Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7104B58C037C11EFA27AB750017001B1.roa
File: 7104B58C037C11EFA27AB750017001B1.roa (raw, json)
Hash identifier: wh+m+i7LG1mPkZxhJl/rV6uVgGG3d2mYwJ/9YV5MtaQ=
Subject key identifier: 53:83:E1:F9:17:59:1A:D6:39:B4:9C:72:83:6E:4F:FF:7E:2D:1C:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B12A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7104B58C037C11EFA27AB750017001B1.roa
Signing time: Fri 26 Apr 2024 03:24:08 +0000
ROA not before: Fri 26 Apr 2024 03:24:04 +0000
ROA not after: Sun 26 May 2024 03:24:04 +0000
asID: 62240
IP address blocks: 154.194.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45354 (0xb12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 03:24:04 2024 GMT
Not After : May 26 03:24:04 2024 GMT
Subject: CN=662b1e58-fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:5a:01:26:53:26:59:ae:20:fd:2c:ac:2f:
4c:e5:3b:2e:52:0d:51:85:52:51:4f:c9:f0:b0:53:
bc:b3:b5:e1:d9:39:40:20:9d:83:7b:5c:6b:2c:49:
99:fc:15:de:57:4a:8c:99:78:aa:d3:8a:b5:5a:e7:
fc:1d:72:0f:df:0a:fd:20:4e:88:d3:4e:b7:8c:aa:
17:8b:26:62:37:e2:f5:fc:53:d0:8d:74:b9:08:b2:
3d:83:a2:38:fd:30:8f:09:a0:9a:1b:76:57:ba:82:
a9:90:81:a9:e2:28:bc:f8:69:66:04:48:87:07:04:
14:8f:21:f3:64:2e:e0:ab:20:6d:ef:20:15:ba:60:
1d:e4:c4:50:0a:e8:69:cd:73:9a:22:a3:2b:d5:61:
39:04:02:ff:97:65:b8:d9:3a:55:89:bb:3f:81:c9:
95:78:5f:0c:6e:36:ff:41:c5:6c:07:a2:ab:99:cc:
dc:e3:06:95:57:bb:fe:4a:a5:76:dd:e9:2b:f0:4e:
93:e6:5c:a9:97:cf:8c:fe:13:f4:80:43:b4:01:b7:
e5:c3:1f:1f:c5:93:bf:9c:a5:0c:79:e6:06:94:53:
65:e2:88:47:8e:76:9a:fc:19:29:0f:cf:d2:c6:72:
66:8b:a5:f5:20:42:31:63:c5:ce:47:f6:20:14:1b:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:83:E1:F9:17:59:1A:D6:39:B4:9C:72:83:6E:4F:FF:7E:2D:1C:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7104B58C037C11EFA27AB750017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.96.0/19
Signature Algorithm: sha256WithRSAEncryption
52:77:67:ee:e5:24:ed:ea:80:dd:11:e4:d9:f0:d4:46:05:c6:
8c:2c:67:0d:c7:e8:1d:ab:20:18:79:cd:1f:e4:e5:35:77:e9:
7d:8a:b7:1a:4c:07:94:c0:f3:1b:d1:19:66:b7:b3:3b:f6:e9:
76:96:46:a6:63:ec:20:b0:4f:7b:3e:6c:1a:85:03:a1:3d:b0:
69:68:57:96:a7:ac:3a:39:47:bf:b2:1d:a8:c7:c4:6a:a1:bc:
5b:1b:5f:f6:dd:6e:35:0b:df:da:91:ef:ad:90:7e:c6:30:88:
3e:d6:00:7c:d5:87:7a:75:09:b7:2d:4a:ad:e9:e6:07:2f:0e:
d6:d3:10:ab:58:f1:4c:2b:4b:7d:57:ec:b3:0e:0b:b2:84:6c:
a3:94:16:76:c4:ef:a5:fd:25:8d:38:34:05:49:a4:42:37:ec:
b6:1a:13:ae:94:d8:b9:3f:d3:3d:69:fd:81:27:db:a7:8f:1d:
15:06:a5:b8:76:57:b0:2f:33:61:8f:cd:1b:a0:b3:64:1e:3f:
dc:96:4b:de:e9:69:06:11:2d:5a:9c:d5:79:03:99:d1:9f:c3:
c2:23:01:d8:93:b7:b2:d5:26:38:4e:d6:0c:c0:9f:fa:83:4d:
fb:05:f3:e6:16:8e:2d:d5:e8:8f:57:e1:1d:4f:38:54:63:38:
9a:ad:eb:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALEqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI2MDMyNDA0WhcNMjQwNTI2MDMyNDA0WjAYMRYw
FAYDVQQDEw02NjJiMWU1OC1mYjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArixaASZTJlmuIP0srC9M5TsuUg1RhVJRT8nwsFO8s7Xh2TlAIJ2De1xr
LEmZ/BXeV0qMmXiq04q1Wuf8HXIP3wr9IE6I0063jKoXiyZiN+L1/FPQjXS5CLI9
g6I4/TCPCaCaG3ZXuoKpkIGp4ii8+GlmBEiHBwQUjyHzZC7gqyBt7yAVumAd5MRQ
CuhpzXOaIqMr1WE5BAL/l2W42TpVibs/gcmVeF8Mbjb/QcVsB6Krmczc4waVV7v+
SqV23ekr8E6T5lypl8+M/hP0gEO0Abflwx8fxZO/nKUMeeYGlFNl4ohHjnaa/Bkp
D8/SxnJmi6X1IEIxY8XOR/YgFBu1kwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFOD
4fkXWRrWObSccoNuT/9+LRxgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83MTA0QjU4QzAzN0MxMUVGQTI3QUI3NTAwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsJgMA0GCSqGSIb3DQEB
CwUAA4IBAQBSd2fu5STt6oDdEeTZ8NRGBcaMLGcNx+gdqyAYec0f5OU1d+l9irca
TAeUwPMb0Rlmt7M79ul2lkamY+wgsE97PmwahQOhPbBpaFeWp6w6OUe/sh2ox8Rq
obxbG1/23W41C9/ake+tkH7GMIg+1gB81Yd6dQm3LUqt6eYHLw7W0xCrWPFMK0t9
V+yzDguyhGyjlBZ2xO+l/SWNODQFSaRCN+y2GhOulNi5P9M9af2BJ9unjx0VBqW4
dlewLzNhj80boLNkHj/clkve6WkGES1anNV5A5nRn8PCIwHYk7ey1SY4TtYMwJ/6
g037BfPmFo4t1eiPV+EdTzhUYziarev3
-----END CERTIFICATE-----
Generated at Mon May 20 03:21:24 2024 by rpki-client on console-ams.rpki-client.org