Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C736AA482BF11EEB2DEA63F4AD9E6FC.roa
File: 3C736AA482BF11EEB2DEA63F4AD9E6FC.roa (raw, json)
Hash identifier: NgdY5jnv37ONOKjIZM9fmOsvdNhT/YrDT5TFUFTzxzo=
Subject key identifier: 7E:E4:2D:28:BA:99:C4:C0:97:AE:BE:ED:F4:B2:34:DF:6F:15:4F:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 500C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C736AA482BF11EEB2DEA63F4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:27:16 +0000
ROA not before: Tue 14 Nov 2023 07:27:13 +0000
ROA not after: Tue 12 Nov 2024 07:27:13 +0000
asID: 397630
IP address blocks: 154.84.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20492 (0x500c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:27:13 2023 GMT
Not After : Nov 12 07:27:13 2024 GMT
Subject: CN=65532154-19d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:2d:0e:72:fc:66:bd:2a:61:95:4a:03:52:
eb:2f:ae:2b:7f:ff:83:db:ae:22:de:70:7b:34:13:
53:55:21:60:24:c0:18:43:33:98:38:37:13:20:06:
73:f1:2c:71:50:85:22:d5:cb:a7:9c:b8:d0:bc:6d:
c7:72:e4:c4:9c:03:3a:62:a5:d6:e0:51:c4:a3:ae:
a1:33:ef:2d:f1:08:b3:bf:fe:18:17:53:3c:a2:a9:
4f:f9:3d:c6:f1:67:f8:f1:fe:9f:d7:df:5e:e1:33:
7c:81:e7:fd:82:cf:d7:d9:c4:9b:79:18:30:59:0f:
ad:d8:7d:9f:90:2f:a2:38:9f:19:cc:c1:e8:df:a5:
86:d9:74:36:e4:7e:6a:7f:f0:5f:06:a2:a7:22:32:
0d:dc:45:4f:c3:1a:e4:e2:66:ae:5f:05:0a:46:bb:
02:ff:3c:fb:3a:60:0b:4b:35:e6:3b:b5:cb:a4:73:
fe:8b:70:eb:88:c2:53:dc:94:a8:22:a8:f6:f3:81:
f1:cf:a1:12:ea:ba:ee:1c:cd:f4:40:79:17:39:8d:
a1:c8:3f:01:7e:79:2d:f5:7e:39:41:b7:d5:cd:4f:
ad:c3:4f:67:1d:a6:ad:bc:96:09:9e:af:20:6b:ff:
36:ca:f2:2e:c8:d4:38:c2:20:db:63:4a:b4:01:19:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:2D:28:BA:99:C4:C0:97:AE:BE:ED:F4:B2:34:DF:6F:15:4F:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C736AA482BF11EEB2DEA63F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.143.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f5:56:47:4c:b9:b6:fe:96:89:d5:e6:21:ce:71:a3:e1:92:
bb:12:78:98:32:fc:5a:b6:d7:e5:65:63:3c:d8:d3:9a:f7:2f:
77:17:23:61:0c:4e:5f:7a:41:81:47:18:ab:d8:4a:e9:49:54:
a0:59:21:5a:b0:ce:d6:05:ff:c6:ce:e2:f4:bb:af:2e:e0:27:
94:b8:a9:f3:05:53:62:e7:f3:fa:05:00:3a:1b:f7:d2:6a:c8:
ce:c8:a8:24:84:da:0e:6a:62:72:ec:f9:80:ed:ef:b0:ed:ae:
13:b1:f8:c0:e9:be:94:26:0e:b3:ec:75:e1:09:05:4f:6d:a1:
06:1e:10:41:cc:64:36:2b:11:3e:d1:10:ad:41:2e:af:c9:d1:
03:ff:43:66:35:7c:ae:d3:c1:18:3f:63:31:9e:21:5a:6e:a2:
9d:58:bd:db:ae:52:f6:67:dd:6e:11:c7:de:da:af:16:a3:ce:
b7:56:bd:b2:f9:47:12:56:5b:aa:29:1e:4a:ea:9d:54:b1:12:
95:e4:68:8d:ad:00:40:dc:fd:84:67:bb:04:a2:96:c8:37:68:
24:db:4b:1b:26:c3:07:68:23:2b:e3:ee:73:34:7a:51:c7:de:
fb:72:13:43:9a:83:1e:fd:a7:8c:02:ca:b5:1b:74:d9:5e:c1:
ca:dc:ea:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org