Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C19816AA1B11EEB8E96352775412E6.roa
File: 52C19816AA1B11EEB8E96352775412E6.roa (raw, json)
Hash identifier: dCM7M+ijUssMreyenM06Jar1m17bnZdYmkx/JmFpRsY=
Subject key identifier: E0:97:59:73:4E:35:62:4B:C3:BA:2D:29:3B:58:06:60:F8:71:99:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6DA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C19816AA1B11EEB8E96352775412E6.roa
Signing time: Wed 03 Jan 2024 09:34:42 +0000
ROA not before: Wed 03 Jan 2024 09:34:39 +0000
ROA not after: Thu 02 Jan 2025 09:34:39 +0000
asID: 18233
IP address blocks: 154.197.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28070 (0x6da6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 09:34:39 2024 GMT
Not After : Jan 2 09:34:39 2025 GMT
Subject: CN=65952a32-2a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:08:83:62:8d:60:7f:1b:e7:3e:c7:09:a6:c7:
e6:38:6b:67:37:e2:46:44:db:84:96:84:e2:59:68:
0b:ae:69:97:af:50:2a:42:f2:d9:61:de:3c:97:2e:
e4:03:cf:d8:26:04:19:25:4e:92:e3:5c:ab:5a:bc:
19:8d:7a:54:50:5b:09:7f:a3:af:f5:bb:d2:26:c9:
35:30:59:ec:1c:f7:5a:02:82:f1:4c:d4:e8:10:83:
7e:1d:95:d5:c3:ac:4f:d5:1b:ca:14:1a:a0:49:0a:
f3:ff:7c:bf:9d:e5:f7:b8:13:31:e1:ad:d4:7a:45:
7d:63:83:86:3e:8e:09:f3:60:4f:ed:0b:63:98:65:
d4:50:0b:ff:e1:91:09:db:6e:15:ea:8e:59:9a:e2:
8a:4f:8f:5f:c9:2f:a5:7f:54:40:95:a0:6d:13:09:
41:8d:7d:ae:1e:e7:65:65:7c:14:b0:63:8c:ad:e6:
c1:d3:c7:67:57:1f:63:5e:74:19:4d:65:f0:7c:e6:
bb:42:4b:6e:e8:41:65:98:eb:d5:7b:46:e3:dc:07:
90:ae:a1:cc:0a:0f:34:fb:b2:95:15:b7:c0:a6:00:
d4:a8:d8:11:df:8b:37:c4:f8:ee:61:c5:46:cc:3e:
d3:be:0e:82:46:7d:39:04:37:e0:46:b8:f6:1a:b6:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:59:73:4E:35:62:4B:C3:BA:2D:29:3B:58:06:60:F8:71:99:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C19816AA1B11EEB8E96352775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:72:65:c1:f1:2d:14:3c:01:c0:8d:81:87:41:3d:b0:d0:5f:
c8:08:e7:10:ee:28:87:50:df:51:44:c4:c4:ad:c8:5d:59:e0:
91:0a:2e:38:4b:99:6c:14:44:2f:79:ac:54:54:b8:45:6e:b8:
04:5d:97:9d:00:90:8b:1a:54:0f:19:40:b5:d3:c6:12:73:50:
d2:ed:dc:8e:2e:22:d0:95:ff:18:49:3d:f2:39:91:61:81:ab:
3b:dd:a9:8e:fe:56:c7:2e:df:2b:c4:32:6d:5a:3d:7b:7a:96:
5a:c7:ea:2c:b9:6e:89:5f:3c:f6:53:ce:99:ae:71:ee:e1:7e:
cf:4e:22:28:6d:b4:f2:1c:34:3a:bb:e6:87:bc:06:bf:7a:06:
27:13:99:34:b1:ad:d3:a5:92:9e:e5:6b:17:67:c3:d2:ee:d6:
60:6a:95:91:01:09:92:72:3e:ed:5f:36:dd:24:75:e4:cf:c4:
0e:fc:8c:d4:a6:9c:8b:1e:fd:9f:4d:86:a4:b0:fc:fb:bb:ec:
3f:4f:7d:44:5e:c7:71:ca:f7:a8:59:74:33:b3:e9:ad:f3:9f:
6f:4b:82:a0:5d:44:14:89:f3:32:c7:dd:a2:b6:01:4f:59:9d:
43:2f:b2:5b:61:fa:1b:c0:51:f3:f2:e8:a9:9d:cd:99:35:48:
3d:70:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org