Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25AA8DDAEFF111EE83907197775412E6.roa
File: 25AA8DDAEFF111EE83907197775412E6.roa (raw, json)
Hash identifier: xANCNxsKD7Jw8zV7beYDge0G3Acgck/663vHlkfkMtg=
Subject key identifier: 2C:A4:3A:AC:A2:CD:FB:FA:BC:11:8F:C1:32:88:FD:70:D3:A9:55:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25AA8DDAEFF111EE83907197775412E6.roa
Signing time: Mon 01 Apr 2024 06:29:09 +0000
ROA not before: Mon 01 Apr 2024 06:29:06 +0000
ROA not after: Tue 07 May 2024 06:29:06 +0000
asID: 138915
IP address blocks: 154.223.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42940 (0xa7bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:29:06 2024 GMT
Not After : May 7 06:29:06 2024 GMT
Subject: CN=660a5435-2b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:12:97:2b:79:19:ff:30:08:64:31:5c:ed:
9c:6b:12:78:d2:f0:d4:dc:64:0d:86:cd:e5:4f:d1:
4c:23:52:4c:d3:43:2c:65:b2:71:02:7e:72:f5:f0:
b5:3b:e9:0b:54:d8:6b:e3:aa:87:19:e1:96:ac:f6:
d4:97:36:93:c8:70:09:1e:bd:a2:e0:d3:c2:a3:48:
7f:a3:1e:ba:e7:e4:41:25:18:5f:6e:3e:91:40:e0:
c0:a1:0b:96:48:c4:4f:8a:61:01:a0:18:64:65:24:
cb:c2:dc:fc:c8:11:78:3b:7d:d0:2f:53:48:ed:5e:
3b:b3:fe:b9:44:8e:86:38:f6:25:f2:f9:f9:af:91:
98:95:a7:30:c9:47:11:88:45:c0:d6:0d:f7:c8:e6:
ee:b3:ca:52:8c:61:a9:96:76:f3:eb:ad:b2:53:5c:
43:ea:53:cd:7c:1b:c6:a4:ee:82:b4:74:08:73:82:
e3:fe:a3:d0:ff:8b:59:42:e2:9a:74:28:72:0a:73:
a3:e5:9d:64:69:10:d5:b1:00:bc:7e:59:25:25:bf:
c9:7b:6f:6f:2a:dc:81:4e:a9:ea:83:f7:4c:70:22:
ef:65:88:71:53:c1:b2:54:44:d6:28:c2:dd:c3:35:
63:70:65:c2:42:48:44:3a:0c:d0:06:37:ae:93:55:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A4:3A:AC:A2:CD:FB:FA:BC:11:8F:C1:32:88:FD:70:D3:A9:55:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25AA8DDAEFF111EE83907197775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.54.0/23
Signature Algorithm: sha256WithRSAEncryption
66:5b:a3:46:f0:c6:af:58:bb:a9:f2:38:97:bb:e6:26:08:e1:
5a:34:79:eb:0c:a5:97:cb:de:41:2a:fe:5e:29:09:97:2d:05:
01:d1:43:da:37:09:19:a2:ed:0d:3f:26:2d:a1:4a:47:8c:2f:
3f:95:e1:56:e6:3d:07:01:ed:57:7b:5f:f0:9b:97:54:03:df:
9f:9f:29:5d:c5:a8:04:a0:b2:1f:3e:e9:dd:98:23:be:84:eb:
08:5a:b6:e0:d2:38:3f:90:9a:1f:8f:cc:ac:d4:0d:52:04:ee:
f7:0a:d6:93:ff:07:9a:6f:55:53:b6:94:ac:0c:09:4c:78:3b:
0a:60:c3:7a:2e:d3:ad:05:53:35:1b:a6:07:5e:d4:26:95:9e:
ed:0f:c4:c6:e2:d0:8d:ee:e0:5f:b7:13:eb:35:24:b9:5a:dd:
56:c6:ef:96:e1:1d:30:c8:5a:f5:b3:f0:da:29:19:3a:ee:ae:
1a:7e:cf:b2:cb:7b:fa:2e:75:9f:55:a0:83:46:76:cd:52:36:
5d:eb:a4:5a:56:d3:62:1a:ef:52:08:83:f0:21:e1:34:36:05:
86:86:29:8a:42:4e:f1:6a:07:cf:f9:bd:85:fe:56:1e:da:fb:
df:98:4a:e2:9f:5e:d3:43:83:a9:6c:2e:9f:2c:7e:55:66:e4:
24:a7:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org