRdWcc9gG/j
bue5tueoWZG+FhNv1Yy9xizsxen0CIoxSunceHUCIUbWQggxt2YYJfSYthvFBkuT
1MocTlVjq5F36L1Xtg7gnHpT7sdp39ZWFkvDwN7zTsLXcg944HSMiv0Lz7Q85nih
CetlLc0wkyUKM2o1qZVEcWXW1YgPowIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIiQ
4O2jwNbSTISIIzB9p/gz6WiBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FMjQzRDBGMEY4NkIxMUVFQTEyREUxMTYwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml0wMA0GCSqGSIb3DQEB
CwUAA4IBAQCJ/yX5V/zTiSE1LMU7xiodEWXvTZD2WFcksm1b4Tz+njW6SVm/xV4k
5lsUF43946mEWj9MeeOccoleKdmRaTb+qBFvMG+LoL1GwLgoUP2YiU0nf5YS5jFD
hZZjfVKNf9tLagukHRrr1bcB+py3nLbgUvrmgOk5FgTawqtDsVrFOFCM9pGsiCs1
tSAIZ8m965jNkhHtyHgSqrZvVrFk+H0R0nV2kC9KEnHXS9LY95fOLP36hFazV0jF
A9awKo4OWfVlh6UcK20XzvclqpY9CG1x6mPJI8nyuJAHnjPCEnTKz2HiiIBZE3PI
3u41yHSEZlubNv/Cs24v2FhOtc/Mx+md
-----END CERTIFICATE-----
Generated at Fri May 3 04:36:22 2024 by rpki-client on console-ams.rpki-client.org