Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B19486F17411EE9354C472775412E6.roa
File: 55B19486F17411EE9354C472775412E6.roa (raw, json)
Hash identifier: dDa5Iqfd8hgEhS4zvf+g/ILLzfvrah92ptmMsspYbWs=
Subject key identifier: C9:77:F1:AB:96:E0:95:7B:6A:4D:AC:F0:3B:21:AC:0B:6E:59:5D:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A942
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B19486F17411EE9354C472775412E6.roa
Signing time: Wed 03 Apr 2024 04:40:45 +0000
ROA not before: Wed 03 Apr 2024 04:40:42 +0000
ROA not after: Sun 05 May 2024 04:40:42 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43330 (0xa942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 04:40:42 2024 GMT
Not After : May 5 04:40:42 2024 GMT
Subject: CN=660cddcd-56e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:b4:71:b7:aa:ea:ed:0e:40:b8:15:03:ac:
72:bd:6f:f0:cd:0b:c9:8f:36:82:b3:bd:1a:7d:45:
1d:56:af:f0:f7:a5:ba:10:ce:19:98:cd:2d:42:f1:
d9:5b:d2:3f:2f:b1:af:42:14:23:96:09:6f:d9:4a:
c3:2e:6a:67:62:4a:f9:0d:69:bd:97:9a:1e:72:df:
fe:9b:71:34:0d:b6:da:f0:17:9c:88:ff:4d:38:fe:
0b:ce:60:43:e9:40:dd:be:5b:be:e3:96:cd:70:3f:
6e:93:66:b2:7c:6c:f5:59:ce:4c:6b:c2:cb:f0:9a:
a8:c8:0f:7f:2b:90:d1:a8:8e:e4:09:d1:1e:88:57:
da:a0:9f:f4:c0:bf:79:f4:b8:bb:8f:5e:de:ca:45:
64:5a:3a:18:8a:b6:64:8a:01:ea:22:04:63:9a:8d:
70:29:10:46:00:25:61:37:df:51:87:76:66:00:77:
b0:83:38:ca:42:1c:36:fa:33:e4:8f:a7:53:93:38:
ad:8c:54:74:fa:f3:1e:d2:ad:b3:9e:ba:95:7e:75:
2c:b4:78:e6:0a:42:03:55:e4:cc:22:dc:36:47:66:
96:da:a1:55:05:26:63:c9:ce:66:c0:6a:2b:89:3e:
c9:0b:4d:d3:a9:03:5d:38:76:cc:62:a5:0d:f1:59:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:77:F1:AB:96:E0:95:7B:6A:4D:AC:F0:3B:21:AC:0B:6E:59:5D:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55B19486F17411EE9354C472775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cd:c7:91:e2:fa:18:f2:08:c1:e8:e2:5a:cb:06:9a:25:3f:
f4:fd:05:87:fe:af:5d:99:d8:83:9b:93:c9:68:9d:01:e5:0f:
2c:18:2e:5c:41:ac:b3:b7:66:1a:9e:d1:70:62:f9:26:f3:ca:
08:66:e8:77:82:b8:9a:3f:a9:1b:00:00:ce:1a:d9:3f:9a:e0:
fc:09:49:98:26:ac:8d:e0:91:b4:61:5a:bd:4d:f0:71:87:d9:
54:05:4e:3f:80:09:31:62:42:ec:12:1f:23:0f:e2:05:a9:00:
15:e0:06:8b:a1:51:24:55:eb:38:96:55:99:b8:a5:f5:bb:e5:
b1:73:3b:b6:a0:40:f2:18:e9:ec:82:97:22:54:d3:2e:c8:b5:
bc:81:7a:75:ec:e0:b5:7e:3c:e7:e1:0d:07:06:bf:17:fc:7f:
45:9d:7e:ba:f7:92:6a:0f:ae:86:2e:1e:e2:6e:96:89:a6:99:
c1:46:8b:b6:c6:9b:4b:73:9a:13:d2:bb:20:48:99:39:0e:7a:
0c:be:8d:4b:e1:40:bb:79:ca:a0:0f:14:64:7d:44:99:ff:ff:
db:c3:ac:a7:8f:de:70:5d:d7:ca:7d:c4:6a:02:49:a8:62:49:
3f:83:38:b3:f9:15:33:59:bd:ef:a9:69:14:58:79:82:3b:c0:
18:80:9b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:09 2024 by rpki-client on console-ams.rpki-client.org