Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C960430A30311EE93C2F01BD25BE465.roa
File: 1C960430A30311EE93C2F01BD25BE465.roa (raw, json)
Hash identifier: maJS8//XHJ6kumSjkVdYf+8DmZdsHPK2tk0voZvV6Qk=
Subject key identifier: 47:A0:02:94:F1:A3:EA:25:1F:D6:96:58:B6:CE:0B:7B:EC:16:6A:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6719
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C960430A30311EE93C2F01BD25BE465.roa
Signing time: Mon 25 Dec 2023 08:53:45 +0000
ROA not before: Mon 25 Dec 2023 08:53:42 +0000
ROA not after: Tue 07 Jan 2025 08:53:42 +0000
asID: 139057
IP address blocks: 154.85.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26393 (0x6719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:53:42 2023 GMT
Not After : Jan 7 08:53:42 2025 GMT
Subject: CN=65894319-e6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:3a:19:65:ba:d6:3a:c0:69:18:5a:0d:f0:
5e:14:a2:4c:7e:62:ae:ca:90:81:e3:93:ff:ed:05:
7f:63:bb:fc:c6:5d:a4:f9:bc:10:32:50:71:a8:b9:
44:00:fa:87:20:2e:f4:f9:a4:b8:68:e9:b5:a6:74:
e6:c6:07:8c:07:39:ad:eb:3c:c1:d6:c6:9a:fd:b7:
d6:63:8a:41:6b:fb:8c:c4:21:a1:56:82:cd:23:33:
33:78:61:76:5e:3e:ac:16:c4:a7:bd:3d:2b:20:92:
11:6e:b5:83:a7:d6:37:48:df:7e:64:e5:3a:ee:8c:
4d:52:65:91:fc:44:c5:05:8c:31:32:df:7b:b7:f4:
2e:d4:23:1c:ba:2c:65:da:27:57:7e:b0:bb:f5:a9:
30:15:66:35:b7:a9:80:da:77:7c:03:9d:35:ef:12:
42:00:2c:d9:2b:b5:91:1b:6b:18:a5:33:43:37:c8:
4c:7a:22:86:9e:98:94:9a:31:32:56:a3:8f:b8:2a:
ab:a2:82:58:d6:e1:19:30:28:0f:5d:25:fc:53:ba:
32:a7:ed:81:08:43:e1:e4:d0:b4:9d:7b:d4:f0:75:
e4:f4:1c:59:17:b4:6b:8b:3e:f3:e5:89:3c:59:65:
9e:3a:97:19:5e:b0:7e:10:cd:50:0a:fe:11:40:c6:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:02:94:F1:A3:EA:25:1F:D6:96:58:B6:CE:0B:7B:EC:16:6A:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C960430A30311EE93C2F01BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.73.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:1d:9a:7d:a8:e6:84:6b:13:de:5d:c5:da:dd:7a:fd:9f:1b:
ce:30:bd:62:1e:2f:a8:ff:9e:13:f1:8a:1c:68:1b:e5:f7:0d:
86:a4:14:d0:e4:2e:23:07:48:2f:c1:32:f5:0d:fd:4a:e7:dd:
d8:9f:7c:30:d1:1a:49:21:44:33:46:43:f0:a2:ef:67:8f:ef:
40:0a:7f:2c:05:f1:7b:f0:d3:97:fd:07:61:02:b3:a9:08:2c:
3e:f7:e6:c4:47:b8:fc:ce:dd:96:c8:75:68:f9:24:c3:e4:ef:
c8:db:be:6d:b1:c4:a4:28:c6:2d:97:40:4d:4a:8f:c6:b6:a7:
7b:06:9c:35:9d:be:89:34:96:b1:d3:1f:12:71:3b:68:4a:22:
61:a1:e5:2f:c4:98:85:66:0c:00:c3:a8:67:7e:e1:b9:15:f7:
fc:cf:dd:47:5b:52:4a:54:a2:af:01:d1:fa:ac:81:ed:35:45:
e3:dc:6c:26:78:29:76:40:fd:78:fa:76:c8:4d:b9:22:b6:58:
2f:cc:b8:31:5a:55:66:7e:ad:52:00:f5:3a:ce:a0:6c:cf:41:
17:aa:3f:8a:60:d8:78:79:94:80:30:e4:49:dc:cc:d2:b1:69:
36:83:3a:d3:0f:b1:cc:b4:b5:47:01:b8:f4:9b:a6:e1:4a:eb:
2a:25:00:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:00 2024 by rpki-client on console-fra.rpki-client.org