Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/C60C59567D8711EF97D7ACB4762E951A.roa
File: C60C59567D8711EF97D7ACB4762E951A.roa (raw, json)
Hash identifier: qjux6GhSq9uX5DCNJbFQuyrkaPLVantCfSfpdQCqZvM=
Subject key identifier: C3:52:73:ED:56:E2:25:B7:30:12:88:BC:96:80:AE:7A:A7:6F:7D:49
Certificate issuer: /CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Certificate serial: 0134
Authority key identifier: E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/C60C59567D8711EF97D7ACB4762E951A.roa
Signing time: Sat 28 Sep 2024 10:52:37 +0000
ROA not before: Sat 28 Sep 2024 10:52:33 +0000
ROA not after: Wed 30 Sep 2026 10:52:33 +0000
asID: 327921
IP address blocks: 154.73.128.0/24 maxlen: 24
154.73.129.0/24 maxlen: 24
154.73.130.0/24 maxlen: 24
154.73.131.0/24 maxlen: 24
154.73.132.0/24 maxlen: 24
154.73.133.0/24 maxlen: 24
154.73.134.0/24 maxlen: 24
154.73.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.mft
rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3A58AF/serialNumber=E15F50DDD28E02FD6E6966D5918D1B0BBF4684E8
Validity
Not Before: Sep 28 10:52:33 2024 GMT
Not After : Sep 30 10:52:33 2026 GMT
Subject: CN=66f7dff5-e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:b6:fc:f6:68:44:47:1d:2e:eb:8e:f8:93:
e4:b8:b2:4f:c2:18:72:8f:a6:09:7a:d4:61:d0:88:
c6:e4:32:cf:8f:61:07:ee:98:e5:d9:80:ad:35:ba:
46:79:e2:91:f7:35:ca:62:57:91:29:6c:81:90:c8:
a4:5e:2a:2d:13:69:2d:d0:e0:1a:75:9e:d3:4e:d0:
81:3c:3a:7e:00:ff:c6:1f:22:e3:79:3f:94:21:21:
f9:2c:ed:9a:c8:ba:fb:22:fb:40:92:8f:54:0b:57:
30:1a:3d:10:4c:7d:3c:9f:55:3e:01:4f:8a:80:10:
5d:75:3c:58:6f:36:d5:9d:e7:6a:e3:56:ef:75:f5:
c0:86:0d:61:c9:f0:51:89:67:c0:7c:24:06:9c:c5:
e8:2a:f5:aa:43:65:fa:b7:d4:65:f2:54:43:ba:b4:
45:63:dd:f1:f3:2d:c4:52:42:49:06:95:51:ef:73:
55:e8:c0:90:9a:45:f5:ba:04:21:83:83:f6:04:d1:
18:b1:35:43:e1:1c:3f:8c:69:3c:fc:86:ab:8a:c3:
ad:b8:3e:69:9e:40:da:cd:04:e5:10:36:a3:d6:0b:
7a:d5:c0:11:b5:9a:f9:21:cc:13:c4:98:48:53:98:
04:50:5d:c0:28:2e:bf:20:5b:6a:9a:de:05:77:48:
3c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:73:ED:56:E2:25:B7:30:12:88:BC:96:80:AE:7A:A7:6F:7D:49
X509v3 Authority Key Identifier:
keyid:E1:5F:50:DD:D2:8E:02:FD:6E:69:66:D5:91:8D:1B:0B:BF:46:84:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/4V9Q3dKOAv1uaWbVkY0bC79GhOg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4V9Q3dKOAv1uaWbVkY0bC79GhOg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3A58/1B78C60CA8BF11EEBB3CA855775412E6/C60C59567D8711EF97D7ACB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.128.0/21
Signature Algorithm: sha256WithRSAEncryption
61:24:f6:d1:c1:f0:cc:86:2b:79:a9:23:78:d9:73:b1:87:8b:
95:ad:5f:40:81:39:36:47:0c:b5:03:d0:5a:f5:15:9d:9f:a1:
03:69:63:62:af:fd:a1:86:7b:85:c2:42:da:10:1a:09:06:8b:
de:07:21:82:67:c7:d6:eb:f1:9e:4c:5a:07:ac:1a:12:ea:05:
8d:01:99:53:d8:72:80:56:99:a1:a7:17:43:15:ef:bf:74:c0:
4b:84:1b:ba:b5:df:d7:51:3b:ea:bc:a6:e4:91:69:9f:87:68:
ef:28:64:8d:f6:f8:89:a0:65:e3:e9:56:1e:3b:05:7a:ff:6f:
80:44:0a:c1:de:13:84:ec:07:22:14:a6:c2:05:db:be:67:9e:
90:b1:43:5e:35:5e:9e:32:a7:95:2b:82:e4:ad:b0:7c:24:45:
fa:b2:1d:70:25:5b:80:5a:23:6a:65:c9:e6:eb:0f:3d:35:f6:
11:03:e7:65:7d:26:fe:26:2c:9e:ed:de:09:94:23:49:2f:7c:
6e:2c:d2:bb:48:6a:51:7b:a3:1e:67:9d:d8:93:33:92:49:b4:
0b:0a:18:7a:0d:2e:ad:1c:e4:56:da:63:b6:a8:c2:80:9c:fd:
e2:1d:e1:24:e5:6b:a5:5a:d2:8c:d4:f2:03:22:0e:81:a2:54:
45:66:ae:1f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICATQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzNBNThBRjExMC8GA1UEBRMoRTE1RjUwREREMjhFMDJGRDZFNjk2NkQ1OTE4RDFC
MEJCRjQ2ODRFODAeFw0yNDA5MjgxMDUyMzNaFw0yNjA5MzAxMDUyMzNaMBgxFjAU
BgNVBAMTDTY2ZjdkZmY1LWU1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7c7b89mhERx0u6474k+S4sk/CGHKPpgl61GHQiMbkMs+PYQfumOXZgK01
ukZ54pH3NcpiV5EpbIGQyKReKi0TaS3Q4Bp1ntNO0IE8On4A/8YfIuN5P5QhIfks
7ZrIuvsi+0CSj1QLVzAaPRBMfTyfVT4BT4qAEF11PFhvNtWd52rjVu919cCGDWHJ
8FGJZ8B8JAacxegq9apDZfq31GXyVEO6tEVj3fHzLcRSQkkGlVHvc1XowJCaRfW6
BCGDg/YE0RixNUPhHD+MaTz8hquKw624PmmeQNrNBOUQNqPWC3rVwBG1mvkhzBPE
mEhTmARQXcAoLr8gW2qa3gV3SDwFAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUw1Jz
7VbiJbcwEoi8loCueqdvfUkwHwYDVR0jBBgwFoAU4V9Q3dKOAv1uaWbVkY0bC79G
hOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzQTU4LzFCNzhDNjBDQThCRjExRUVCQjNDQTg1NTc3NTQxMkU2LzRWOVEz
ZEtPQXYxdWFXYlZrWTBiQzc5R2hPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRWOVEzZEtPQXYxdWFXYlZrWTBiQzc5R2hPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkMzQTU4LzFCNzhDNjBDQThCRjExRUVCQjNDQTg1NTc3
NTQxMkU2L0M2MEM1OTU2N0Q4NzExRUY5N0Q3QUNCNDc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOaSYAwDQYJKoZIhvcNAQEL
BQADggEBAGEk9tHB8MyGK3mpI3jZc7GHi5WtX0CBOTZHDLUD0Fr1FZ2foQNpY2Kv
/aGGe4XCQtoQGgkGi94HIYJnx9br8Z5MWgesGhLqBY0BmVPYcoBWmaGnF0MV7790
wEuEG7q139dRO+q8puSRaZ+HaO8oZI32+ImgZePpVh47BXr/b4BECsHeE4TsByIU
psIF275nnpCxQ141Xp4yp5UrguStsHwkRfqyHXAlW4BaI2plyebrDz019hED52V9
Jv4mLJ7t3gmUI0kvfG4s0rtIalF7ox5nndiTM5JJtAsKGHoNLq0c5FbaY7aowoCc
/eId4STla6Va0ozU8gMiDoGiVEVmrh8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:23 2024 by rpki-client on console-ams.rpki-client.org