Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F72064E75A11EEB4B19060775412E6.roa
File: 51F72064E75A11EEB4B19060775412E6.roa (raw, json)
Hash identifier: yAnlNWDsNV33+HHGFCqpYzbUxEQM943CM6ClGoRl0bs=
Subject key identifier: 1B:F2:B0:39:77:56:2B:A3:77:39:6D:FF:04:CC:74:AC:94:28:F8:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F72064E75A11EEB4B19060775412E6.roa
Signing time: Thu 21 Mar 2024 08:09:20 +0000
ROA not before: Thu 21 Mar 2024 08:09:17 +0000
ROA not after: Tue 23 Apr 2024 08:09:17 +0000
asID: 44559
IP address blocks: 154.211.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42187 (0xa4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:09:17 2024 GMT
Not After : Apr 23 08:09:17 2024 GMT
Subject: CN=65fbeb30-2e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:69:f7:4f:3a:c7:72:1e:50:20:65:35:7e:
53:aa:cf:49:20:23:0e:ac:ee:f5:95:73:06:6d:f4:
a0:62:70:c3:72:5b:35:80:eb:84:d0:7a:cc:a4:2f:
5b:23:85:a5:f2:50:59:5c:b5:25:24:6e:7d:b6:f5:
73:fb:2f:be:a1:d0:a7:99:bb:f0:a8:c6:5e:98:f4:
b0:54:07:d3:2a:ff:10:72:d8:0f:ce:c9:d5:6a:09:
b6:6f:a1:65:7f:73:b4:63:11:7e:9d:9b:d3:e1:c9:
68:09:1c:6e:28:8f:18:e2:46:3d:12:7a:1b:4a:c5:
7c:92:d1:50:fb:f0:f6:7d:30:82:e2:e6:92:6c:30:
79:90:2d:b3:57:61:16:58:8d:c3:bc:54:67:24:4a:
6f:3f:2b:4e:6b:66:d2:1d:08:e5:e0:d9:5c:c0:e2:
52:ff:76:b2:48:27:7a:4d:2b:5b:df:8b:6d:0b:25:
36:b5:69:9d:0f:be:a1:51:87:2c:42:40:13:4e:1f:
43:97:09:b9:89:57:d7:63:4f:95:3f:76:0c:04:d2:
64:f2:70:1d:b4:92:39:c3:58:c8:b9:a8:74:d4:9b:
90:2e:59:d2:c5:6c:4f:37:5a:eb:7f:56:f1:24:78:
13:ba:c6:41:be:33:dc:78:e8:15:42:93:c0:36:5d:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:B0:39:77:56:2B:A3:77:39:6D:FF:04:CC:74:AC:94:28:F8:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F72064E75A11EEB4B19060775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.51.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f0:b2:73:f3:fa:2e:1e:62:4f:44:d9:c3:ba:d7:81:5a:25:
d6:26:67:cb:12:c4:01:9b:cd:ba:f4:c4:1b:f6:eb:2c:0d:b3:
a4:2d:2f:a0:23:e3:bb:fd:65:8e:16:77:a6:5d:2a:b0:f7:4c:
7c:1f:93:0a:8e:8a:71:1a:7a:44:ac:8b:44:76:9e:af:9f:a0:
8f:d1:d2:80:db:9a:05:62:7c:f6:23:4e:ee:60:60:be:c0:dc:
2b:68:a2:04:70:21:07:78:97:a3:68:f7:69:6f:3e:29:e7:e1:
69:dd:c9:93:2d:40:28:3c:9b:45:09:74:33:ea:6c:4d:ca:d2:
b7:d7:9d:5a:c9:49:ea:37:c4:df:32:ac:77:fa:d5:99:04:e5:
fb:94:a4:80:f6:c4:10:8c:fd:01:ef:80:12:e3:83:26:4c:d2:
2f:77:2c:65:f9:39:a4:ab:d3:fc:5b:e5:4d:2b:b8:36:28:fa:
86:db:f1:58:55:db:9b:cc:03:90:29:35:bd:d7:f3:74:a7:22:
66:7a:bc:f4:1a:5e:97:d0:b8:4b:c3:a0:7f:93:ab:92:cd:97:
e7:af:43:c4:c5:50:1b:c5:29:27:9e:18:5c:2e:d4:60:81:1d:
57:54:6b:6d:c9:00:fb:aa:0f:bd:00:61:0b:16:6b:da:4c:5c:
e6:87:a4:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKTLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzIxMDgwOTE3WhcNMjQwNDIzMDgwOTE3WjAYMRYw
FAYDVQQDEw02NWZiZWIzMC0yZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0QFp9086x3IeUCBlNX5Tqs9JICMOrO71lXMGbfSgYnDDcls1gOuE0HrM
pC9bI4Wl8lBZXLUlJG59tvVz+y++odCnmbvwqMZemPSwVAfTKv8QctgPzsnVagm2
b6Flf3O0YxF+nZvT4cloCRxuKI8Y4kY9EnobSsV8ktFQ+/D2fTCC4uaSbDB5kC2z
V2EWWI3DvFRnJEpvPytOa2bSHQjl4NlcwOJS/3aySCd6TStb34ttCyU2tWmdD76h
UYcsQkATTh9Dlwm5iVfXY0+VP3YMBNJk8nAdtJI5w1jIuah01JuQLlnSxWxPN1rr
f1bxJHgTusZBvjPceOgVQpPANl3aBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBvy
sDl3Viujdzlt/wTMdKyUKPjrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81MUY3MjA2NEU3NUExMUVFQjRCMTkwNjA3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtMzMA0GCSqGSIb3DQEB
CwUAA4IBAQCu8LJz8/ouHmJPRNnDuteBWiXWJmfLEsQBm8269MQb9ussDbOkLS+g
I+O7/WWOFnemXSqw90x8H5MKjopxGnpErItEdp6vn6CP0dKA25oFYnz2I07uYGC+
wNwraKIEcCEHeJejaPdpbz4p5+Fp3cmTLUAoPJtFCXQz6mxNytK3151ayUnqN8Tf
Mqx3+tWZBOX7lKSA9sQQjP0B74AS44MmTNIvdyxl+Tmkq9P8W+VNK7g2KPqG2/FY
VdubzAOQKTW91/N0pyJmerz0Gl6X0LhLw6B/k6uSzZfnr0PExVAbxSknnhhcLtRg
gR1XVGttyQD7qg+9AGELFmvaTFzmh6Tl
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:19 2024 by rpki-client on console-ams.rpki-client.org