Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6161D17E768A11EFA655ACAB762E951A.roa
File: 6161D17E768A11EFA655ACAB762E951A.roa (raw, json)
Hash identifier: cLuu98V11Mxjj3VUH7qBz/XeX0yFF2f7GLwh9NvLtYQ=
Subject key identifier: 15:7A:F7:9C:89:EE:EF:45:98:0C:35:C8:33:0A:07:A6:39:5E:C9:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F09F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6161D17E768A11EFA655ACAB762E951A.roa
Signing time: Thu 19 Sep 2024 13:23:38 +0000
ROA not before: Thu 19 Sep 2024 13:23:35 +0000
ROA not after: Fri 08 Aug 2025 13:23:35 +0000
asID: 133861
IP address blocks: 154.197.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61599 (0xf09f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 19 13:23:35 2024 GMT
Not After : Aug 8 13:23:35 2025 GMT
Subject: CN=66ec25da-9cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:87:10:51:a5:a9:b0:25:09:8b:33:68:0c:
5f:3d:6d:57:52:1f:b4:d9:d5:4a:2b:f7:a6:2e:05:
eb:16:d7:34:69:76:15:d6:8b:f2:29:1b:4a:a4:84:
d0:d4:21:53:95:17:ad:05:86:b5:ce:17:0c:c0:67:
e3:42:80:69:18:5b:c8:0b:42:d5:d1:f1:0f:d7:84:
29:52:59:b9:c4:32:80:44:89:96:66:72:44:b8:a7:
8a:cd:9e:49:a2:44:c7:67:c7:86:8e:35:3d:9f:af:
d9:85:e2:03:24:04:47:3e:86:32:2c:ed:b2:cc:e1:
d0:a1:58:8d:63:92:00:21:b3:76:b7:0a:61:69:88:
51:4f:5b:ce:54:a3:12:1c:b1:da:4a:f6:a4:7f:37:
db:35:41:11:ee:4f:ce:d5:b0:77:81:53:5b:98:21:
56:41:c7:6a:21:be:1a:07:38:e6:92:92:40:25:6f:
cc:78:c2:b6:8c:65:f8:a8:67:02:04:80:2f:c4:0c:
b8:d4:2d:1a:70:3f:46:3f:12:4f:42:f5:f3:22:8a:
4c:02:33:6f:1b:4c:df:13:be:ea:1a:bf:a0:1f:49:
4e:0d:0d:19:3f:34:7c:d0:93:6d:c4:bc:e8:77:a7:
c8:aa:cb:13:b4:87:49:ad:67:7c:b7:87:41:ed:43:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:F7:9C:89:EE:EF:45:98:0C:35:C8:33:0A:07:A6:39:5E:C9:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6161D17E768A11EFA655ACAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.50.0/24
Signature Algorithm: sha256WithRSAEncryption
90:80:7c:9b:1c:99:50:69:36:4b:55:93:4d:35:dd:7d:0d:09:
a5:ac:81:98:50:34:33:85:2f:cf:4a:a7:11:f6:df:df:40:bd:
19:17:53:31:cd:9c:61:04:49:fe:86:b9:4f:dd:54:3f:06:50:
7a:9d:48:d3:4a:42:4b:bd:ae:13:f4:f5:73:c1:e5:80:37:47:
4c:b7:cc:e8:a7:22:fb:d9:b4:57:3c:c0:f3:41:2b:8f:2e:10:
a1:1f:e6:34:a6:0f:a2:e5:48:36:85:2c:81:26:9a:66:92:43:
8c:83:aa:f3:40:40:d4:01:9f:d0:d2:db:3b:d5:30:65:95:58:
40:84:c6:da:4d:24:de:a3:4e:4f:7c:12:97:97:f7:c0:f9:57:
64:63:85:27:e4:a0:28:3a:a4:1b:ab:e3:d0:b5:a0:6c:68:4c:
8c:69:20:3c:d6:75:19:44:2d:a8:16:d4:65:1d:12:01:59:be:
04:31:de:9d:6d:b6:a0:86:1f:48:31:ea:d0:d7:7c:37:ed:51:
6c:d1:29:d6:c0:a6:f3:82:17:17:11:29:a5:c9:b7:26:84:96:
81:dd:41:92:d6:fd:0f:c1:7a:6c:41:2c:23:58:bf:d7:5a:51:
a1:5d:d7:7d:35:2b:d9:14:ed:1b:33:19:3f:59:94:28:1f:88:
c5:68:dd:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAPCfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwOTE5MTMyMzM1WhcNMjUwODA4MTMyMzM1WjAYMRYw
FAYDVQQDEw02NmVjMjVkYS05Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6vaHEFGlqbAlCYszaAxfPW1XUh+02dVKK/emLgXrFtc0aXYV1ovyKRtK
pITQ1CFTlRetBYa1zhcMwGfjQoBpGFvIC0LV0fEP14QpUlm5xDKARImWZnJEuKeK
zZ5JokTHZ8eGjjU9n6/ZheIDJARHPoYyLO2yzOHQoViNY5IAIbN2twphaYhRT1vO
VKMSHLHaSvakfzfbNUER7k/O1bB3gVNbmCFWQcdqIb4aBzjmkpJAJW/MeMK2jGX4
qGcCBIAvxAy41C0acD9GPxJPQvXzIopMAjNvG0zfE77qGr+gH0lODQ0ZPzR80JNt
xLzod6fIqssTtIdJrWd8t4dB7UPsZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFBV6
95yJ7u9FmAw1yDMKB6Y5XslTMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MTYxRDE3RTc2OEExMUVGQTY1NUFDQUI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsUyMA0GCSqGSIb3DQEB
CwUAA4IBAQCQgHybHJlQaTZLVZNNNd19DQmlrIGYUDQzhS/PSqcR9t/fQL0ZF1Mx
zZxhBEn+hrlP3VQ/BlB6nUjTSkJLva4T9PVzweWAN0dMt8zopyL72bRXPMDzQSuP
LhChH+Y0pg+i5Ug2hSyBJppmkkOMg6rzQEDUAZ/Q0ts71TBllVhAhMbaTSTeo05P
fBKXl/fA+VdkY4Un5KAoOqQbq+PQtaBsaEyMaSA81nUZRC2oFtRlHRIBWb4EMd6d
bbaghh9IMerQ13w37VFs0SnWwKbzghcXESmlybcmhJaB3UGS1v0PwXpsQSwjWL/X
WlGhXdd9NSvZFO0bMxk/WZQoH4jFaN0I
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:09 2024 by rpki-client on console-fra.rpki-client.org