Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3AA028A30311EEA56F7E1CD25BE465.roa
File: 4D3AA028A30311EEA56F7E1CD25BE465.roa (raw, json)
Hash identifier: Cv6Al/I+XuXUKOaYyHH7SwHdfe9lniW0rAkb7ZGJtVo=
Subject key identifier: A4:6D:63:AA:AD:8E:A8:4B:86:25:CD:49:A9:BB:52:2B:31:20:2A:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 671B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3AA028A30311EEA56F7E1CD25BE465.roa
Signing time: Mon 25 Dec 2023 08:55:07 +0000
ROA not before: Mon 25 Dec 2023 08:55:04 +0000
ROA not after: Tue 07 Jan 2025 08:55:04 +0000
asID: 139057
IP address blocks: 154.85.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26395 (0x671b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 08:55:04 2023 GMT
Not After : Jan 7 08:55:04 2025 GMT
Subject: CN=6589436b-196c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:11:e7:5d:72:df:f4:48:29:2f:1e:c1:57:
c9:e8:d7:60:e8:4a:ec:f8:54:94:82:08:92:3a:98:
22:e7:28:2e:cc:c5:81:c8:2f:c5:21:63:40:36:e4:
a9:0c:b0:fd:81:d3:12:20:87:78:2c:67:2e:fd:87:
a5:f9:5f:df:c9:e4:a6:4e:de:1c:cd:0e:20:58:55:
92:c5:80:48:ab:66:36:06:e3:38:38:5d:13:4a:6e:
f7:23:c3:04:30:37:12:b1:4b:02:85:bb:77:b6:40:
fc:f2:ba:05:0d:91:d4:6a:fd:04:2b:a8:4c:7f:3c:
18:ae:ba:29:44:cb:3f:06:45:1c:08:42:21:e6:86:
04:48:6b:f3:34:8a:13:a1:d5:ec:30:37:ab:0c:4d:
31:31:73:87:65:91:b8:07:fb:f5:cb:c9:90:e3:31:
16:48:3c:5f:13:4b:87:ba:e4:ca:b3:48:e7:4c:68:
4a:a9:86:cf:e4:75:51:63:c3:26:1b:82:1e:29:06:
e5:76:e0:f9:3f:46:0f:b6:26:c9:85:d8:09:f6:45:
2b:8d:53:d1:05:6b:b5:43:bb:0e:a2:d9:63:49:2d:
41:0c:07:43:fa:cb:a9:0b:dd:df:3f:6f:21:8d:89:
ea:66:c7:28:be:f9:a0:7f:0a:5e:01:43:f3:da:a3:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:63:AA:AD:8E:A8:4B:86:25:CD:49:A9:BB:52:2B:31:20:2A:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D3AA028A30311EEA56F7E1CD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:38:da:79:01:3f:ac:ed:a2:66:bb:92:11:21:99:94:5e:ac:
70:77:c6:da:a2:81:6d:06:ec:5c:cb:9e:d7:1d:1a:b2:27:75:
d7:8f:c5:0a:7c:b1:50:f2:64:6f:08:b7:2f:83:c5:b7:50:59:
af:1e:b6:bf:d9:42:54:47:be:8b:b4:04:0e:b1:10:c4:2c:d6:
00:56:0c:d1:45:c6:21:f6:ea:7d:50:e0:79:11:d3:39:76:01:
55:50:50:23:11:09:a9:75:75:92:9f:31:b5:7e:53:d6:42:f2:
55:8a:8c:a3:48:ae:c7:28:5e:d7:9d:39:3f:fe:a2:b0:1f:64:
93:60:39:78:c8:c2:7e:a5:f2:12:b2:59:62:45:b6:32:ab:be:
fc:19:c4:d3:4e:30:9f:c4:6a:8f:db:05:32:1a:df:73:f0:1e:
58:2a:ed:0a:f9:77:db:08:eb:9c:23:37:b0:2c:a4:e1:35:4b:
e6:91:e8:e7:46:f4:08:94:25:bb:50:42:3f:35:7e:b5:57:03:
0b:e9:e4:7c:46:4c:84:8d:b1:9a:c0:06:22:68:6c:39:42:5e:
7d:df:63:84:60:7b:dd:58:93:0c:0b:16:14:9a:01:6e:a2:37:
41:bb:0a:54:a8:a6:e6:23:5f:00:c1:c6:1f:8e:ee:8e:9c:dc:
3a:90:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:03 2024 by rpki-client on console-ams.rpki-client.org