Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74557F0C1F0911EFAED942F17CDC24C2.roa
File: 74557F0C1F0911EFAED942F17CDC24C2.roa (raw, json)
Hash identifier: Oxl1qnH6RDJkf3Il3IKnmM3bsgXfWUP9SYNGhlt8NOw=
Subject key identifier: 41:FD:E6:5E:21:A0:E9:54:E9:1F:FC:2D:D2:EC:BE:76:7A:3C:EE:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BC61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74557F0C1F0911EFAED942F17CDC24C2.roa
Signing time: Fri 31 May 2024 04:51:34 +0000
ROA not before: Fri 31 May 2024 04:51:31 +0000
ROA not after: Sat 07 Dec 2024 04:51:31 +0000
asID: 139871
IP address blocks: 154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48225 (0xbc61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 04:51:31 2024 GMT
Not After : Dec 7 04:51:31 2024 GMT
Subject: CN=66595756-b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:95:75:0f:7a:f7:0c:ba:0c:a0:7f:bb:88:
92:03:aa:85:b4:64:26:71:13:a5:fe:2a:b5:0c:17:
46:93:22:01:45:dc:73:12:78:19:b4:db:4e:f4:2a:
f7:dd:f0:76:76:01:b3:b3:c8:3b:ca:5b:a1:ea:77:
4c:4f:4c:82:7c:93:f8:1f:d2:09:cc:c1:b3:1d:db:
06:c5:40:6e:30:98:8e:f4:f4:ce:54:78:70:3a:94:
26:96:57:8e:bc:e5:f6:6b:12:4e:01:60:97:c6:08:
84:20:5e:3c:cd:64:97:73:df:a5:8c:bf:fc:fe:c7:
eb:4b:d0:61:5f:47:fc:af:f5:8b:b5:fc:c3:5f:f7:
41:79:42:29:b8:74:a6:4a:f2:f9:fb:cf:87:dd:8e:
5f:a2:45:5f:46:58:4b:ce:14:5b:28:04:7d:a2:5c:
61:eb:a5:6e:ad:03:31:66:97:7d:f6:6d:a9:e3:b6:
4a:0b:c0:84:d1:d0:49:fe:14:81:a2:45:c5:c1:90:
65:12:89:e0:0d:b8:d0:e7:8c:73:0d:34:54:ed:c8:
ab:54:34:46:00:f2:63:c0:eb:34:14:8a:50:ee:0c:
32:06:4d:7e:46:49:ef:86:0a:49:41:13:46:d5:d4:
92:7a:b8:87:61:05:f1:38:f0:4d:76:ea:33:f3:c7:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:E6:5E:21:A0:E9:54:E9:1F:FC:2D:D2:EC:BE:76:7A:3C:EE:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74557F0C1F0911EFAED942F17CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d5:32:67:9d:ac:c4:70:31:99:9a:ae:67:2d:97:47:38:fc:
2a:d9:a7:35:a3:fb:63:57:40:01:57:d4:b0:50:9c:25:39:29:
1a:02:56:ca:3d:cd:76:a1:8d:48:24:fc:a6:7a:d6:1d:9a:e2:
60:06:dc:3a:8a:8b:64:57:21:82:59:64:d4:3f:3e:4b:73:0b:
e0:10:04:6b:33:95:48:11:d8:0c:fa:18:b8:1c:ef:4e:64:a1:
88:4d:83:b8:87:5a:ff:37:26:7d:fc:1d:78:25:d0:99:24:77:
fe:ee:c5:1d:f6:e0:47:7c:e1:d8:9b:55:f9:78:3a:39:96:2c:
5c:b1:8c:98:29:9a:81:a9:7a:5a:d1:1f:fa:de:7c:16:f4:a7:
6c:75:a8:c1:79:4c:13:4e:a1:3a:9f:9a:33:be:38:eb:fe:86:
2d:a8:c2:d4:5e:7c:d5:8f:9a:08:ed:a3:fc:ac:cd:40:04:65:
ed:95:30:c1:b6:9c:0f:27:52:ac:d7:9a:6a:22:13:53:16:67:
07:c6:5a:5e:ec:c0:bc:5a:3e:34:cf:64:31:f3:ec:88:97:9c:
c8:7b:8f:47:64:1c:4a:cf:97:db:e7:1c:1c:1c:16:ba:72:49:
6f:6f:98:b7:8a:24:20:4f:bb:da:29:df:bd:d7:dc:e2:79:1e:
da:57:83:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDALxhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjQwNTMxMDQ1MTMxWhcNMjQxMjA3MDQ1MTMxWjAYMRYw
FAYDVQQDEw02NjU5NTc1Ni1iNzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz1eVdQ969wy6DKB/u4iSA6qFtGQmcROl/iq1DBdGkyIBRdxzEngZtNtO
9Cr33fB2dgGzs8g7yluh6ndMT0yCfJP4H9IJzMGzHdsGxUBuMJiO9PTOVHhwOpQm
lleOvOX2axJOAWCXxgiEIF48zWSXc9+ljL/8/sfrS9BhX0f8r/WLtfzDX/dBeUIp
uHSmSvL5+8+H3Y5fokVfRlhLzhRbKAR9olxh66VurQMxZpd99m2p47ZKC8CE0dBJ
/hSBokXFwZBlEongDbjQ54xzDTRU7cirVDRGAPJjwOs0FIpQ7gwyBk1+RknvhgpJ
QRNG1dSSeriHYQXxOPBNduoz88eBswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEH9
5l4hoOlU6R/8LdLsvnZ6PO4dMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83NDU1N0YwQzFGMDkxMUVGQUVEOTQyRjE3Q0RDMjRDMi5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVTMA0GCSqGSIb3DQEB
CwUAA4IBAQCj1TJnnazEcDGZmq5nLZdHOPwq2ac1o/tjV0ABV9SwUJwlOSkaAlbK
Pc12oY1IJPymetYdmuJgBtw6iotkVyGCWWTUPz5LcwvgEARrM5VIEdgM+hi4HO9O
ZKGITYO4h1r/NyZ9/B14JdCZJHf+7sUd9uBHfOHYm1X5eDo5lixcsYyYKZqBqXpa
0R/63nwW9KdsdajBeUwTTqE6n5ozvjjr/oYtqMLUXnzVj5oI7aP8rM1ABGXtlTDB
tpwPJ1Ks15pqIhNTFmcHxlpe7MC8Wj40z2Qx8+yIl5zIe49HZBxKz5fb5xwcHBa6
cklvb5i3iiQgT7vaKd+919zieR7aV4M7
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:09 2024 by rpki-client on console-ams.rpki-client.org