Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E704C4FD3A11EE919FFE4D017001B1.roa
File: 59E704C4FD3A11EE919FFE4D017001B1.roa (raw, json)
Hash identifier: 5BqprxXkznKde+7X3VtCsXI/eEVsMJwjZiRPFoQ+doM=
Subject key identifier: BA:96:19:02:59:C5:2E:28:88:FF:38:FB:DE:09:DC:37:4F:94:44:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E704C4FD3A11EE919FFE4D017001B1.roa
Signing time: Thu 18 Apr 2024 04:15:55 +0000
ROA not before: Thu 18 Apr 2024 04:15:52 +0000
ROA not after: Fri 26 Apr 2024 04:15:52 +0000
asID: 39600
IP address blocks: 154.91.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 04:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44565 (0xae15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 04:15:52 2024 GMT
Not After : Apr 26 04:15:52 2024 GMT
Subject: CN=66209e7b-eaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:ad:43:ea:e1:38:d9:19:1b:9f:3f:fa:8c:
49:31:72:f3:04:96:c7:c0:e3:a6:04:c9:2a:75:e0:
30:a0:07:c3:3b:44:05:89:06:43:7a:1e:e7:a8:63:
55:64:a1:ea:d4:6e:7b:67:a4:7b:00:11:03:7c:88:
fd:98:90:bf:1a:0c:6a:f6:57:e2:8a:e9:a6:da:86:
c2:19:3e:2b:1a:94:14:00:ec:5c:58:61:a5:11:a6:
62:fa:9a:14:b7:bd:2b:1b:f6:ac:bb:86:9e:76:f4:
c7:f4:95:e0:30:f4:fb:92:2b:d6:ad:6c:aa:22:f5:
ff:83:68:b5:21:93:b0:4b:9e:14:c4:1f:c7:51:d4:
9c:0f:a6:54:40:81:b7:01:20:07:94:8d:a8:13:93:
54:2c:2e:f6:01:6d:5a:89:33:da:86:1d:a2:4a:c4:
2b:27:c2:1b:00:44:ce:a3:82:42:0e:aa:24:ab:c3:
09:34:e9:d7:84:ae:d1:1f:a5:7d:05:58:a5:26:5a:
fb:45:b7:b3:5f:df:9d:c8:3e:b3:d2:cc:e4:dd:70:
53:29:30:a2:ae:64:b8:73:89:86:2b:ad:3b:cf:1c:
c9:81:ff:f8:c2:4c:11:4c:5f:17:07:61:a2:4c:4a:
9d:2c:2c:57:cd:82:b5:19:8a:2b:a1:df:39:e8:3f:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:96:19:02:59:C5:2E:28:88:FF:38:FB:DE:09:DC:37:4F:94:44:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59E704C4FD3A11EE919FFE4D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.128.0/21
Signature Algorithm: sha256WithRSAEncryption
69:04:53:ea:97:2a:07:88:d5:d3:34:70:1d:a0:ab:39:a7:aa:
92:47:2a:bf:bf:74:be:2c:76:0b:8b:eb:32:d3:8b:ce:6d:63:
22:ef:d6:b4:01:3a:ef:e8:e1:e0:19:24:eb:ec:a2:fb:25:f9:
91:94:d4:1b:32:3f:d5:ad:8b:32:45:81:f0:ba:fb:d1:3a:08:
a5:d7:d1:a1:7b:d9:61:6c:65:bf:e4:81:a5:1d:af:9d:6e:cb:
7d:45:e8:8d:88:42:ff:89:49:bf:6a:e7:ee:ee:63:d4:9f:a0:
2e:5b:b9:ae:8a:24:1f:c2:3d:3d:01:eb:4b:5c:24:b4:a1:04:
20:46:4f:eb:b0:d9:13:09:2b:10:8a:34:c3:65:40:9f:eb:04:
d1:64:4a:90:e4:87:73:ec:92:14:43:ce:fb:c8:5b:53:02:c6:
e9:00:49:68:d4:0c:d4:28:2c:39:87:e1:bd:26:f7:ae:40:12:
d6:e1:50:f8:a2:82:ad:4e:fd:33:ea:37:85:7f:e1:8d:c2:3e:
53:f0:ec:ba:12:f2:6e:1f:83:15:bd:60:31:71:82:3d:28:10:
dc:c2:59:bb:49:d0:1d:60:df:70:e7:37:13:f2:b7:4d:f4:5e:
d2:d8:0d:f6:e0:f9:d7:a9:55:eb:98:07:ca:a0:94:14:fb:98:
ea:14:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 03:50:41 2024 by rpki-client on console-ams.rpki-client.org