Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51927342768B11EF957351B0762E951A.roa
File: 51927342768B11EF957351B0762E951A.roa (raw, json)
Hash identifier: F17WPRXhnMzrEDSdHxo3TuF9MUwGbHRtyeGQlTQt47c=
Subject key identifier: FE:EF:1F:2B:3D:AD:AD:C7:96:F8:8D:A1:38:31:EE:05:40:F1:F1:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F0AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51927342768B11EF957351B0762E951A.roa
Signing time: Thu 19 Sep 2024 13:30:21 +0000
ROA not before: Thu 19 Sep 2024 13:30:18 +0000
ROA not after: Fri 08 Aug 2025 13:30:18 +0000
asID: 133861
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61611 (0xf0ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:30:18 2024 GMT
Not After : Aug 8 13:30:18 2025 GMT
Subject: CN=66ec276d-3da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:19:35:5a:91:63:a6:d8:33:bc:63:51:75:
a2:11:e0:37:81:ca:4f:05:b7:a9:2f:25:34:62:78:
6a:a2:26:a1:49:fd:21:84:da:c8:16:c1:9e:96:0e:
bc:17:51:c0:9e:06:e2:07:f2:77:ee:d9:30:39:ce:
5f:15:60:01:d1:f2:bc:cc:73:0c:19:1f:88:11:48:
4d:68:30:92:a4:09:fb:07:c1:22:17:f8:a6:4f:92:
b7:25:a1:97:70:86:01:58:61:8c:0e:bb:af:20:0f:
4d:f0:18:6f:a5:88:15:b9:ea:b2:b4:99:27:3f:37:
76:c7:39:a1:a5:3b:f7:93:2d:5e:82:dd:73:e3:cb:
fe:e5:47:b2:6a:29:c8:a9:e3:55:25:b6:2d:63:1b:
ec:fb:bd:14:4a:cc:d3:dd:9f:1a:98:a1:a1:32:e1:
a6:69:af:6f:c5:20:2c:f9:26:0f:9d:cb:48:84:cd:
74:8b:ee:7e:e7:98:3e:ff:33:60:22:ce:a2:24:f5:
1c:31:39:cb:2a:3e:53:bf:4e:d9:19:01:0a:f1:39:
91:fb:58:0d:37:42:3d:72:3d:59:20:63:0f:71:cf:
c2:43:85:a7:9f:a2:bb:90:eb:00:ff:c6:2a:cf:89:
33:52:db:1e:fc:d1:aa:8c:62:ee:71:43:18:5a:70:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EF:1F:2B:3D:AD:AD:C7:96:F8:8D:A1:38:31:EE:05:40:F1:F1:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51927342768B11EF957351B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0b:8d:32:83:e5:94:b6:5f:47:74:b4:4c:eb:bb:a6:cd:a9:
a2:2b:f7:56:5c:92:d1:d2:a3:91:76:7e:e9:b8:1c:9a:4a:c9:
65:46:5a:68:e6:96:13:ff:36:16:01:49:98:0f:f4:bb:9b:59:
ae:da:0c:47:7d:5f:8b:c7:b6:d4:eb:2d:33:a0:15:f7:24:5d:
71:c9:db:a2:83:ed:15:9f:be:76:1c:94:f9:f9:2d:8a:06:b2:
89:11:8f:9d:ba:2a:bd:11:0f:ab:3a:6e:23:7f:88:49:10:12:
02:0d:0c:43:67:a5:c7:3c:bd:d3:de:29:08:1c:30:41:32:3f:
9f:34:bf:16:42:5c:a0:eb:ae:19:94:09:d2:79:ac:6f:55:39:
20:15:4d:d1:d4:f0:fa:1d:3b:ab:a6:2c:fd:be:41:41:19:01:
71:bb:a8:57:2a:36:e8:27:22:31:8f:71:8c:02:d9:e2:af:2f:
dc:c7:72:69:9b:e8:98:54:a4:89:8f:08:d2:90:27:00:ac:a2:
d8:ce:f8:33:87:bd:39:c1:6a:eb:58:db:ff:69:9e:7d:4c:8c:
c0:dd:d2:39:d5:10:8c:9b:1e:f3:aa:6f:97:f2:70:d1:a1:51:
41:f7:a5:be:ed:8e:5d:c1:72:7a:e2:6a:c3:0a:18:5f:7a:ff:
9e:06:3b:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPCrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE5MTMzMDE4WhcNMjUwODA4MTMzMDE4WjAYMRYw
FAYDVQQDEw02NmVjMjc2ZC0zZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxDYZNVqRY6bYM7xjUXWiEeA3gcpPBbepLyU0YnhqoiahSf0hhNrIFsGe
lg68F1HAngbiB/J37tkwOc5fFWAB0fK8zHMMGR+IEUhNaDCSpAn7B8EiF/imT5K3
JaGXcIYBWGGMDruvIA9N8BhvpYgVueqytJknPzd2xzmhpTv3ky1egt1z48v+5Uey
ainIqeNVJbYtYxvs+70USszT3Z8amKGhMuGmaa9vxSAs+SYPnctIhM10i+5+55g+
/zNgIs6iJPUcMTnLKj5Tv07ZGQEK8TmR+1gNN0I9cj1ZIGMPcc/CQ4Wnn6K7kOsA
/8Yqz4kzUtse/NGqjGLucUMYWnAZFwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP7v
Hys9ra3HlviNoTgx7gVA8fGjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MTkyNzM0Mjc2OEIxMUVGOTU3MzUxQjA3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUYMA0GCSqGSIb3DQEB
CwUAA4IBAQAIC40yg+WUtl9HdLRM67umzamiK/dWXJLR0qORdn7puByaSsllRlpo
5pYT/zYWAUmYD/S7m1mu2gxHfV+Lx7bU6y0zoBX3JF1xyduig+0Vn752HJT5+S2K
BrKJEY+duiq9EQ+rOm4jf4hJEBICDQxDZ6XHPL3T3ikIHDBBMj+fNL8WQlyg664Z
lAnSeaxvVTkgFU3R1PD6HTurpiz9vkFBGQFxu6hXKjboJyIxj3GMAtniry/cx3Jp
m+iYVKSJjwjSkCcArKLYzvgzh705wWrrWNv/aZ59TIzA3dI51RCMmx7zqm+X8nDR
oVFB96W+7Y5dwXJ64mrDChhfev+eBjtU
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org