Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F67B032EDB911EEAD3866BD775412E6.roa
File: 5F67B032EDB911EEAD3866BD775412E6.roa (raw, json)
Hash identifier: 0/WlKqQqMSBWE3FukdoM4nHeIwav63XUhrYc5pa9g8Q=
Subject key identifier: DE:B4:E1:C6:07:3E:83:54:EC:9D:9A:61:8A:3C:C5:2C:7D:7B:E6:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A73D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F67B032EDB911EEAD3866BD775412E6.roa
Signing time: Fri 29 Mar 2024 10:44:52 +0000
ROA not before: Fri 29 Mar 2024 10:44:49 +0000
ROA not after: Sat 04 May 2024 10:44:49 +0000
asID: 142062
IP address blocks: 154.86.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42813 (0xa73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:44:49 2024 GMT
Not After : May 4 10:44:49 2024 GMT
Subject: CN=66069ba4-79e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:91:33:40:ee:5f:5e:c5:2a:55:98:fb:ea:
f9:52:e2:e6:81:b5:81:e1:12:ab:9f:f9:77:38:d7:
97:5a:91:79:8b:28:8e:e5:92:c9:ab:78:af:9a:b1:
09:68:43:7b:01:71:8a:2d:b8:49:6c:67:07:21:2b:
66:90:84:1d:50:01:6d:1f:79:08:e4:e8:bc:95:13:
a9:dc:03:fb:24:f4:d1:97:c6:89:a8:f3:1a:db:de:
9f:b7:c9:9c:54:a2:da:f4:be:5d:59:da:cd:13:8b:
dc:df:7c:42:ad:80:09:87:19:7b:1f:36:c6:bc:38:
98:43:24:43:52:eb:f1:26:ad:55:95:6b:39:35:c9:
c5:38:6a:e0:ad:cf:71:ee:42:32:50:2a:ff:e1:9d:
76:43:2c:05:1d:c2:c1:de:9f:82:ca:3c:41:94:28:
fa:ea:7c:26:47:d8:53:e9:60:74:dc:1c:13:5b:7d:
ba:62:91:7b:17:e2:0c:2b:f1:d8:4c:52:15:69:e7:
0e:e7:05:32:b9:8d:7c:81:af:24:d2:22:72:2e:1a:
e4:c1:a4:75:e3:62:aa:8b:3b:82:80:f9:be:1b:12:
bf:81:3d:db:45:83:3b:c0:43:66:2e:9e:14:2c:c5:
27:27:0d:af:fd:e7:5e:63:8e:9b:e0:57:7d:8f:6a:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:E1:C6:07:3E:83:54:EC:9D:9A:61:8A:3C:C5:2C:7D:7B:E6:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F67B032EDB911EEAD3866BD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:45:ee:6b:bd:72:55:c4:d0:78:6d:71:dd:9e:df:64:b9:b6:
ab:27:29:d7:12:0c:80:f2:2f:3b:62:81:a1:1a:08:f5:d0:f7:
c6:e4:70:90:d4:8f:01:d9:a2:df:24:36:4a:8e:f6:1d:39:13:
4f:ad:ca:bb:e3:e6:a2:8e:49:61:b8:59:59:9d:8f:07:f4:8f:
35:f6:02:eb:87:5f:6d:0f:77:a2:9a:a4:6f:b6:95:bd:94:d6:
de:71:92:cf:15:ec:d4:7b:11:c7:5c:e6:e6:4b:12:c6:36:72:
9f:79:3c:75:1f:8f:46:28:4e:a4:3a:cb:c3:7c:6b:f6:39:f6:
95:95:3a:28:8e:86:7c:10:9f:43:9a:4a:85:e4:2a:31:fe:94:
a0:72:43:a6:53:cf:d0:1e:09:f8:a9:f1:69:7b:66:24:b1:60:
76:d5:11:b0:99:05:a4:b7:3c:ef:77:78:9f:24:80:7f:25:5b:
5f:06:36:fc:4f:59:bd:25:54:aa:6f:22:68:ab:b6:2e:ab:41:
88:42:b8:ef:30:3d:0e:25:47:22:f1:bc:a5:91:65:a3:3d:2d:
40:63:82:c6:74:cb:1d:e4:64:2c:d0:ff:55:06:f8:3c:01:c0:
4b:35:ad:2c:f3:93:a5:ba:0b:6c:59:ae:38:4d:7c:31:57:39:
1d:17:24:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAKc9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwMzI5MTA0NDQ5WhcNMjQwNTA0MTA0NDQ5WjAYMRYw
FAYDVQQDEw02NjA2OWJhNC03OWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzNiRM0DuX17FKlWY++r5UuLmgbWB4RKrn/l3ONeXWpF5iyiO5ZLJq3iv
mrEJaEN7AXGKLbhJbGcHIStmkIQdUAFtH3kI5Oi8lROp3AP7JPTRl8aJqPMa296f
t8mcVKLa9L5dWdrNE4vc33xCrYAJhxl7HzbGvDiYQyRDUuvxJq1VlWs5NcnFOGrg
rc9x7kIyUCr/4Z12QywFHcLB3p+CyjxBlCj66nwmR9hT6WB03BwTW326YpF7F+IM
K/HYTFIVaecO5wUyuY18ga8k0iJyLhrkwaR142KqizuCgPm+GxK/gT3bRYM7wENm
Lp4ULMUnJw2v/edeY46b4Fd9j2o4XQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN60
4cYHPoNU7J2aYYo8xSx9e+aTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC81RjY3QjAzMkVEQjkxMUVFQUQzODY2QkQ3NzU0MTJFNi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlZCMA0GCSqGSIb3DQEB
CwUAA4IBAQAcRe5rvXJVxNB4bXHdnt9kubarJynXEgyA8i87YoGhGgj10PfG5HCQ
1I8B2aLfJDZKjvYdORNPrcq74+aijklhuFlZnY8H9I819gLrh19tD3eimqRvtpW9
lNbecZLPFezUexHHXObmSxLGNnKfeTx1H49GKE6kOsvDfGv2OfaVlToojoZ8EJ9D
mkqF5Cox/pSgckOmU8/QHgn4qfFpe2YksWB21RGwmQWktzzvd3ifJIB/JVtfBjb8
T1m9JVSqbyJoq7Yuq0GIQrjvMD0OJUci8bylkWWjPS1AY4LGdMsd5GQs0P9VBvg8
AcBLNa0s85OlugtsWa44TXwxVzkdFySs
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org