Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73E415AA014111EF882E331E017001B1.roa
File: 73E415AA014111EF882E331E017001B1.roa (raw, json)
Hash identifier: HtdRlxy062MuCSBb8W3pU1S5YqCEffLi8ANkZ+12QMM=
Subject key identifier: A8:A1:75:73:73:C7:4F:D6:13:D9:AB:51:25:5B:7F:F6:5C:29:E4:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AED1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73E415AA014111EF882E331E017001B1.roa
Signing time: Tue 23 Apr 2024 07:16:50 +0000
ROA not before: Tue 23 Apr 2024 07:16:47 +0000
ROA not after: Fri 18 Apr 2025 07:16:47 +0000
asID: 328608
IP address blocks: 154.197.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44753 (0xaed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:16:47 2024 GMT
Not After : Apr 18 07:16:47 2025 GMT
Subject: CN=66276062-1dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:70:ef:87:6c:f9:aa:6f:6f:c1:42:23:73:
c7:ae:b1:6e:1f:7a:cd:54:cd:c9:1d:ff:ca:67:e9:
60:30:38:ee:5c:54:43:2d:96:8f:39:75:d6:b0:c1:
a9:fc:29:60:06:d6:e4:2f:ea:6c:6a:74:7a:f7:98:
28:16:f1:72:a8:d4:c1:3b:57:e7:04:31:59:c5:73:
86:f4:15:dd:98:59:f6:c0:07:d9:42:ae:63:21:7c:
ee:ee:c7:3b:34:91:63:35:88:6b:3a:77:61:65:72:
45:d5:d8:d3:32:7f:b6:02:a9:d6:9a:d1:de:fd:53:
61:15:be:83:2d:49:1f:b2:ff:d7:aa:4c:70:cd:74:
f4:57:30:0d:a1:7b:fd:14:db:e2:ea:bb:d7:f4:a8:
d0:3d:eb:62:3b:b7:7d:6b:81:40:22:95:03:f8:c4:
f7:43:04:b6:b3:35:df:95:88:d8:a6:18:72:e3:20:
07:bf:6d:91:c8:b2:d2:84:4b:2d:10:ac:89:7c:0a:
79:95:d1:f7:ef:c5:9a:52:5b:73:c3:e2:c8:6e:96:
8e:e6:0a:5b:a3:e9:fe:f1:f7:4d:a0:6e:94:f7:35:
ac:0b:59:bb:0a:85:7e:34:f9:39:89:06:de:fb:ed:
f7:76:8e:19:4d:07:f7:c9:49:05:e2:e8:19:3d:bc:
a1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:75:73:73:C7:4F:D6:13:D9:AB:51:25:5B:7F:F6:5C:29:E4:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73E415AA014111EF882E331E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.122.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8b:eb:41:a9:48:fb:b4:ee:4f:6f:ef:20:27:ac:cb:64:00:
e1:b8:67:2c:29:4b:db:e3:f0:56:ab:63:f1:e9:d4:80:e9:a2:
8f:27:7a:bb:0e:04:5b:19:33:1e:51:76:f2:58:c6:d6:6b:46:
53:d8:01:5e:67:94:64:70:9a:94:3f:03:66:cc:49:29:72:12:
db:55:b8:35:cf:1d:1a:22:64:0c:b7:a2:83:05:ab:64:a1:cf:
d6:24:97:b3:e6:63:c3:da:70:b1:82:1e:74:b8:ea:5a:c8:d2:
95:8e:07:84:74:d0:0a:61:23:e1:7d:6b:61:99:12:a0:f5:f0:
c6:cd:2a:8d:2c:1d:1f:7f:ae:4a:84:e9:6f:27:5e:3a:54:6e:
ae:bc:15:08:e1:56:f9:c1:26:21:0e:a9:b9:b4:9b:52:e2:b3:
6d:c1:ba:ca:96:0f:ff:bc:9e:be:9e:d5:93:1d:39:3b:5d:bb:
9a:e7:e9:6c:f1:6d:44:ba:a6:63:54:e1:c5:a3:a2:b3:ab:5b:
bf:94:98:36:5b:10:7e:6d:85:39:0a:43:43:18:7d:19:07:73:
bf:27:fc:af:1e:a2:08:bc:d4:4f:e7:cf:5e:f7:73:ed:e1:b7:
18:ae:f2:1a:54:b9:09:5c:b2:da:bb:7a:33:c7:e4:b6:f6:45:
c6:e1:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:17 2024 by rpki-client on console-fra.rpki-client.org