Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D680AA736611EF8F1433BD762E951A.roa
File: 51D680AA736611EF8F1433BD762E951A.roa (raw, json)
Hash identifier: glE6ENbOfEPu2c530Dxn1r8eU5PwKBSQFO4Zrga7kBU=
Subject key identifier: 03:A1:AF:41:B5:F8:16:F5:1D:A8:7D:BF:63:6D:94:30:2A:5E:F5:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: EF10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D680AA736611EF8F1433BD762E951A.roa
Signing time: Sun 15 Sep 2024 13:27:57 +0000
ROA not before: Sun 15 Sep 2024 13:27:53 +0000
ROA not after: Sat 30 Nov 2024 13:27:53 +0000
asID: 142403
IP address blocks: 154.209.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61200 (0xef10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 13:27:53 2024 GMT
Not After : Nov 30 13:27:53 2024 GMT
Subject: CN=66e6e0dd-e6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:30:7b:cd:3f:61:b2:01:ac:38:30:f4:77:be:
a4:12:13:ec:7e:ec:5a:78:41:b6:99:5f:f4:2f:d3:
0f:9a:6b:dc:34:a6:7d:21:22:2e:0f:b0:8e:79:67:
23:a1:30:85:78:3f:fd:5f:c3:43:71:7f:c3:ef:43:
30:10:ff:bc:42:bb:96:3c:77:ab:be:c2:66:ff:99:
a2:5f:9e:bf:a1:e8:c5:21:e1:a2:ba:02:d9:f5:f9:
2c:55:4b:57:55:b5:b7:af:5e:d7:a8:ff:73:bc:16:
6c:c4:66:23:6b:bc:c1:cb:f7:8c:9c:87:4c:21:c7:
38:3e:e1:06:3e:9b:ed:4a:6b:b6:b0:45:68:2b:4d:
9e:7b:f8:28:50:99:77:f4:01:da:4f:ee:cb:96:15:
8d:98:c5:9f:09:d9:b6:35:7a:c9:fd:78:c9:87:56:
93:c0:e0:a2:5e:da:a7:64:91:22:d9:b1:d3:5f:63:
f9:8e:6c:36:61:16:df:41:5f:ed:25:8d:86:46:86:
ce:0e:f2:92:d2:7e:f9:e4:a8:8b:44:6e:5f:4a:a9:
89:84:eb:da:dd:ac:e2:7f:5e:8c:ac:a0:1a:50:6b:
bb:ae:8d:ce:fb:18:65:5b:74:33:90:54:35:bd:cf:
b8:61:21:0b:cb:38:ca:8a:5a:bc:f0:aa:e1:ca:22:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:AF:41:B5:F8:16:F5:1D:A8:7D:BF:63:6D:94:30:2A:5E:F5:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51D680AA736611EF8F1433BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.4.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d4:07:88:77:39:d0:16:00:74:42:b9:09:3b:d4:d9:6d:9e:
54:dc:19:b1:92:21:d9:b6:c5:99:d1:fc:1e:77:32:9c:f5:cb:
43:ad:ae:9c:a0:35:33:86:f1:c3:c9:53:8a:ee:cf:c4:d0:62:
f6:fd:39:28:fc:b8:0d:99:b4:35:ac:2f:75:1a:76:14:1e:93:
03:89:c0:de:fa:de:1e:85:d4:3b:2a:97:6e:d1:21:17:52:c8:
42:5d:c6:3a:84:2f:57:26:64:c3:0b:24:35:51:f1:98:d4:f0:
4e:03:11:3d:88:11:fc:f1:db:df:e0:fe:22:8c:dd:4b:a6:34:
ed:fd:32:29:a3:30:f8:a5:d8:ca:2e:7f:8c:8f:20:05:59:09:
9f:c4:39:bf:27:e8:3b:70:1d:56:3f:9b:d3:aa:2e:2f:c3:1a:
a8:9f:f4:ff:05:10:dc:c8:05:e1:7d:0d:ea:db:0d:41:d3:74:
7d:1b:0f:bf:76:27:b6:3b:c8:46:8e:1c:f5:52:47:ef:8b:1f:
77:20:f3:4a:3d:47:75:79:e1:a8:e6:57:3f:fe:44:e4:01:d8:
f2:d2:8b:01:c7:3f:94:89:ed:d7:8e:16:7d:1d:d1:1d:b3:56:
7b:23:97:42:9d:f9:78:1f:32:aa:30:a4:20:7f:0f:31:d4:2f:
cc:76:15:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAO8QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE1MTMyNzUzWhcNMjQxMTMwMTMyNzUzWjAYMRYw
FAYDVQQDEw02NmU2ZTBkZC1lNmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6zB7zT9hsgGsODD0d76kEhPsfuxaeEG2mV/0L9MPmmvcNKZ9ISIuD7CO
eWcjoTCFeD/9X8NDcX/D70MwEP+8QruWPHervsJm/5miX56/oejFIeGiugLZ9fks
VUtXVbW3r17XqP9zvBZsxGYja7zBy/eMnIdMIcc4PuEGPpvtSmu2sEVoK02ee/go
UJl39AHaT+7LlhWNmMWfCdm2NXrJ/XjJh1aTwOCiXtqnZJEi2bHTX2P5jmw2YRbf
QV/tJY2GRobODvKS0n755KiLRG5fSqmJhOva3azif16MrKAaUGu7ro3O+xhlW3Qz
kFQ1vc+4YSELyzjKilq88KrhyiJM4QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAOh
r0G1+Bb1Hah9v2NtlDAqXvWvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MUQ2ODBBQTczNjYxMUVGOEYxNDMzQkQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtEEMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ1AeIdznQFgB0QrkJO9TZbZ5U3BmxkiHZtsWZ0fwedzKc9ctDra6c
oDUzhvHDyVOK7s/E0GL2/Tko/LgNmbQ1rC91GnYUHpMDicDe+t4ehdQ7Kpdu0SEX
UshCXcY6hC9XJmTDCyQ1UfGY1PBOAxE9iBH88dvf4P4ijN1LpjTt/TIpozD4pdjK
Ln+MjyAFWQmfxDm/J+g7cB1WP5vTqi4vwxqon/T/BRDcyAXhfQ3q2w1B03R9Gw+/
die2O8hGjhz1Ukfvix93IPNKPUd1eeGo5lc//kTkAdjy0osBxz+Uie3XjhZ9HdEd
s1Z7I5dCnfl4HzKqMKQgfw8x1C/MdhWD
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:06 2024 by rpki-client on console-fra.rpki-client.org