Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1995E2F205F311EF9D37096B017001B1.roa
File: 1995E2F205F311EF9D37096B017001B1.roa (raw, json)
Hash identifier: UF17f8mKk7m7NmEG1Hy9tpNbGYuCrUtxqelLQ8a/Suk=
Subject key identifier: 0C:2A:66:02:25:74:65:91:88:FE:12:D6:35:75:C5:EF:2D:45:89:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1995E2F205F311EF9D37096B017001B1.roa
Signing time: Mon 29 Apr 2024 06:38:34 +0000
ROA not before: Mon 29 Apr 2024 06:38:30 +0000
ROA not after: Tue 04 Jun 2024 06:38:30 +0000
asID: 272854
IP address blocks: 154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45552 (0xb1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 06:38:30 2024 GMT
Not After : Jun 4 06:38:30 2024 GMT
Subject: CN=662f406a-48b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:36:f1:e1:f9:af:d4:5f:76:7e:79:98:d8:
e9:67:b7:11:c5:3c:3c:8e:7d:6f:f5:44:01:55:f8:
2d:8a:ca:51:01:e6:fa:3b:16:55:ba:c3:ed:86:d1:
50:17:8c:0a:65:07:9b:59:f5:03:10:01:82:36:1a:
56:94:3c:54:02:c5:07:be:8d:94:3a:f5:e7:33:37:
ab:04:5e:c3:ac:21:0b:42:d5:30:37:22:25:bf:8c:
49:da:0b:3b:6e:1b:2a:dd:6e:5d:7a:a2:e7:6a:6e:
10:e2:57:67:cd:44:bf:9f:12:21:8f:03:3c:e1:97:
de:87:ac:9c:cf:1b:be:31:44:a3:33:61:74:1c:71:
1f:8b:1e:eb:f2:71:b3:b6:ce:8f:b2:cd:75:1c:72:
ad:3b:c8:cc:8a:97:e9:b8:34:6e:24:77:39:13:0f:
20:72:9b:e0:fc:c6:91:c1:8c:cb:0d:b5:51:9e:29:
de:97:3a:c0:c2:30:87:9b:36:bb:57:33:0a:41:2c:
79:fc:1f:5e:96:d6:24:2f:d4:6b:0e:f3:51:61:3a:
3a:33:7b:b4:3a:c6:cf:29:ce:0e:79:6e:a7:3c:24:
0e:07:85:c9:be:f0:8e:e3:31:81:2f:71:20:be:ec:
9c:98:75:30:bf:8f:4f:82:bd:88:fc:6f:2a:04:82:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2A:66:02:25:74:65:91:88:FE:12:D6:35:75:C5:EF:2D:45:89:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1995E2F205F311EF9D37096B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1c:db:e1:dd:ba:34:e7:59:6a:a8:15:d6:9c:74:9a:1e:c5:
6f:f3:e4:ab:14:39:26:6c:a6:c8:05:25:05:77:b9:ac:de:21:
59:2c:06:6b:e2:a8:ed:01:a3:23:88:c7:a1:02:0a:d0:94:81:
44:f6:00:a6:bb:a8:15:a8:6c:e2:3a:44:2f:0f:34:9a:0b:ef:
c2:75:99:40:a8:cf:46:08:c3:1d:1d:76:72:d5:1f:b1:f9:e5:
9b:6d:30:2a:50:cc:13:76:1a:d0:69:aa:9c:b9:26:28:57:ae:
04:e5:95:53:7c:08:c1:6b:5f:86:29:4e:e0:19:94:48:24:4a:
00:7c:9f:91:4d:08:03:33:cc:cd:91:55:5b:7e:48:aa:d0:1b:
69:3e:26:ef:f4:a3:22:a7:28:4b:55:2e:92:60:56:e2:ac:70:
44:bc:30:23:7e:a5:d1:54:71:69:ad:7b:13:42:eb:2f:3d:2c:
92:20:eb:3e:1d:95:7f:29:51:0e:fa:78:f3:02:b6:53:48:f4:
48:16:e2:b4:70:33:05:5e:a9:41:aa:26:94:42:84:ca:fa:cb:
e0:60:d0:d9:6c:0e:66:b6:68:c4:e4:23:1b:95:21:a7:e8:0d:
da:39:e9:a0:7e:bf:83:20:fb:41:0e:0f:a9:93:42:f1:41:bb:
79:36:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:11 2024 by rpki-client on console-fra.rpki-client.org