Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60560F0E539D11EEB56C4A574AD9E6FC.roa
File: 60560F0E539D11EEB56C4A574AD9E6FC.roa (raw, json)
Hash identifier: APKGZztYvvcxgntMc9PvfrZ3g+nE1aCjsDXAngdgNpY=
Subject key identifier: 27:9B:82:6B:FF:36:16:53:2D:A4:BA:CC:D6:AF:98:72:E8:D6:A5:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60560F0E539D11EEB56C4A574AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:56:29 +0000
ROA not before: Fri 15 Sep 2023 07:56:25 +0000
ROA not after: Sat 08 Jun 2024 07:56:25 +0000
asID: 142403
IP address blocks: 154.83.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15737 (0x3d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:56:25 2023 GMT
Not After : Jun 8 07:56:25 2024 GMT
Subject: CN=65040e2d-655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ea:95:c6:6d:60:59:32:ce:ba:0c:3d:a2:ce:
e0:f6:3f:53:fa:ce:a6:aa:0a:04:e9:8d:72:c2:17:
5d:2a:dd:ed:e0:89:08:4c:4a:10:80:65:7a:5b:2e:
00:03:b5:0d:36:63:35:39:56:9c:69:ca:81:87:c9:
0f:64:78:c8:82:f9:90:29:9a:91:21:45:c1:b0:40:
38:5f:fd:e3:e1:c5:e4:26:ff:6b:e2:02:a1:ca:1c:
4f:7b:e7:49:68:5a:a8:e1:ab:62:7c:18:03:bd:a9:
d2:4d:9d:35:44:95:f6:6a:d5:b9:fd:f4:68:80:5b:
e7:b3:b5:b5:14:7c:92:0d:a7:36:eb:90:81:0d:10:
f5:33:5e:b0:f8:86:1a:d8:31:78:c8:db:d2:35:33:
fc:31:e2:d2:fe:90:55:ec:f1:c6:af:50:3d:fe:0b:
c5:ec:25:ab:7c:55:12:4d:10:5e:43:29:9b:87:05:
6b:f5:86:87:7f:c5:d5:30:4d:cc:1c:d2:7c:81:a0:
ca:a3:88:aa:dd:66:1d:89:6c:c2:79:d2:bb:2c:c6:
c2:ec:72:05:25:f2:40:57:e2:f3:fb:d9:23:57:f4:
7e:78:97:e7:5a:25:37:67:b1:5e:e3:a3:27:e0:02:
5d:18:77:6c:61:08:3c:5c:58:7f:4b:12:4e:d0:2f:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:82:6B:FF:36:16:53:2D:A4:BA:CC:D6:AF:98:72:E8:D6:A5:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60560F0E539D11EEB56C4A574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.14.0/24
Signature Algorithm: sha256WithRSAEncryption
03:99:77:65:d2:9a:69:13:a3:ed:c8:5d:98:f8:7f:66:72:1c:
a2:78:01:8b:3e:8f:d8:0e:d1:9d:55:02:41:80:6c:29:34:a5:
a8:40:ba:86:13:83:1b:fb:b9:f1:31:b8:b9:af:9d:9b:ed:1e:
cb:a5:93:03:ee:a8:c5:b4:d2:67:bb:8c:5b:22:85:61:af:3b:
26:62:0a:83:3d:e1:be:32:6f:12:54:92:50:14:3d:c7:10:e4:
6d:51:f1:52:23:10:02:38:43:8f:a8:f7:56:33:b5:29:ed:e5:
ae:eb:0a:de:c4:a0:9f:6c:e5:e2:48:ba:b6:60:12:47:71:31:
11:be:f4:b1:f7:06:1f:89:96:11:d4:47:31:ae:38:8d:bc:a5:
8d:f1:38:da:a6:68:4e:c5:01:ef:1f:44:c2:53:8d:60:91:37:
37:3d:14:de:8e:ae:28:93:1a:4e:ef:fe:be:16:af:40:f6:66:
78:c8:d8:4b:9f:69:b8:e8:35:14:cb:9c:9c:5e:41:d9:2c:77:
2c:53:00:ed:f5:40:60:5f:fe:12:89:55:ff:0d:a7:d9:99:99:
18:51:95:06:30:77:05:83:6d:70:fa:b5:57:3d:41:9c:bf:b1:
69:f8:ab:88:f6:9f:b0:ba:3a:16:95:f0:11:69:e2:69:43:de:
97:88:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org