Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B66572DC78AE11EEBDD9500E4AD9E6FC.roa
File: B66572DC78AE11EEBDD9500E4AD9E6FC.roa (raw, json)
Hash identifier: WwsNidxJqzrq7IxMH/bMnn269LvuZYCjEy7rpni0mVA=
Subject key identifier: C6:76:8D:0E:B5:ED:BD:17:45:C1:D7:64:64:BF:4E:F4:35:F1:84:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4B29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B66572DC78AE11EEBDD9500E4AD9E6FC.roa
Signing time: Wed 01 Nov 2023 12:03:47 +0000
ROA not before: Wed 01 Nov 2023 12:03:44 +0000
ROA not after: Mon 04 Nov 2024 12:03:44 +0000
asID: 134687
IP address blocks: 154.89.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19241 (0x4b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 1 12:03:44 2023 GMT
Not After : Nov 4 12:03:44 2024 GMT
Subject: CN=65423ea3-b3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:01:3a:a2:e1:c4:51:e3:d4:73:c9:76:e2:
b0:cc:54:c0:96:57:87:c2:52:6c:5b:38:58:a2:95:
54:1a:17:57:35:fd:55:4d:57:07:dc:10:05:3f:2c:
01:41:1f:a1:2d:60:36:26:f9:95:ee:be:66:75:2e:
ce:b0:d7:63:0f:20:1a:e3:9c:d6:82:e6:94:3e:06:
0a:81:49:64:7c:17:cf:b9:92:19:24:8d:54:1b:94:
1c:aa:00:0d:f2:93:7a:6f:64:bf:98:70:e7:76:94:
f8:9b:58:a6:4e:cb:b9:c9:1d:ff:4e:a3:0e:83:1a:
4f:66:e0:c6:8d:40:dc:d5:c1:b6:9b:4b:f7:48:95:
0a:61:1a:dc:d1:7d:b1:ec:cc:bb:98:42:94:80:54:
b9:73:0c:84:a2:a9:06:40:ab:92:d7:bf:f7:ae:03:
37:c0:d1:80:6a:3a:09:8a:e6:d1:1d:6d:e4:6f:d9:
d6:36:f6:e0:89:00:34:b8:8a:16:1a:1a:ff:16:78:
72:08:1b:97:39:f2:39:89:1f:20:e2:87:fb:83:1f:
f8:06:a8:57:6b:88:85:f4:f0:fb:87:18:8c:6c:7c:
4c:76:10:47:e9:3f:83:4a:db:d1:cd:be:e0:38:47:
e8:1c:98:48:e0:e1:f6:0e:f3:a5:bf:e6:f5:51:d5:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:76:8D:0E:B5:ED:BD:17:45:C1:D7:64:64:BF:4E:F4:35:F1:84:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B66572DC78AE11EEBDD9500E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:48:42:0c:61:e2:6c:97:e4:c6:b0:fe:84:f5:7a:3c:3d:e1:
c8:2d:7b:75:6c:5c:54:3f:25:e1:45:10:ef:a5:6a:f7:c3:c8:
c5:2e:96:0f:ea:df:66:85:be:48:9c:14:bd:91:e4:e0:7f:5f:
15:90:ea:7d:84:a3:36:b7:3d:43:ed:ae:23:b1:29:20:be:98:
e4:4c:fd:be:e2:5c:b1:75:8f:8f:72:37:b4:61:34:81:84:ab:
90:27:c6:32:e4:7c:81:5a:09:f8:42:e7:dd:1e:80:59:27:39:
ad:78:47:53:65:6f:12:46:4c:10:35:c8:02:cb:fc:5d:e2:ec:
d1:31:86:4c:1d:f6:79:4d:be:b7:4a:5a:bd:4b:22:41:53:e4:
d4:3e:40:83:0a:c5:21:a3:e5:6a:28:0c:1e:b1:ae:24:67:8e:
44:0e:2f:e5:21:bc:8c:c6:c1:62:84:c8:17:8d:35:aa:84:25:
03:f7:8f:89:68:f2:f7:1f:f6:22:04:b8:af:80:c9:09:e9:43:
51:09:05:36:e0:a7:bf:b4:f9:c8:3f:5c:76:cd:07:54:c3:44:
9b:f5:6d:7f:6e:7c:77:69:99:02:c8:e0:4c:c5:6f:5d:e0:ec:
54:6f:a0:b2:8c:00:2c:bb:18:cc:6f:8d:8d:6a:05:d3:bb:55:
5a:5f:10:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICSykwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMDExMjAzNDRaFw0yNDExMDQxMjAzNDRaMBgxFjAU
BgNVBAMTDTY1NDIzZWEzLWIzYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT8AE6ouHEUePUc8l24rDMVMCWV4fCUmxbOFiilVQaF1c1/VVNVwfcEAU/
LAFBH6EtYDYm+ZXuvmZ1Ls6w12MPIBrjnNaC5pQ+BgqBSWR8F8+5khkkjVQblByq
AA3yk3pvZL+YcOd2lPibWKZOy7nJHf9Oow6DGk9m4MaNQNzVwbabS/dIlQphGtzR
fbHszLuYQpSAVLlzDISiqQZAq5LXv/euAzfA0YBqOgmK5tEdbeRv2dY29uCJADS4
ihYaGv8WeHIIG5c58jmJHyDih/uDH/gGqFdriIX08PuHGIxsfEx2EEfpP4NK29HN
vuA4R+gcmEjg4fYO86W/5vVR1TdDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUxnaN
DrXtvRdFwddkZL9O9DXxhHUwHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4L0I2NjU3MkRDNzhBRTExRUVCREQ5NTAwRTRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaWQ0wDQYJKoZIhvcNAQEL
BQADggEBAH1IQgxh4myX5Maw/oT1ejw94cgte3VsXFQ/JeFFEO+lavfDyMUulg/q
32aFvkicFL2R5OB/XxWQ6n2Eoza3PUPtriOxKSC+mORM/b7iXLF1j49yN7RhNIGE
q5AnxjLkfIFaCfhC590egFknOa14R1NlbxJGTBA1yALL/F3i7NExhkwd9nlNvrdK
Wr1LIkFT5NQ+QIMKxSGj5WooDB6xriRnjkQOL+UhvIzGwWKEyBeNNaqEJQP3j4lo
8vcf9iIEuK+AyQnpQ1EJBTbgp7+0+cg/XHbNB1TDRJv1bX9ufHdpmQLI4EzFb13g
7FRvoLKMACy7GMxvjY1qBdO7VVpfEJs=
-----END CERTIFICATE-----
Generated at Fri May 3 04:44:36 2024 by rpki-client on console-fra.rpki-client.org