Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1E0BB6C82BF11EE8196D6414AD9E6FC.roa
File: F1E0BB6C82BF11EE8196D6414AD9E6FC.roa (raw, json)
Hash identifier: gvwNzGDhYu3x1JR7i+uIB6ZAbA1WDnGwqYDmo+AlyWM=
Subject key identifier: E4:32:9D:5F:C1:4C:C6:63:E8:0E:91:83:26:A1:F2:6E:47:8E:30:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5014
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1E0BB6C82BF11EE8196D6414AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:32:20 +0000
ROA not before: Tue 14 Nov 2023 07:32:17 +0000
ROA not after: Tue 12 Nov 2024 07:32:17 +0000
asID: 397630
IP address blocks: 154.201.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20500 (0x5014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:32:17 2023 GMT
Not After : Nov 12 07:32:17 2024 GMT
Subject: CN=65532284-b30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:e7:d0:c4:0e:48:76:b2:b9:c1:72:c3:78:
90:d8:20:46:bf:33:13:49:f1:7b:3d:60:6c:24:7e:
c0:60:73:b3:e6:a5:3b:42:0b:b3:6c:f8:87:49:cf:
3b:10:94:5e:75:86:88:d7:d0:93:eb:60:81:18:41:
a6:f7:3e:93:c5:75:e0:a5:23:8e:d9:8c:f4:a9:54:
44:f5:f5:5c:0f:be:31:26:ef:71:b1:77:02:90:70:
38:aa:5a:aa:8a:17:51:8f:b2:c1:a7:8b:8d:e6:ee:
79:57:3e:9e:4f:87:4c:9f:9c:f5:a8:31:a9:a9:69:
30:c0:f9:11:8d:36:db:20:fc:8a:fe:7a:ff:ab:62:
7d:cf:d1:5f:91:b7:6b:4c:e5:3d:de:ea:70:31:08:
20:ce:ed:4a:e9:f1:c2:d8:c3:92:79:f8:bf:83:8c:
9d:76:c0:36:f8:ce:c3:16:66:29:59:6b:50:e8:6a:
11:bd:fa:82:86:22:c4:0e:76:61:98:cb:30:95:ca:
5d:e3:e8:36:20:5a:c9:8c:21:96:9e:23:2a:45:48:
f2:4a:83:b1:d0:90:f4:9e:99:2f:6b:b2:5e:2d:a9:
f5:8e:f5:f2:ef:85:9c:10:84:2a:9b:e8:59:7d:2a:
c1:8b:13:3e:99:ce:01:1e:12:47:ec:73:51:7c:9d:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:9D:5F:C1:4C:C6:63:E8:0E:91:83:26:A1:F2:6E:47:8E:30:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1E0BB6C82BF11EE8196D6414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.37.0/24
Signature Algorithm: sha256WithRSAEncryption
16:71:1d:3f:9d:33:d5:91:0e:ce:6d:d1:94:4a:b2:9c:d0:e9:
b0:eb:29:10:af:7f:79:df:53:a2:bf:7e:64:50:75:da:64:2f:
3f:61:f9:6b:03:a9:08:5c:38:79:4e:11:f5:12:0e:89:5f:b2:
0b:5c:a3:d4:7c:19:62:06:58:aa:a4:4b:eb:48:2e:3a:0e:e2:
f9:ff:f1:8c:5a:cc:e5:4f:1b:c0:4f:26:2e:36:e2:f6:fb:d1:
e4:01:76:19:1d:e2:0b:01:31:05:cb:40:d6:66:d4:eb:88:73:
18:e5:89:e9:27:69:ff:b1:8b:f6:e2:6d:af:a1:b0:f1:41:8f:
2b:08:1c:37:ba:45:c5:d8:fd:57:9c:54:39:23:14:59:34:d2:
e4:2d:36:9f:2f:3f:ad:63:fd:92:91:31:f1:8f:f8:25:65:74:
c8:b3:42:a9:ac:7c:2b:aa:08:ca:ad:c8:72:ec:41:54:a5:d8:
a5:c2:14:e1:54:3c:dd:d9:b7:b4:1c:f1:6a:a2:07:60:35:22:
74:b3:6d:df:72:3d:96:71:8f:3a:f4:a4:ef:80:36:02:61:72:
94:aa:f1:4a:8b:fe:ca:0e:64:c0:cd:67:2f:38:a3:33:e9:44:
dc:4f:ac:93:c1:f1:d8:20:4c:66:18:ba:9e:c6:e3:7e:64:ad:
c8:aa:fa:21
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICUBQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMTQwNzMyMTdaFw0yNDExMTIwNzMyMTdaMBgxFjAU
BgNVBAMTDTY1NTMyMjg0LWIzMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNCufQxA5IdrK5wXLDeJDYIEa/MxNJ8Xs9YGwkfsBgc7PmpTtCC7Ns+IdJ
zzsQlF51hojX0JPrYIEYQab3PpPFdeClI47ZjPSpVET19VwPvjEm73GxdwKQcDiq
WqqKF1GPssGni43m7nlXPp5Ph0yfnPWoMampaTDA+RGNNtsg/Ir+ev+rYn3P0V+R
t2tM5T3e6nAxCCDO7Urp8cLYw5J5+L+DjJ12wDb4zsMWZilZa1DoahG9+oKGIsQO
dmGYyzCVyl3j6DYgWsmMIZaeIypFSPJKg7HQkPSemS9rsl4tqfWO9fLvhZwQhCqb
6Fl9KsGLEz6ZzgEeEkfsc1F8nf9rAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU5DKd
X8FMxmPoDpGDJqHybkeOMIEwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0YxRTBCQjZDODJCRjExRUU4MTk2RDY0MTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaySUwDQYJKoZIhvcNAQEL
BQADggEBABZxHT+dM9WRDs5t0ZRKspzQ6bDrKRCvf3nfU6K/fmRQddpkLz9h+WsD
qQhcOHlOEfUSDolfsgtco9R8GWIGWKqkS+tILjoO4vn/8YxazOVPG8BPJi424vb7
0eQBdhkd4gsBMQXLQNZm1OuIcxjlieknaf+xi/biba+hsPFBjysIHDe6RcXY/Vec
VDkjFFk00uQtNp8vP61j/ZKRMfGP+CVldMizQqmsfCuqCMqtyHLsQVSl2KXCFOFU
PN3Zt7Qc8WqiB2A1InSzbd9yPZZxjzr0pO+ANgJhcpSq8UqL/soOZMDNZy84ozPp
RNxPrJPB8dggTGYYup7G435krciq+iE=
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:29 2024 by rpki-client on console-ams.rpki-client.org