Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E194D1E0B5411EF9AEFB938017001B1.roa
File: 9E194D1E0B5411EF9AEFB938017001B1.roa (raw, json)
Hash identifier: ux5ALf2NKCNDkuOfm0vgyeRs2rMOYiKiwL63yyYSLlo=
Subject key identifier: 35:41:83:8C:48:3A:99:71:99:23:26:D8:A6:EC:CA:F2:3A:77:B7:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E194D1E0B5411EF9AEFB938017001B1.roa
Signing time: Mon 06 May 2024 02:59:13 +0000
ROA not before: Mon 06 May 2024 02:59:10 +0000
ROA not after: Tue 11 Jun 2024 02:59:10 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46282 (0xb4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:59:10 2024 GMT
Not After : Jun 11 02:59:10 2024 GMT
Subject: CN=66384781-9a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:af:e2:f9:eb:c9:a8:25:8c:d5:ff:18:db:
25:14:40:ad:ef:95:bd:2c:38:eb:aa:57:5b:f9:18:
58:31:d3:a8:aa:94:6e:53:60:0d:fe:12:ae:4f:8c:
88:c4:f0:ce:b4:b2:c9:67:5d:eb:4a:92:b9:ba:82:
70:7a:c9:a0:c3:c5:41:11:1d:9a:9d:ec:a7:7a:b6:
d2:5a:e2:55:b5:85:3e:29:b5:96:bc:b5:4a:52:2a:
19:7d:b6:18:1b:ac:85:4b:18:df:1d:0d:be:c7:a3:
41:44:5f:12:70:47:c5:6e:ee:93:c7:2b:22:23:fa:
d6:20:50:db:33:17:ae:b5:e8:e2:7a:50:c5:f5:18:
d9:d1:9e:a2:10:3e:c2:14:15:ee:17:be:c8:70:34:
9e:34:9b:d0:21:56:63:b4:e4:5c:f3:a2:78:39:8d:
9e:11:61:f9:0c:fb:18:6f:02:3c:6f:5d:0d:40:b8:
57:50:59:4f:71:ef:7d:21:43:7e:b8:6f:b2:bd:97:
ac:d1:de:fd:db:95:78:f5:5f:e5:42:66:5c:88:c8:
0f:25:51:b1:67:f8:fd:ca:fa:a7:c0:7d:cf:ec:18:
41:1e:55:90:e7:db:fa:ae:f2:f5:b3:c6:51:30:2a:
9a:56:52:95:7f:b4:0b:3b:10:2c:42:3c:c1:c1:85:
6f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:83:8C:48:3A:99:71:99:23:26:D8:A6:EC:CA:F2:3A:77:B7:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E194D1E0B5411EF9AEFB938017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:3b:f4:ab:98:91:a3:3c:f6:b5:b9:5b:d1:b9:80:05:26:4b:
97:a4:1a:a4:2d:9b:50:8b:8f:22:76:87:75:5b:87:b2:07:66:
87:de:4b:56:56:f5:52:d7:18:e2:01:75:cc:b5:3f:79:22:30:
34:62:d0:0c:b3:eb:e9:d5:e9:73:c7:fa:61:2e:d6:80:40:46:
2e:81:44:29:8c:93:ae:99:f3:16:f5:fd:37:42:b0:2a:d9:a5:
50:70:c1:5a:66:d5:e4:ca:19:51:dc:37:b5:e0:ad:ec:b4:47:
e8:1f:6a:8b:71:23:b6:b7:7f:7f:47:e5:08:81:08:76:32:95:
5c:2f:59:a2:19:23:00:71:58:76:37:96:90:f0:35:a4:06:b5:
38:a9:e8:8d:0c:0d:4a:bd:56:0d:ec:6e:f1:be:09:57:8c:c1:
7d:9a:31:3c:68:7e:f8:d0:53:91:5f:99:64:8a:36:86:68:d5:
0a:6f:10:6d:33:25:c9:9c:95:d0:8a:79:90:71:92:b9:33:bb:
e9:f3:ab:36:28:6f:5c:6f:0f:2d:35:5c:08:f1:2e:46:aa:28:
e0:3e:2c:8b:9f:9a:04:95:f6:7f:4f:ad:23:b1:0e:d9:43:19:
33:c3:ea:62:c4:7d:46:8f:43:e4:22:6f:b6:54:f4:fe:f2:51:
44:38:b1:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALTKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTA2MDI1OTEwWhcNMjQwNjExMDI1OTEwWjAYMRYw
FAYDVQQDEw02NjM4NDc4MS05YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAou+v4vnryagljNX/GNslFECt75W9LDjrqldb+RhYMdOoqpRuU2AN/hKu
T4yIxPDOtLLJZ13rSpK5uoJwesmgw8VBER2aneynerbSWuJVtYU+KbWWvLVKUioZ
fbYYG6yFSxjfHQ2+x6NBRF8ScEfFbu6TxysiI/rWIFDbMxeutejielDF9RjZ0Z6i
ED7CFBXuF77IcDSeNJvQIVZjtORc86J4OY2eEWH5DPsYbwI8b10NQLhXUFlPce99
IUN+uG+yvZes0d7925V49V/lQmZciMgPJVGxZ/j9yvqnwH3P7BhBHlWQ59v6rvL1
s8ZRMCqaVlKVf7QLOxAsQjzBwYVvSQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDVB
g4xIOplxmSMm2KbsyvI6d7eYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC85RTE5NEQxRTBCNTQxMUVGOUFFRkI5MzgwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsurMA0GCSqGSIb3DQEB
CwUAA4IBAQDNO/SrmJGjPPa1uVvRuYAFJkuXpBqkLZtQi48idod1W4eyB2aH3ktW
VvVS1xjiAXXMtT95IjA0YtAMs+vp1elzx/phLtaAQEYugUQpjJOumfMW9f03QrAq
2aVQcMFaZtXkyhlR3De14K3stEfoH2qLcSO2t39/R+UIgQh2MpVcL1miGSMAcVh2
N5aQ8DWkBrU4qeiNDA1KvVYN7G7xvglXjMF9mjE8aH740FORX5lkijaGaNUKbxBt
MyXJnJXQinmQcZK5M7vp86s2KG9cbw8tNVwI8S5GqijgPiyLn5oElfZ/T60jsQ7Z
Qxkzw+pixH1Gj0PkIm+2VPT+8lFEOLFA
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:27 2024 by rpki-client on console-ams.rpki-client.org