Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53303BF6FBAE11EEA3254F33017001B1.roa
File: 53303BF6FBAE11EEA3254F33017001B1.roa (raw, json)
Hash identifier: YBkpx+AhdVsMBcf+yR2sw92x+nbe0CZV+iQRwBy7JhE=
Subject key identifier: 73:7C:01:43:1E:05:83:C1:05:54:0A:7B:4D:AC:6A:3E:9F:66:C4:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53303BF6FBAE11EEA3254F33017001B1.roa
Signing time: Tue 16 Apr 2024 05:01:03 +0000
ROA not before: Tue 16 Apr 2024 05:01:00 +0000
ROA not after: Thu 30 May 2024 05:01:00 +0000
asID: 63139
IP address blocks: 154.94.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44499 (0xadd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 05:01:00 2024 GMT
Not After : May 30 05:01:00 2024 GMT
Subject: CN=661e060f-7245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:1f:33:90:84:70:17:45:df:68:84:f7:c6:
dd:31:ee:d7:08:35:f6:18:41:b3:9e:59:f5:f9:9a:
a2:64:a8:71:8d:2c:f7:81:b4:2c:27:40:c4:1b:a6:
be:29:04:aa:ea:fb:07:b6:6e:e4:f1:0f:9c:be:c5:
58:6b:64:d3:59:eb:11:07:e0:b3:11:d2:46:ac:f7:
d5:b3:0e:6c:cb:4b:36:24:df:ce:fc:7e:6d:20:b8:
9c:35:94:b4:4f:38:05:fc:17:5b:aa:8f:21:30:d2:
f0:d4:6f:8e:6b:c8:6d:42:5d:b9:9d:f9:52:51:52:
53:e3:2c:e8:fc:a7:95:24:6d:a5:28:82:fb:e9:6d:
21:a6:56:30:5b:42:41:1f:92:21:83:44:ed:c2:26:
8a:ad:20:69:6e:ca:e8:31:9e:01:e0:52:97:be:33:
60:eb:79:37:5a:3d:af:ef:e2:b7:6e:33:d6:a4:4c:
3f:4a:74:af:e9:c4:db:c0:4a:0b:ae:92:9c:46:0a:
34:3e:98:ab:a8:76:1d:73:97:40:a1:f4:53:ec:54:
3a:05:2c:f9:77:22:7b:d2:04:9f:58:29:e1:8b:9a:
b2:b8:1a:a9:80:17:4d:40:45:83:35:47:38:76:dd:
78:9a:d5:88:22:ae:a9:ae:e6:62:5c:e1:47:5f:d8:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:01:43:1E:05:83:C1:05:54:0A:7B:4D:AC:6A:3E:9F:66:C4:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53303BF6FBAE11EEA3254F33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:5e:1f:5f:e9:c4:3d:3c:27:e4:3d:0d:bc:d4:53:99:37:a8:
b3:78:e9:ae:f7:ea:c0:44:96:13:11:a7:47:80:dc:18:cc:c8:
59:35:2a:f3:7b:d8:e6:54:93:1f:e0:b1:18:60:84:f2:a1:f9:
eb:4d:03:34:ec:26:4b:b3:c0:de:0d:5b:68:1c:ee:ee:36:41:
c7:4e:75:e3:e9:82:cd:3e:50:00:2e:97:90:1c:47:c9:77:a8:
ba:1f:03:28:15:ba:ee:35:f7:2f:0f:2b:24:03:54:15:3f:2a:
be:af:0b:37:64:64:ad:d7:c7:92:0b:1e:50:99:73:92:09:5d:
48:dd:14:29:20:d4:7b:15:51:b7:0d:ff:62:d0:cb:80:b4:f6:
d6:ba:de:91:06:5f:29:c0:81:54:46:2f:51:47:32:a3:09:de:
d0:25:41:30:ab:c8:1e:fa:f2:6e:32:05:17:b3:07:3a:47:89:
c5:09:f6:bd:94:fc:5d:d3:a0:19:1d:c8:ae:01:25:08:12:16:
a4:4d:97:bf:6c:71:ca:ab:d6:54:13:7f:68:8c:ff:e2:bb:8b:
42:19:5b:c3:56:92:93:a2:c7:2e:b9:37:9d:19:10:0f:f3:5f:
02:05:db:f8:02:a3:e0:a7:f7:cb:64:4d:53:89:58:41:18:c0:
8b:32:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:24 2024 by rpki-client on console-fra.rpki-client.org