Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D780BE82B911EEA2C9962C4AD9E6FC.roa
File: 17D780BE82B911EEA2C9962C4AD9E6FC.roa (raw, json)
Hash identifier: 4Igk55BQ5zy4gY1C3UUqFffTiAzmnSn0VUoJSsaCT/8=
Subject key identifier: DF:AC:50:9C:A3:7F:0F:62:73:E3:56:8E:45:D1:4C:E4:33:02:30:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FCE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D780BE82B911EEA2C9962C4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:43:18 +0000
ROA not before: Tue 14 Nov 2023 06:43:14 +0000
ROA not after: Tue 12 Nov 2024 06:43:14 +0000
asID: 397630
IP address blocks: 154.202.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20430 (0x4fce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:43:14 2023 GMT
Not After : Nov 12 06:43:14 2024 GMT
Subject: CN=65531705-485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:7b:bb:a5:fa:b6:4d:9d:ea:67:f1:cd:93:
50:ed:cb:c8:62:22:3f:e7:34:f6:ca:02:57:d3:25:
07:af:13:e0:75:12:fb:81:d0:5e:14:07:60:45:13:
1c:52:d9:52:8f:3c:92:ec:99:aa:33:a7:e2:0d:a5:
dd:a3:40:09:99:08:0c:f6:8f:db:99:07:47:99:21:
f9:a6:71:fb:1d:39:63:fc:21:e7:ac:05:cf:54:6a:
de:15:c5:f7:da:5b:d5:95:ea:26:9e:70:0a:3d:ae:
ec:44:fa:e5:2c:9d:f3:46:37:53:4a:a7:ae:dc:da:
c6:dd:5b:b3:ea:12:f6:71:07:6e:12:c7:04:54:54:
73:79:cf:3c:4d:c8:bc:fd:43:8b:02:8d:ec:2c:49:
b1:1e:28:51:a2:9b:0c:de:d2:69:51:2f:3b:b8:32:
d3:3f:cd:4e:fe:99:26:2e:46:08:11:29:67:4a:f1:
2c:ea:21:69:4a:df:72:01:69:82:38:19:8c:89:38:
38:4d:0c:c9:db:3e:d2:1b:53:b6:73:b0:63:1a:d2:
b7:5a:9e:c4:1d:e4:12:a8:a2:da:5c:54:59:b5:89:
41:29:ae:8d:a0:37:1c:26:90:b8:de:44:e7:8d:68:
34:c1:4f:34:fc:76:96:e0:b9:57:38:3e:8b:3f:15:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:50:9C:A3:7F:0F:62:73:E3:56:8E:45:D1:4C:E4:33:02:30:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17D780BE82B911EEA2C9962C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.124.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:e2:b0:8f:aa:30:e6:29:31:15:7f:4f:43:23:0a:b9:2b:e3:
29:83:cf:40:6e:e4:09:4c:1d:ce:9a:67:73:2f:08:f1:71:72:
28:4b:b6:bd:7b:3e:5c:c0:b9:0c:39:f9:fe:5d:89:5f:30:00:
82:df:fd:c9:36:51:1b:a8:dc:5e:06:6e:8c:9c:20:1e:65:a7:
9f:a1:a7:6b:36:ee:94:b9:47:f1:28:a3:23:6e:54:12:28:47:
60:dc:92:82:27:5c:7c:29:09:38:0c:fb:c9:eb:da:df:20:30:
15:be:ff:2b:75:a4:31:3d:fc:57:5e:d2:5a:48:d5:0a:82:70:
f7:f4:5b:a4:87:13:83:9e:fc:73:b9:98:3d:bd:98:1c:16:6b:
4a:72:12:3f:92:93:a4:8d:8b:14:1f:56:ad:18:47:af:79:1d:
e9:43:c9:15:96:7a:bf:e5:5c:a9:b4:42:d6:e9:62:66:c0:1b:
14:fa:f2:dc:65:d2:c1:bd:f8:da:35:03:ef:07:c9:6e:dc:9a:
b1:9c:c2:a8:b5:2e:81:58:50:40:bc:38:91:df:b3:ec:e3:1d:
93:8d:6b:7c:5b:bf:d7:cc:3b:8e:04:b8:7c:e2:ac:b5:c5:7e:
52:96:0b:7b:4a:bb:87:e3:20:4b:a9:67:cd:53:03:b3:7f:2a:
f0:93:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:16 2024 by rpki-client on console-fra.rpki-client.org