Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1209F228A30411EEAAE4CB1DD25BE465.roa
File: 1209F228A30411EEAAE4CB1DD25BE465.roa (raw, json)
Hash identifier: 9zf+VkClvJXhyjcnumlMm7VS5/S9/vRfg89vHAE50rs=
Subject key identifier: F5:8E:C2:33:89:DD:84:A3:2E:ED:51:DA:84:A2:9F:CD:7F:DC:69:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6723
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1209F228A30411EEAAE4CB1DD25BE465.roa
Signing time: Mon 25 Dec 2023 09:00:37 +0000
ROA not before: Mon 25 Dec 2023 09:00:34 +0000
ROA not after: Tue 07 Jan 2025 09:00:34 +0000
asID: 139057
IP address blocks: 154.85.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26403 (0x6723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:00:34 2023 GMT
Not After : Jan 7 09:00:34 2025 GMT
Subject: CN=658944b5-fa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:31:b5:56:c0:fe:c9:68:9d:0f:92:a8:6d:
dd:72:03:65:5f:e3:83:a0:80:d1:cd:6c:1f:92:c7:
8f:fe:51:42:22:27:6f:ec:24:ff:50:fc:a9:17:ae:
35:f8:79:f4:ed:75:52:52:ad:31:79:df:01:02:c5:
81:be:30:9a:15:b4:fc:56:ea:2e:1a:04:4a:36:f6:
c7:c2:c4:62:4c:10:b1:74:44:07:80:e1:40:2d:71:
92:64:5d:85:18:1c:34:7a:f3:86:6f:9a:c1:b3:86:
3d:88:b7:eb:04:89:a0:f4:5b:a5:c6:1d:08:a8:68:
ca:d3:ff:88:d6:cd:7b:00:17:87:fa:25:51:bf:14:
54:98:35:3f:ee:6d:9e:f4:82:df:13:0e:15:d2:dd:
de:35:5c:08:be:b9:dc:2f:42:a5:c0:d5:68:a4:1c:
dc:79:33:c8:44:36:ba:48:f0:7b:0e:0b:39:5f:4e:
db:39:bc:46:d3:4f:c1:73:d2:ce:e9:4c:59:0c:64:
30:59:a7:8d:fb:1c:2e:96:14:dd:7b:19:bc:2f:da:
57:1c:95:42:bf:6b:89:c8:69:db:8b:e8:fe:85:7c:
1f:d1:34:42:1c:7b:fa:e6:ba:39:ee:ec:08:46:32:
cc:e8:87:d8:77:2e:34:f0:e0:b2:6c:ac:e6:6d:81:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:C2:33:89:DD:84:A3:2E:ED:51:DA:84:A2:9F:CD:7F:DC:69:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1209F228A30411EEAAE4CB1DD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.74.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:36:51:82:e0:69:94:fa:dd:96:82:c3:75:aa:c6:1b:b2:2f:
b7:92:be:e3:ee:cb:73:85:87:1d:dd:1e:4a:ed:f4:47:03:e0:
b7:ac:b3:e7:1b:7f:50:35:ba:f0:1e:55:ac:cc:79:0c:28:e7:
6f:d9:66:e4:0d:f2:53:ec:8f:e1:63:9b:bd:11:fa:37:4c:40:
4d:2d:38:ff:d7:1d:1c:94:91:45:91:d2:92:6a:73:b3:bd:1d:
d9:36:2d:2e:d9:1c:7b:af:99:49:66:53:95:29:68:fc:bd:51:
e5:32:12:63:7f:47:22:e1:49:ce:08:56:f8:73:31:4a:e4:d5:
4d:12:56:59:7d:62:b3:ee:dc:46:d6:af:32:b6:e0:9e:44:3f:
cc:4d:c5:11:dd:f9:00:4a:16:63:5d:c2:d4:8e:12:bc:7a:01:
d6:66:21:11:7d:a5:e8:2c:89:eb:73:0d:8b:37:16:43:d2:c1:
37:0a:9b:39:62:6b:c7:95:6a:56:47:6c:a8:a8:9c:60:bc:8f:
22:f4:46:6d:c0:28:5d:1c:f0:26:52:47:2b:74:56:ce:4c:4c:
8f:e1:2b:3e:c0:2e:7d:30:6f:15:2a:39:ca:61:0d:f5:d3:ae:
95:ef:79:e2:1a:01:6f:bc:9b:7e:a9:84:01:fe:f8:c0:ba:dc:
30:e1:f3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:47 2024 by rpki-client on console-fra.rpki-client.org