Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C9A69C037F11EF91941067017001B1.roa
File: 57C9A69C037F11EF91941067017001B1.roa (raw, json)
Hash identifier: lGfOG7zx1OIHaITCyAjvkC24Fr76fTFuuQeG+3F6VNo=
Subject key identifier: 63:7E:40:11:15:F7:92:0D:D5:A3:53:E5:07:B9:6E:5F:09:65:82:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B142
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C9A69C037F11EF91941067017001B1.roa
Signing time: Fri 26 Apr 2024 03:44:54 +0000
ROA not before: Fri 26 Apr 2024 03:44:51 +0000
ROA not after: Tue 03 Sep 2024 03:44:51 +0000
asID: 136800
IP address blocks: 154.210.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45378 (0xb142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:44:51 2024 GMT
Not After : Sep 3 03:44:51 2024 GMT
Subject: CN=662b2336-b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:b6:34:fa:0a:39:87:c5:fb:d3:ef:1a:0a:
65:18:f5:9e:1d:aa:b6:66:c3:5d:97:33:2c:ba:ad:
eb:68:02:8d:4e:38:ca:1e:41:b3:3f:35:f1:a8:ee:
aa:4b:3a:12:f5:ee:ed:e9:98:83:60:aa:68:50:15:
aa:be:df:08:f8:36:c2:08:db:51:69:79:01:6d:a3:
00:dc:91:0b:29:85:73:8c:a6:77:a1:76:dd:e4:d0:
6a:5e:6f:3e:3f:2e:93:3e:8a:f6:8c:d4:ba:c3:2c:
75:fd:0e:fd:b5:03:d4:d0:e5:cb:4d:03:82:74:01:
50:d0:e3:fc:8e:c7:55:00:e0:cb:39:1d:c6:7b:7b:
45:67:2f:a8:2a:89:ab:fb:81:43:58:49:81:c1:e3:
2c:da:44:07:23:62:5d:cf:b7:5d:07:40:52:d8:c6:
91:11:c1:c8:dd:e4:65:79:5e:d2:78:5c:76:85:a6:
98:37:6e:85:ef:c2:d2:98:3e:08:a5:ef:e6:4d:ab:
3d:41:d8:66:76:c3:1f:f6:68:4c:ba:c8:1b:0c:db:
68:31:64:55:a9:ac:d7:1c:1a:2b:dc:42:a2:88:62:
fe:ca:1e:a3:dc:84:54:df:6e:4d:32:c6:3e:34:dd:
e3:b8:8d:6f:ad:5d:81:ff:74:5f:9e:54:0b:e9:87:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:40:11:15:F7:92:0D:D5:A3:53:E5:07:B9:6E:5F:09:65:82:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57C9A69C037F11EF91941067017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:9f:fa:e6:76:4e:3c:8a:5f:80:85:21:1b:79:30:19:d2:50:
e2:bc:25:70:d3:80:fe:14:1f:d2:22:88:5e:95:57:82:66:2e:
e8:ba:b3:25:a9:80:d4:aa:62:a0:4b:b2:fb:4d:3b:9d:6f:52:
00:75:90:20:48:51:3e:6c:15:fc:00:7c:f9:81:5e:e6:23:33:
5a:c7:96:18:4f:2f:25:c0:e9:63:68:3d:08:d4:9a:cf:04:0d:
8f:f3:5e:bc:97:26:c1:f4:14:9f:67:86:63:95:d0:89:a2:43:
cd:64:d8:9e:0f:70:82:06:4e:b3:99:72:74:46:a6:aa:43:38:
81:06:34:87:e7:96:a6:96:c7:ac:7a:f6:70:56:6d:b9:f1:ba:
dc:60:94:40:cf:99:73:fd:cb:46:b8:2b:28:e0:3f:f1:35:3c:
4a:05:54:bc:4d:16:f7:cd:04:a5:aa:51:5d:f1:c7:7f:e2:26:
79:95:c8:3e:e5:21:a9:98:96:2b:6a:4b:59:50:e5:08:e4:d0:
a9:14:9c:f1:bf:76:17:33:91:87:11:9a:e8:29:bd:e4:a5:e0:
d1:40:4b:bd:00:33:ba:b9:28:fa:fb:70:d6:c2:a6:c0:8a:b2:
4d:6f:4a:88:88:60:1b:37:ca:b3:11:a7:90:2b:c3:b8:25:4f:
65:0c:77:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALFCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDM0NDUxWhcNMjQwOTAzMDM0NDUxWjAYMRYw
FAYDVQQDEw02NjJiMjMzNi1iODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2lG2NPoKOYfF+9PvGgplGPWeHaq2ZsNdlzMsuq3raAKNTjjKHkGzPzXx
qO6qSzoS9e7t6ZiDYKpoUBWqvt8I+DbCCNtRaXkBbaMA3JELKYVzjKZ3oXbd5NBq
Xm8+Py6TPor2jNS6wyx1/Q79tQPU0OXLTQOCdAFQ0OP8jsdVAODLOR3Ge3tFZy+o
Komr+4FDWEmBweMs2kQHI2Jdz7ddB0BS2MaREcHI3eRleV7SeFx2haaYN26F78LS
mD4Ipe/mTas9QdhmdsMf9mhMusgbDNtoMWRVqazXHBor3EKiiGL+yh6j3IRU325N
MsY+NN3juI1vrV2B/3RfnlQL6YcjjQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGN+
QBEV95IN1aNT5Qe5bl8JZYKGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81N0M5QTY5QzAzN0YxMUVGOTE5NDEwNjcwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtKAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrn/rmdk48il+AhSEbeTAZ0lDivCVw04D+FB/SIohelVeCZi7ourMl
qYDUqmKgS7L7TTudb1IAdZAgSFE+bBX8AHz5gV7mIzNax5YYTy8lwOljaD0I1JrP
BA2P8168lybB9BSfZ4ZjldCJokPNZNieD3CCBk6zmXJ0RqaqQziBBjSH55amlses
evZwVm258brcYJRAz5lz/ctGuCso4D/xNTxKBVS8TRb3zQSlqlFd8cd/4iZ5lcg+
5SGpmJYraktZUOUI5NCpFJzxv3YXM5GHEZroKb3kpeDRQEu9ADO6uSj6+3DWwqbA
irJNb0qIiGAbN8qzEaeQK8O4JU9lDHeG
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:22 2024 by rpki-client on console-ams.rpki-client.org