Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EF3797410DD11EE9FD5172C4AD9E6FC.roa
File: 5EF3797410DD11EE9FD5172C4AD9E6FC.roa (raw, json)
Hash identifier: JS31+0TYVHCW3FZw/vSsLI6mXrYAJRK4oMNaFgRuz3k=
Subject key identifier: 42:FA:40:8D:6C:DD:30:B8:64:A2:68:AB:7A:38:40:D0:BF:AD:50:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2D72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EF3797410DD11EE9FD5172C4AD9E6FC.roa
Signing time: Thu 22 Jun 2023 09:15:46 +0000
ROA not before: Thu 22 Jun 2023 09:15:43 +0000
ROA not after: Fri 05 Jul 2024 09:15:43 +0000
asID: 146993
IP address blocks: 154.203.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11634 (0x2d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 09:15:43 2023 GMT
Not After : Jul 5 09:15:43 2024 GMT
Subject: CN=64941142-3e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:f3:a0:94:08:3d:b0:cd:b3:98:03:83:bb:
7c:0a:40:a2:55:7b:00:47:fa:c7:b7:04:89:5a:6e:
88:2d:a2:63:63:fd:84:61:08:59:a8:db:87:ff:25:
f5:71:31:70:0e:1c:a6:71:fa:35:51:cb:5d:ec:a7:
6b:9b:9a:db:cd:5b:97:ea:a2:86:10:d5:7a:40:6d:
08:70:df:59:70:49:78:e9:a6:85:3a:8d:06:73:15:
0d:74:9d:8e:34:e2:fa:33:45:29:50:d3:7c:6b:a1:
ca:6a:b0:79:00:5a:12:e8:0b:80:f7:ff:9b:4d:5d:
7f:c6:1f:4c:8c:ab:66:6c:84:c7:ae:d8:d4:27:cb:
18:8b:69:88:96:ed:cd:d9:df:fd:60:79:00:90:67:
07:cc:7b:aa:b5:1d:9b:50:3e:71:91:4f:97:d4:ec:
e9:5e:b1:b9:ba:5c:1e:41:34:60:ea:8d:7e:ca:f0:
91:12:2a:57:2d:41:4f:74:70:9b:25:4b:c6:29:31:
16:3c:73:a7:ef:24:e8:51:b6:0f:f7:50:29:40:82:
3b:a0:1c:ac:ec:a8:67:c0:47:88:59:67:56:3d:a0:
4e:58:d5:ed:21:d1:00:b4:af:7a:79:c5:04:00:65:
7e:53:54:ba:64:23:ff:f6:70:23:86:ca:09:d7:69:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FA:40:8D:6C:DD:30:B8:64:A2:68:AB:7A:38:40:D0:BF:AD:50:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EF3797410DD11EE9FD5172C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:07:ac:8f:bd:a4:82:b7:40:ca:a9:a0:67:8c:ce:0c:8c:28:
05:4c:04:93:a3:a2:c9:c0:8b:ff:30:71:9c:38:e6:3f:ac:ac:
7a:7a:1a:cb:ae:62:71:11:37:79:2d:e6:21:d8:80:49:ab:d7:
a7:ff:b2:30:e9:f5:0a:5f:5b:17:85:8a:ed:c1:29:0b:0c:ca:
d9:ca:45:73:81:bd:c0:68:57:89:56:72:7c:8d:dd:1f:17:31:
60:ae:aa:aa:cc:84:5b:10:72:d7:5a:7d:92:97:f1:1f:ec:f1:
92:f2:9a:26:24:ca:94:4e:ba:a5:16:eb:44:04:1d:6d:63:43:
10:da:5f:22:5e:b1:39:fe:44:f7:5b:77:bf:c2:29:38:12:d7:
71:91:9e:c9:1d:7f:0c:3d:8a:c9:59:16:66:71:36:5a:ac:e7:
f6:79:fc:0f:41:a2:e8:ec:8e:a9:57:c6:6b:b6:7c:62:0f:1e:
85:3f:1f:ae:44:35:74:f1:22:c8:b2:7f:06:76:08:6c:25:4b:
96:1b:79:a9:87:d5:90:25:b9:7c:80:de:f3:b8:a9:ea:39:02:
ca:ca:01:53:30:f2:09:64:d3:cc:2b:d7:3a:b4:69:df:34:d0:
4e:12:49:62:a7:24:71:c1:c7:b4:90:3d:88:64:e6:ca:96:80:
d5:a6:11:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICLXIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzA2MjIwOTE1NDNaFw0yNDA3MDUwOTE1NDNaMBgxFjAU
BgNVBAMTDTY0OTQxMTQyLTNlNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuHPOglAg9sM2zmAODu3wKQKJVewBH+se3BIlabogtomNj/YRhCFmo24f/
JfVxMXAOHKZx+jVRy13sp2ubmtvNW5fqooYQ1XpAbQhw31lwSXjppoU6jQZzFQ10
nY404vozRSlQ03xrocpqsHkAWhLoC4D3/5tNXX/GH0yMq2ZshMeu2NQnyxiLaYiW
7c3Z3/1geQCQZwfMe6q1HZtQPnGRT5fU7Olesbm6XB5BNGDqjX7K8JESKlctQU90
cJslS8YpMRY8c6fvJOhRtg/3UClAgjugHKzsqGfAR4hZZ1Y9oE5Y1e0h0QC0r3p5
xQQAZX5TVLpkI//2cCOGygnXaXPNAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQvpA
jWzdMLhkomirejhA0L+tUL0wHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzVFRjM3OTc0MTBERDExRUU5RkQ1MTcyQzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASayxAwDQYJKoZIhvcNAQEL
BQADggEBALUHrI+9pIK3QMqpoGeMzgyMKAVMBJOjosnAi/8wcZw45j+srHp6Gsuu
YnERN3kt5iHYgEmr16f/sjDp9QpfWxeFiu3BKQsMytnKRXOBvcBoV4lWcnyN3R8X
MWCuqqrMhFsQctdafZKX8R/s8ZLymiYkypROuqUW60QEHW1jQxDaXyJesTn+RPdb
d7/CKTgS13GRnskdfww9islZFmZxNlqs5/Z5/A9BoujsjqlXxmu2fGIPHoU/H65E
NXTxIsiyfwZ2CGwlS5YbeamH1ZAluXyA3vO4qeo5AsrKAVMw8glk08wr1zq0ad80
0E4SSWKnJHHBx7SQPYhk5sqWgNWmEQA=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org