Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09076EC482B811EEB93917294AD9E6FC.roa
File: 09076EC482B811EEB93917294AD9E6FC.roa (raw, json)
Hash identifier: OSrPt/hpZx5fekwOq5gpdWvW4Wi9G6WRnq3ifP1O18Q=
Subject key identifier: 35:18:FD:7E:8C:EE:DE:2A:59:20:FD:E7:18:0C:9A:A6:8E:EB:14:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09076EC482B811EEB93917294AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:35:44 +0000
ROA not before: Tue 14 Nov 2023 06:35:40 +0000
ROA not after: Tue 12 Nov 2024 06:35:40 +0000
asID: 397630
IP address blocks: 154.201.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20420 (0x4fc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:35:40 2023 GMT
Not After : Nov 12 06:35:40 2024 GMT
Subject: CN=6553153f-be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:24:21:09:f2:9f:b2:cb:44:8f:8c:bc:e2:
c2:57:76:1f:3b:e0:82:25:55:3a:1b:c0:74:f2:5d:
d2:e4:70:1b:95:69:74:68:92:1e:d3:0c:24:11:f6:
03:76:99:5a:de:99:da:a1:50:b8:5c:f0:4e:e4:51:
10:53:7f:17:f0:1e:0b:40:c9:9b:ff:79:29:4e:93:
80:57:81:2a:fd:f5:70:85:4c:33:4c:55:19:ca:38:
d3:b0:8c:47:06:d3:ff:a5:73:cd:83:7e:dd:87:97:
fa:42:f4:27:4e:d1:18:ab:ca:98:28:46:5b:a2:92:
d6:11:85:8d:34:3e:8d:4b:83:c6:39:f6:2a:9e:2a:
d6:eb:3e:ca:28:bd:4c:87:ad:ac:9e:dc:32:b8:c7:
ab:7c:2d:ad:e9:44:e2:2d:21:dc:7d:3d:76:dd:10:
d4:08:5c:f7:b6:97:73:92:82:59:94:3a:b6:11:63:
2f:9e:f1:a6:73:1a:2c:74:34:29:6e:07:09:ee:d7:
33:9b:34:4b:c2:eb:3b:cb:d0:60:2c:d3:15:ee:d7:
3a:fc:74:49:78:c0:27:d9:05:4b:81:c2:b1:85:52:
af:de:4f:a7:a6:54:90:0e:d0:df:03:63:22:65:09:
57:e1:e9:ce:29:97:f6:9a:06:1d:51:42:2b:a8:a7:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:18:FD:7E:8C:EE:DE:2A:59:20:FD:E7:18:0C:9A:A6:8E:EB:14:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09076EC482B811EEB93917294AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.57.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:f2:37:7b:b0:28:22:e7:12:94:89:50:d2:0e:01:2b:c3:a4:
7c:09:f2:69:ce:bc:63:89:79:2d:04:7a:35:0e:3b:1b:29:a2:
4c:77:d7:70:5a:b4:a6:ac:0b:32:fc:e8:8f:f1:9b:8a:a7:d9:
08:35:c9:50:16:4b:37:69:4a:cf:6c:7d:f4:02:a2:82:0b:52:
7b:9d:56:94:9f:ee:28:d3:82:9a:9c:2c:4c:77:68:0a:84:c3:
51:97:c0:da:ed:39:f9:ab:95:68:a2:8d:07:97:27:5a:49:5d:
da:90:bd:71:86:52:0b:6c:df:59:8c:65:55:35:a8:6d:32:67:
0b:51:f4:27:cc:0e:86:13:5e:28:5f:cc:3d:cd:6e:c1:3c:cb:
ca:b7:be:b7:41:bb:ab:dc:7b:54:e4:04:97:0d:ff:cf:e3:e1:
d4:2f:d8:42:f1:2c:6a:26:26:8f:57:38:ef:d2:b3:a7:4a:48:
89:00:41:64:5b:28:9f:61:44:8e:9d:b1:60:86:a6:4e:cd:14:
4a:47:87:35:f7:43:86:15:5d:15:50:b0:f7:3a:9f:e9:9d:72:
1c:15:29:84:eb:55:e4:ed:07:91:49:96:f5:d1:1c:6c:e2:41:
a5:e8:f3:f8:e1:b5:55:75:15:9e:ef:bd:c8:3d:b7:07:f2:d3:
8f:e1:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:13 2024 by rpki-client on console-ams.rpki-client.org