Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C8C8BC061011EFB3F8C653017001B1.roa
File: 37C8C8BC061011EFB3F8C653017001B1.roa (raw, json)
Hash identifier: 5ct3fSZJAWjGoWeGsWnPR+IQj6WKCXJVidXSKInbh/o=
Subject key identifier: CF:20:4D:54:94:A5:29:0B:C8:CD:0E:B8:09:F5:5E:87:43:B9:2B:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B226
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C8C8BC061011EFB3F8C653017001B1.roa
Signing time: Mon 29 Apr 2024 10:07:00 +0000
ROA not before: Mon 29 Apr 2024 10:06:56 +0000
ROA not after: Fri 07 Jun 2024 10:06:56 +0000
asID: 138915
IP address blocks: 154.223.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45606 (0xb226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:06:56 2024 GMT
Not After : Jun 7 10:06:56 2024 GMT
Subject: CN=662f7144-f7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:9a:e6:3b:e4:42:98:43:87:ee:2a:a9:03:
ae:95:4e:b3:7c:7c:e1:58:f7:8e:5f:b0:5d:32:81:
dc:f0:48:ed:63:3f:37:f6:e0:ec:74:0b:d4:a0:ea:
c4:8f:ae:a9:8a:b6:1f:20:44:30:d1:2b:b7:ef:56:
02:0e:07:6c:41:93:46:9f:b8:96:d2:fc:e6:92:50:
a9:ed:1f:d8:95:ee:f9:ee:ea:ab:d9:2b:ab:57:10:
4a:5d:a9:5c:3d:93:6d:a5:06:90:ee:ee:73:f8:c1:
24:d7:a0:91:db:e8:d0:f8:88:2e:1a:4f:d2:33:24:
2a:98:e9:16:43:5a:5e:08:5a:9d:59:7e:a3:af:7b:
46:ee:ad:35:16:bb:d2:fb:51:c7:aa:cb:27:4b:56:
78:d8:78:c3:c9:f9:4b:e7:80:ac:ec:88:2d:94:1a:
80:49:83:04:64:ad:d4:05:90:fe:4a:c2:5e:b5:2e:
82:d5:5c:ba:a7:91:a3:df:22:19:cf:bb:89:ec:ef:
73:f8:03:8a:5a:26:35:3c:a0:67:14:49:f7:aa:f9:
c0:2a:ca:1f:af:4e:fb:59:59:4b:3f:2c:a4:92:fe:
be:b9:64:53:63:30:36:f2:9d:1d:73:8c:f7:74:af:
f7:ad:32:63:86:6c:d3:ca:32:3a:82:f8:09:4a:ad:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:20:4D:54:94:A5:29:0B:C8:CD:0E:B8:09:F5:5E:87:43:B9:2B:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37C8C8BC061011EFB3F8C653017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.54.0/23
Signature Algorithm: sha256WithRSAEncryption
47:47:cb:50:24:8d:02:ea:73:c4:c4:09:51:ff:3f:3c:63:9d:
7e:0a:9f:7c:af:b1:b5:72:74:df:ee:65:99:d4:c8:9b:57:0c:
a9:b9:3f:07:6b:8e:37:de:f8:0d:4d:31:62:2a:ab:77:c8:dd:
f6:e7:bc:60:46:69:21:5f:0c:a4:0f:ba:b5:bc:be:54:61:7a:
69:78:45:42:da:ee:18:f0:a1:4c:ab:0c:1e:c3:59:e8:d6:02:
e0:ae:89:cc:0c:ba:18:3a:5a:cf:58:0a:61:d0:d2:75:57:40:
0e:05:04:fa:40:45:f0:b8:5e:14:41:1b:8d:88:1d:0e:b0:d2:
34:bc:63:48:ef:42:42:f0:9e:14:e1:46:e0:a9:f8:4b:b3:b0:
eb:44:9c:b5:53:a1:89:dd:db:08:2e:27:23:66:47:b0:3f:ff:
54:39:3f:2d:d8:b7:21:56:79:e0:c8:b0:e0:85:a1:ba:62:62:
45:45:f9:20:84:01:f2:a5:53:32:63:fe:db:62:07:c9:f8:b3:
06:46:8f:bd:21:b0:81:af:e0:4d:28:dc:62:8a:55:4a:5a:7f:
3d:97:9b:52:e4:53:aa:95:7e:07:20:1a:80:e2:63:bd:cc:a3:
66:62:ee:1f:a4:6b:48:b6:f4:b9:67:a5:ec:3f:d0:37:10:e4:
75:a6:7c:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALImMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNDI5MTAwNjU2WhcNMjQwNjA3MTAwNjU2WjAYMRYw
FAYDVQQDEw02NjJmNzE0NC1mN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5PKa5jvkQphDh+4qqQOulU6zfHzhWPeOX7BdMoHc8EjtYz839uDsdAvU
oOrEj66pirYfIEQw0Su371YCDgdsQZNGn7iW0vzmklCp7R/Yle757uqr2SurVxBK
XalcPZNtpQaQ7u5z+MEk16CR2+jQ+IguGk/SMyQqmOkWQ1peCFqdWX6jr3tG7q01
FrvS+1HHqssnS1Z42HjDyflL54Cs7IgtlBqASYMEZK3UBZD+SsJetS6C1Vy6p5Gj
3yIZz7uJ7O9z+AOKWiY1PKBnFEn3qvnAKsofr077WVlLPyykkv6+uWRTYzA28p0d
c4z3dK/3rTJjhmzTyjI6gvgJSq2j+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM8g
TVSUpSkLyM0OuAn1XodDuSvaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zN0M4QzhCQzA2MTAxMUVGQjNGOEM2NTMwMTcwMDFCMS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmt82MA0GCSqGSIb3DQEB
CwUAA4IBAQBHR8tQJI0C6nPExAlR/z88Y51+Cp98r7G1cnTf7mWZ1MibVwypuT8H
a4433vgNTTFiKqt3yN3257xgRmkhXwykD7q1vL5UYXppeEVC2u4Y8KFMqwwew1no
1gLgronMDLoYOlrPWAph0NJ1V0AOBQT6QEXwuF4UQRuNiB0OsNI0vGNI70JC8J4U
4UbgqfhLs7DrRJy1U6GJ3dsILicjZkewP/9UOT8t2LchVnngyLDghaG6YmJFRfkg
hAHypVMyY/7bYgfJ+LMGRo+9IbCBr+BNKNxiilVKWn89l5tS5FOqlX4HIBqA4mO9
zKNmYu4fpGtItvS5Z6XsP9A3EOR1pnxo
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:45 2024 by rpki-client on console-ams.rpki-client.org