Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976DACD0061311EF940F886F017001B1.roa
File: 976DACD0061311EF940F886F017001B1.roa (raw, json)
Hash identifier: DiCiFLVs6jXwF6EPmpXwcJLAq5+XY4qVHDiWXwrc1as=
Subject key identifier: 3A:D2:A2:8F:38:22:AB:5A:59:4F:72:67:BA:7C:CC:D0:D2:10:B3:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B256
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976DACD0061311EF940F886F017001B1.roa
Signing time: Mon 29 Apr 2024 10:31:09 +0000
ROA not before: Mon 29 Apr 2024 10:31:05 +0000
ROA not after: Fri 07 Jun 2024 10:31:05 +0000
asID: 138915
IP address blocks: 154.223.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45654 (0xb256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 10:31:05 2024 GMT
Not After : Jun 7 10:31:05 2024 GMT
Subject: CN=662f76ed-41d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:90:16:37:41:e4:c8:b2:df:0d:18:af:11:
b0:f7:19:4a:de:c5:31:23:d2:95:87:1b:ef:06:19:
8a:57:51:2d:26:7a:4c:b7:8f:a4:66:04:9c:ee:a5:
c9:fe:99:12:3f:62:ea:35:0a:7e:14:20:27:56:0d:
5a:9d:36:de:5f:5f:e4:4f:4a:3b:f7:d0:97:bb:d2:
53:7d:32:d0:85:59:e4:e0:85:45:43:23:40:5b:33:
c0:15:83:7a:f5:9c:ac:df:79:d9:36:e6:fd:92:8b:
83:6e:61:ef:c2:b0:fb:d5:fe:87:3b:2e:32:75:b5:
e8:c5:50:04:61:42:bb:03:9e:d8:47:f0:9f:cd:66:
22:e7:ab:ae:17:b9:42:28:d0:40:7d:41:35:d9:e9:
3c:f2:76:6c:e2:69:70:ec:88:4e:4f:11:0f:b3:50:
17:e0:b7:25:09:5e:fa:9e:fd:17:1e:cb:91:f5:e0:
04:52:2b:24:97:4d:3f:05:1b:4d:90:bb:ac:19:98:
c5:c4:d0:0a:43:83:aa:0b:c0:13:be:e6:bd:c5:6b:
7c:d4:71:c8:76:8d:b6:10:be:e7:fa:9d:43:f0:40:
5d:77:de:eb:1d:65:2a:0f:b6:f0:93:f4:42:67:96:
b0:9a:39:25:1a:6d:6b:b5:bf:ec:86:a9:46:09:04:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D2:A2:8F:38:22:AB:5A:59:4F:72:67:BA:7C:CC:D0:D2:10:B3:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/976DACD0061311EF940F886F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.70.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:c8:e7:a5:c0:39:8c:cf:20:e5:56:fa:f1:95:88:5c:13:5a:
19:4c:f6:e9:76:ae:fe:ab:c0:6c:49:82:5e:79:6b:fc:20:19:
af:18:21:1f:5e:21:98:37:6d:0e:57:43:54:ab:1b:ca:e0:ab:
28:28:5b:e1:d0:9b:3a:aa:68:6a:fd:ea:3d:d7:bb:76:1f:38:
b4:10:ef:36:f7:d2:9b:85:10:bf:73:4c:37:11:52:19:8e:96:
2f:35:75:e3:f5:13:60:de:db:4e:89:27:68:bc:07:05:85:59:
aa:8f:4f:68:79:0f:c4:69:38:c8:fa:a2:6c:63:af:58:05:b2:
18:29:c8:04:fa:99:71:92:f0:7e:c9:9d:aa:06:fd:e4:0e:a9:
77:c5:fa:42:58:1b:b8:8b:a8:d6:52:64:45:bb:83:ea:57:d8:
95:7f:d4:52:bd:b3:b0:7b:ac:d8:e7:5a:97:7b:68:01:0d:23:
e3:bf:f8:e1:96:39:59:77:58:b0:c9:d6:e3:01:56:3c:d5:53:
03:a2:9d:5d:72:54:f8:7e:ac:e0:ac:d7:e9:8b:c3:a2:ce:0e:
90:06:5b:af:00:77:db:e8:c0:2d:8a:d0:42:8d:f0:a6:ca:d3:
9c:80:45:58:db:04:df:fe:97:ce:20:1e:37:71:0e:0b:49:b1:
72:49:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:27 2024 by rpki-client on console-ams.rpki-client.org