Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B73B32018CA11EFA0CDBEF2007001B1.roa
File: 7B73B32018CA11EFA0CDBEF2007001B1.roa (raw, json)
Hash identifier: ytwztxROhanndjMlw6hvvTv7UdUKjpVxfecijRmU6dY=
Subject key identifier: 55:67:4A:1B:6E:81:F7:79:8F:7C:49:05:9E:6A:54:04:75:2F:36:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B9E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B73B32018CA11EFA0CDBEF2007001B1.roa
Signing time: Thu 23 May 2024 06:05:41 +0000
ROA not before: Thu 23 May 2024 06:05:37 +0000
ROA not after: Wed 26 Jun 2024 06:05:37 +0000
asID: 18013
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 26 Jun 2024 06:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47587 (0xb9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 06:05:37 2024 GMT
Not After : Jun 26 06:05:37 2024 GMT
Subject: CN=664edcb4-d370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:28:e1:b0:9e:f6:87:c0:8f:1b:fa:a4:06:
47:03:4f:f5:74:98:28:9d:cc:61:6f:1b:1b:58:59:
d5:71:11:3f:a0:a9:e5:d4:bf:82:a5:2f:7d:b6:58:
0b:84:f3:56:ab:f9:a4:15:f7:4c:a8:65:c5:db:b6:
79:f0:1b:ac:08:0c:cf:4f:46:d0:b4:36:4b:9e:b1:
07:73:a5:b5:2c:40:60:04:b5:12:e5:f7:11:83:33:
b9:c1:d4:17:cc:fd:88:ab:c2:94:a0:8a:66:5b:fa:
53:75:28:0a:90:26:62:17:74:26:84:9f:ce:b0:ed:
ef:63:4e:48:09:17:8e:63:49:9d:4c:bf:ac:1c:7c:
6e:1f:59:91:9d:de:18:b3:4e:42:d4:a9:a6:bb:c6:
26:56:99:5d:54:9d:3d:e8:d3:dd:b7:a0:e0:12:9f:
3b:91:1a:54:de:22:0e:63:66:fc:eb:7f:52:7f:67:
4c:aa:4a:d8:9c:77:2f:9c:c1:02:cd:3b:a1:9a:ee:
3e:30:1e:e0:74:ee:27:93:94:f6:65:52:b7:19:51:
30:3b:df:16:6b:3d:c4:f1:dd:10:2e:18:cf:37:dc:
bb:fb:1a:bb:36:b6:b7:d7:74:49:c8:7b:3b:b2:79:
92:74:75:b8:01:c5:82:47:e8:fd:21:18:30:15:51:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:4A:1B:6E:81:F7:79:8F:7C:49:05:9E:6A:54:04:75:2F:36:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B73B32018CA11EFA0CDBEF2007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:c4:8e:52:9a:98:c8:b0:a0:b1:5e:b0:7b:1d:45:fa:53:99:
9c:7f:7e:9d:86:24:e8:64:11:a2:ef:9e:25:34:46:6f:94:b4:
28:30:a6:89:0c:a8:09:45:02:cc:64:ec:34:fa:7c:b9:c3:fe:
d9:d8:97:81:f7:a6:42:ad:4e:0c:55:eb:35:f2:1b:91:d5:fb:
ac:a8:ad:07:45:ea:26:b1:e5:b8:f8:1c:89:49:46:37:b6:68:
a1:c8:5d:2e:2b:f8:96:95:a7:8b:e9:0d:48:c0:ba:e5:93:76:
67:12:b3:15:87:d6:bb:82:55:19:9d:92:82:2f:17:5b:c8:c8:
32:5f:8e:75:a8:82:b8:f4:1a:6e:b3:0c:7d:5d:a3:b8:c3:52:
59:c7:7a:60:d3:a9:1a:40:4d:66:10:ee:c8:0d:c8:03:27:0d:
6b:c8:38:8b:d3:9d:67:cc:1a:f2:c6:dc:0a:7a:dc:2d:7a:cf:
83:81:7d:80:b5:dc:4f:d9:f2:f0:6c:22:f6:50:5c:32:11:15:
61:65:df:4e:3d:de:43:e6:d2:93:78:17:5d:8f:d4:e5:76:3c:
eb:53:44:b2:5d:ac:1f:27:b6:18:01:36:b7:24:c3:19:ae:a4:
16:a6:47:be:e8:54:50:09:1b:72:33:ef:d8:68:c4:c9:e6:5b:
7d:d6:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:05 2024 by rpki-client on console-fra.rpki-client.org