Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EFB34267C5311EEBCFCC12C4AD9E6FC.roa
File: 4EFB34267C5311EEBCFCC12C4AD9E6FC.roa (raw, json)
Hash identifier: N3OGatAN1e0z9bKhtiLBkdLyiLxAjekWoQU4wX/VSoo=
Subject key identifier: 72:08:8F:6A:6B:75:B6:32:06:31:74:D4:CC:23:1F:4A:F7:30:69:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4BB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EFB34267C5311EEBCFCC12C4AD9E6FC.roa
Signing time: Mon 06 Nov 2023 03:19:35 +0000
ROA not before: Mon 06 Nov 2023 03:19:31 +0000
ROA not after: Tue 05 Nov 2024 03:19:31 +0000
asID: 133448
IP address blocks: 154.223.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19380 (0x4bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 6 03:19:31 2023 GMT
Not After : Nov 5 03:19:31 2024 GMT
Subject: CN=65485b46-4589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:e7:b5:c0:4d:a8:d6:7a:9b:cd:2d:93:96:
ee:3d:40:e9:b2:bf:c2:8f:27:7f:52:06:29:4e:01:
8b:de:0a:a5:5d:32:ca:f0:7b:a8:55:4b:b2:ee:a9:
39:76:bb:c1:d7:c1:0a:65:fe:1d:a6:f0:8f:df:cd:
00:c1:b9:a3:42:82:07:a1:af:7f:59:1b:3c:b2:fc:
9e:ce:1e:0d:b1:a9:78:65:94:0a:b5:73:85:67:35:
4a:0b:8d:ad:1f:60:6d:6f:df:b0:c1:fd:f9:ad:7e:
9f:74:08:ec:7f:ad:fa:bd:5c:7d:a1:c9:e0:a5:e5:
62:2a:29:cd:03:9e:fa:27:ce:46:c1:23:8a:eb:9e:
14:70:92:b7:f8:12:a0:62:e1:6d:2f:bd:76:11:ed:
62:3d:37:9d:1d:9a:9c:1c:15:f1:fb:56:3b:78:45:
45:2c:c7:d3:fa:85:e1:91:8d:b9:62:a0:72:d7:8e:
d7:be:b5:91:06:48:40:9e:22:c8:9f:74:a4:1f:0d:
5c:97:4a:65:11:43:21:1a:ad:8b:98:49:d1:17:e6:
4c:e0:cb:31:a7:57:51:6d:d5:87:72:e0:55:36:6b:
cd:91:60:e3:11:c6:67:57:e4:9a:d6:72:6d:74:11:
68:1e:bd:b4:de:6a:df:ba:6b:5c:4b:2d:6b:d4:04:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:08:8F:6A:6B:75:B6:32:06:31:74:D4:CC:23:1F:4A:F7:30:69:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EFB34267C5311EEBCFCC12C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d6:31:59:a3:a5:59:48:13:9a:3b:10:50:5f:72:37:23:0f:
1b:10:9b:4e:57:3d:40:2d:b4:ad:78:ae:33:2c:b5:21:3a:52:
a6:e5:4f:55:1b:e6:b9:e1:53:95:71:f2:f8:f5:6e:5f:8e:c1:
0d:e6:2a:89:84:57:7c:48:8b:f7:56:ea:6d:11:ca:e2:ff:c9:
c2:e6:9e:96:21:1c:ba:05:75:9d:21:07:b0:e3:9a:72:1b:13:
ab:8c:4e:f4:42:8e:55:6b:c5:60:dd:a5:7c:9f:ca:69:2d:0c:
42:98:f8:8b:8f:20:6e:cd:be:91:e2:a2:22:c7:cd:1c:d9:01:
bc:12:16:20:7a:ae:41:07:3e:7d:f2:55:2d:ed:77:59:cf:88:
a6:a9:5e:47:9c:59:08:fb:9c:8b:a4:51:92:d2:56:4f:a4:22:
71:6c:bb:fa:a9:90:bf:d6:f1:02:79:78:bb:23:84:28:3f:9f:
83:3c:79:1c:a0:fa:7d:c2:f3:bc:62:e7:6b:51:f1:98:ea:e3:
c4:ee:1a:00:a3:80:9d:37:07:8e:50:ed:38:12:75:59:3c:bd:
a7:36:d3:f3:7f:1f:36:db:55:54:96:ad:e5:c6:77:ec:52:1d:
b9:f2:af:52:e9:7c:1c:80:aa:02:45:66:6b:64:8f:91:ed:dd:
79:fe:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org