Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA1A854671B11EE86C250744AD9E6FC.roa
File: 1CA1A854671B11EE86C250744AD9E6FC.roa (raw, json)
Hash identifier: q0SZzsaP3buPl8N3HoFMAJC3MfRMkXBcvrT8aNal7Ek=
Subject key identifier: 54:0F:24:4E:22:05:A8:F7:84:9A:94:68:D3:75:54:73:F9:68:08:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 455B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA1A854671B11EE86C250744AD9E6FC.roa
Signing time: Tue 10 Oct 2023 03:14:24 +0000
ROA not before: Tue 10 Oct 2023 03:14:20 +0000
ROA not after: Wed 28 Aug 2024 03:14:20 +0000
asID: 140227
IP address blocks: 154.197.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17755 (0x455b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 03:14:20 2023 GMT
Not After : Aug 28 03:14:20 2024 GMT
Subject: CN=6524c190-23e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:30:66:5b:e9:29:a1:0f:04:a1:62:ae:65:
29:a6:7a:9e:a8:64:d8:e4:eb:47:bb:f2:b2:6d:de:
fc:9f:99:2a:14:f4:e9:44:40:f6:e2:7c:e6:9b:a9:
93:7f:91:75:ce:9f:ec:fc:fa:9c:28:b3:51:44:e4:
bd:46:0a:a9:14:2f:42:5c:76:0e:9f:61:71:18:bf:
03:86:dc:fc:0c:e9:0a:cf:a7:7a:13:1e:75:42:64:
65:b0:9c:27:d8:27:b1:c2:b6:bc:98:51:09:3f:c3:
22:93:95:18:74:8a:77:36:44:fd:61:da:26:ac:e0:
03:35:a1:03:e4:52:0f:8c:5a:63:ed:46:54:ac:1b:
aa:30:34:a3:d8:34:bf:0c:c4:28:df:61:08:9b:c5:
26:c2:e6:c4:12:c7:e5:29:e2:23:f1:aa:86:4e:8d:
9e:ae:ae:e6:17:9a:c8:1a:dd:ce:b6:cd:f7:33:a6:
03:8b:7c:a7:f6:62:71:c4:bf:8c:2c:cd:00:11:93:
15:03:4e:05:dc:ff:04:84:55:4c:88:c6:c4:a3:5b:
a1:7d:8b:ca:43:e4:d6:7b:53:d8:ad:ad:25:4c:87:
d7:b0:6d:8b:69:dc:0b:bd:c3:59:f6:33:d4:11:b2:
e6:43:60:83:86:4d:cf:43:57:01:ea:af:e7:df:92:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:24:4E:22:05:A8:F7:84:9A:94:68:D3:75:54:73:F9:68:08:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CA1A854671B11EE86C250744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:99:04:fe:21:19:fc:ea:4b:71:95:b1:b8:4b:39:d0:95:e6:
37:0b:72:2a:8f:66:7a:05:37:d3:37:c4:91:cb:e4:b8:38:9a:
6d:cb:86:e0:8f:9b:92:fd:be:82:ec:7d:7a:19:27:2f:51:7a:
e2:87:37:ed:70:ba:ff:ab:a0:44:b9:d8:28:a8:cd:d3:a6:f3:
6c:35:82:a2:30:a7:c7:47:f5:ad:52:b6:dd:43:5c:c6:c9:d3:
09:29:b8:30:b1:82:d6:47:0a:ce:c9:4a:90:33:86:8b:1e:45:
c1:0b:b3:a6:07:e4:35:16:0f:76:05:cc:5b:71:76:25:86:25:
07:9d:85:30:72:79:49:f7:a9:49:7e:9e:5d:10:c5:e5:0b:34:
ea:47:e8:fa:6b:79:39:4a:20:b9:2f:dd:05:f8:40:52:ec:09:
d9:8d:62:b1:ca:73:10:1a:a5:20:f2:e6:0a:76:0f:92:9a:af:
b8:c6:2e:76:df:27:7a:6b:50:c1:cb:44:88:cc:83:20:32:de:
78:5e:de:95:04:52:e3:5b:41:c8:5f:0b:24:aa:81:c2:bc:66:
7c:ba:bc:b5:ff:79:8e:84:aa:f5:67:da:6e:35:c9:99:0e:a8:
f3:60:fc:4e:5c:70:7e:a3:c4:93:e1:d3:38:14:2c:ae:55:cf:
4f:e7:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org