Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53D5357C7BE011EF84C2D750762E951A.roa
File: 53D5357C7BE011EF84C2D750762E951A.roa (raw, json)
Hash identifier: W+ARqYZRDsEiJr1VUF0enQUpTiFiIpUEk+UhOxikkEo=
Subject key identifier: 15:86:F6:59:D8:AF:05:DD:C7:57:66:9B:4E:B5:8A:A6:14:4E:0C:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: F3AB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53D5357C7BE011EF84C2D750762E951A.roa
Signing time: Thu 26 Sep 2024 08:21:28 +0000
ROA not before: Thu 26 Sep 2024 08:21:25 +0000
ROA not after: Thu 24 Jul 2025 08:21:25 +0000
asID: 151610
IP address blocks: 154.194.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Nov 2024 00:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62379 (0xf3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 26 08:21:25 2024 GMT
Not After : Jul 24 08:21:25 2025 GMT
Subject: CN=66f51988-34a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:9c:01:71:17:48:2c:14:76:52:0c:d3:fe:
cc:1a:de:8a:87:39:de:98:a9:76:bd:fd:1c:60:4c:
1b:12:d9:81:2e:f5:63:2e:36:d2:03:dc:c6:40:35:
88:e2:b8:5e:79:91:2b:cd:ec:0a:b1:ae:cc:06:56:
3a:65:1a:88:d1:da:4a:be:83:85:58:73:d5:e0:2b:
e0:1c:5d:a5:14:8b:df:0d:b5:74:f3:ef:51:46:5e:
ec:93:cd:28:b8:37:6c:4b:66:2f:01:e5:1b:e2:1e:
61:bc:83:2e:8a:28:fa:0b:76:6a:45:12:9a:7c:ac:
ee:f1:4a:1f:81:b9:18:fc:1a:d8:32:f8:ef:4b:11:
17:cb:9e:ca:dc:62:1a:2a:a7:1b:0e:67:66:63:30:
a0:4c:4c:b2:b7:37:18:11:92:8f:d1:c7:19:a4:be:
c8:f4:ff:54:58:36:27:c7:3a:38:74:6e:e3:be:cb:
0b:c8:b9:93:1d:76:a2:eb:f7:7d:7d:de:68:55:27:
fb:a8:1e:25:f7:2f:cd:15:00:96:34:db:1c:ab:46:
7f:ef:ed:9f:b8:f8:21:12:04:61:6c:fb:b2:e9:e9:
7f:d9:3d:69:ec:16:60:16:69:cf:1f:a6:ad:d3:fc:
70:88:60:0b:ea:fe:62:61:ee:d6:1c:78:8f:ad:68:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:F6:59:D8:AF:05:DD:C7:57:66:9B:4E:B5:8A:A6:14:4E:0C:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53D5357C7BE011EF84C2D750762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.39.0/24
Signature Algorithm: sha256WithRSAEncryption
67:19:8e:9a:35:71:12:be:38:d5:f9:5b:f2:4b:8e:67:a2:09:
1b:ad:cf:bd:1f:b5:b1:92:8f:1c:fe:c9:f8:06:49:83:ac:2a:
e7:6a:2c:71:56:84:1e:f2:a4:41:c7:b9:b8:ab:a2:7b:62:cf:
de:92:14:0b:e9:9f:92:3c:cf:dd:87:ef:4b:7b:49:fc:b0:84:
f3:53:f7:f4:97:72:47:0b:96:c7:01:e5:e7:4b:20:c5:23:83:
33:9e:f7:c0:f9:a0:7e:b9:5a:9e:f5:eb:02:be:4d:8f:36:26:
4e:61:14:4d:85:62:f6:25:4b:7e:cb:16:11:4d:32:8c:b5:02:
7a:12:a7:6e:6d:06:f9:c9:7a:e1:cf:50:7a:ad:a7:37:76:cd:
e6:ad:fa:83:a8:15:bc:06:76:dc:3e:c7:07:77:08:57:19:05:
9c:98:f6:f4:30:34:e2:d4:35:68:95:4c:d7:ee:93:ec:45:b4:
9b:7d:61:6d:a0:77:e2:3d:8e:b3:3b:c3:c9:c9:61:d7:c8:02:
d0:23:4a:f5:29:1b:03:45:d5:4c:b1:18:1e:59:65:c4:0c:65:
04:0a:e6:29:e1:e9:54:96:93:18:91:75:ab:47:f6:ea:d4:6a:
2d:33:bc:66:6d:1e:e6:6a:86:36:2f:fb:8f:bb:ef:0f:e2:2e:
df:15:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:33:24 2024 by rpki-client on console-fra.rpki-client.org