Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7583DC669B8711EFB76B0F50762E951A.roa
File: 7583DC669B8711EFB76B0F50762E951A.roa (raw, json)
Hash identifier: YSqdOfoFUwpoR9W4BJv0hy+YuD39+Ipxyp3oTLcRC+g=
Subject key identifier: 69:15:1F:0E:F7:A9:46:27:52:41:25:63:73:A5:8F:70:F0:3C:BD:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01081D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7583DC669B8711EFB76B0F50762E951A.roa
Signing time: Tue 05 Nov 2024 15:05:57 +0000
ROA not before: Tue 05 Nov 2024 15:05:53 +0000
ROA not after: Wed 11 Dec 2024 15:05:53 +0000
asID: 23470
IP address blocks: 154.194.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67613 (0x1081d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 5 15:05:53 2024 GMT
Not After : Dec 11 15:05:53 2024 GMT
Subject: CN=672a3455-606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:36:cd:9f:7b:9d:16:24:6f:1b:17:4c:01:
54:13:21:46:d4:a6:4c:9c:f5:44:9f:44:60:38:2d:
d6:d7:03:62:4b:a5:1c:ac:5a:03:fd:be:fc:85:01:
2a:fd:a1:84:6d:6d:35:72:fa:c2:ca:de:26:ab:24:
41:0e:80:ed:e1:b7:34:94:b2:1c:92:78:4e:fb:f4:
82:e0:2b:91:6c:8c:0c:7d:bd:66:a3:37:7e:46:f9:
44:2c:88:f8:47:8c:27:c7:e6:8e:4d:a8:5e:b0:2c:
73:46:32:e1:cc:bc:ef:6a:8f:41:eb:27:d1:fd:81:
42:1d:ce:63:74:cd:e0:d7:d6:86:7e:bc:14:b3:93:
f9:33:2b:29:82:31:ad:22:10:1f:5f:fe:7a:06:50:
50:42:a5:1c:da:07:83:0a:82:b7:31:aa:b9:b3:d6:
56:30:d2:d3:d5:b9:91:dc:0b:34:c7:07:9e:a7:fa:
cd:09:88:fe:44:2a:a5:6f:76:67:71:9f:ad:0c:24:
47:f1:04:d9:2c:a0:62:fe:39:59:14:b7:4c:0a:95:
1d:45:ba:8d:8c:99:a7:14:0d:ad:f6:7e:6c:3b:81:
23:dc:ab:11:16:60:53:dc:76:04:d9:e1:82:76:41:
bc:e5:d9:9a:73:df:32:43:05:54:00:ce:7b:64:14:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:1F:0E:F7:A9:46:27:52:41:25:63:73:A5:8F:70:F0:3C:BD:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7583DC669B8711EFB76B0F50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.57.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c4:0c:ef:6d:a7:19:8d:a1:00:f5:ca:43:45:27:a6:90:df:
1c:d3:b9:67:15:58:be:a9:fe:d8:e3:86:72:5b:32:31:84:88:
43:cc:df:6b:3c:8a:a4:17:0b:d9:aa:fc:3a:e1:fc:59:ab:c5:
66:d9:ec:e0:9c:9c:fb:b0:67:ed:9c:93:7d:46:b5:f2:d3:df:
ba:01:3d:47:14:7b:74:a0:1e:a3:e5:e3:fb:31:fe:36:2a:d6:
c2:23:bb:06:49:f7:fd:3a:af:ad:5e:bc:7e:00:86:af:f9:22:
31:f0:8c:95:bb:3c:cb:c3:5c:91:5b:8c:8c:b6:5c:6e:f2:bf:
c2:c9:f8:8f:90:e8:3b:dc:72:d8:91:e8:2a:92:ec:e4:d8:4c:
b8:18:e1:f7:e0:30:1d:22:a6:83:94:2e:e1:a0:3b:74:90:1c:
44:24:ee:e2:89:2c:6d:f1:bd:64:ce:1f:ba:36:01:54:cf:1e:
2d:c8:01:38:93:91:a0:d7:0c:84:69:c5:dc:d6:a4:7a:41:70:
f4:9f:94:1f:57:b3:2e:53:86:ba:6d:22:c1:82:4f:bb:d8:f1:
ad:72:37:0e:56:f1:bf:70:51:06:01:96:61:69:9f:c1:a7:2f:
33:7a:ab:a5:d3:6a:bd:f4:90:c4:34:e2:03:a1:f8:e9:af:4c:
44:a6:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:04:52 2024 by rpki-client on console-fra.rpki-client.org