Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B565EA82BD11EE99FA3B3A4AD9E6FC.roa
File: 79B565EA82BD11EE99FA3B3A4AD9E6FC.roa (raw, json)
Hash identifier: JVRgIpCviqevuIifpUWh2xbSHVvPA2ZGCHvABg5Fl64=
Subject key identifier: 1E:C4:97:C5:BB:80:28:B5:C2:B8:AE:6D:A7:A8:A2:B0:30:7D:6F:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B565EA82BD11EE99FA3B3A4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:14:40 +0000
ROA not before: Tue 14 Nov 2023 07:14:37 +0000
ROA not after: Tue 12 Nov 2024 07:14:37 +0000
asID: 397630
IP address blocks: 154.202.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20472 (0x4ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:14:37 2023 GMT
Not After : Nov 12 07:14:37 2024 GMT
Subject: CN=65531e60-0149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:20:01:d7:e7:6e:02:bc:4d:20:ee:d2:d4:
f6:bc:1b:45:34:81:55:ee:70:f4:87:56:a1:91:4e:
6a:17:ca:57:db:e5:f0:4c:57:f9:2c:b5:d2:3a:2d:
10:f2:bb:ed:99:a7:0a:2f:40:74:9a:64:11:f8:de:
a9:5f:f4:3f:66:61:df:a1:5a:1c:b2:10:4d:ae:94:
36:60:25:6d:df:44:66:37:67:7f:4d:0f:d2:a4:74:
1d:5c:22:9e:9b:8e:14:64:0f:b4:18:c2:cc:e7:68:
e2:66:0c:8a:50:45:f7:75:64:81:31:9f:06:3d:ae:
92:a5:53:dd:07:dd:f2:0d:ac:69:9f:38:f8:cc:30:
47:55:0a:79:8d:98:37:91:ae:af:78:f2:56:37:a2:
57:ec:92:7f:1d:4c:c6:96:9e:25:b1:fb:28:ac:4f:
43:96:af:4f:1e:f1:da:2d:08:5f:7b:2a:0c:50:61:
50:7d:ff:95:a5:b1:bc:9b:f5:81:d8:e8:d8:4e:8b:
48:ef:92:29:37:6c:fc:d8:72:d8:a4:95:2d:c6:6b:
34:00:8e:37:0d:f1:14:21:d7:b4:3b:55:3c:87:89:
f8:82:07:6e:d9:57:2b:ec:26:c3:1f:05:4f:30:3e:
a9:fd:fb:68:8a:59:d5:3a:8c:f3:eb:61:fa:73:9b:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:97:C5:BB:80:28:B5:C2:B8:AE:6D:A7:A8:A2:B0:30:7D:6F:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79B565EA82BD11EE99FA3B3A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:34:8f:83:4f:81:d3:bf:d0:9f:5d:ca:d0:5e:7f:64:b2:64:
a0:64:e3:5b:1d:cf:80:cf:1b:c2:35:0d:6b:c4:bd:5f:e6:8f:
c9:7a:b0:55:ac:96:50:30:60:16:ea:9f:24:81:86:3e:6d:f6:
9b:c8:4b:ba:0f:86:f4:50:50:22:2f:87:08:66:e8:93:75:b9:
7a:0d:ad:bb:d1:06:03:0a:76:3e:0c:9e:60:12:1a:ef:50:e5:
17:ae:b6:b4:46:b6:01:c8:58:72:ec:d6:f8:fd:48:e2:22:67:
e2:43:6e:c5:69:b2:6b:83:b8:20:f4:d7:14:50:7c:12:5b:79:
a1:b5:40:28:5b:8e:4f:12:c7:85:c0:7e:14:cd:f1:5f:ee:cb:
b9:b1:0e:0a:56:25:cd:95:19:78:d6:4d:e8:ce:02:19:76:db:
19:cb:0d:2b:9f:d5:e0:40:d1:de:07:e0:13:1a:dd:01:ca:68:
c5:97:0a:b0:71:01:2d:4f:22:10:e6:f1:1e:01:ec:c4:80:f8:
98:b6:94:f9:5a:f4:c6:dc:19:b8:7c:12:8f:e4:4e:90:96:93:
87:29:af:39:df:4e:8d:1c:6a:9c:f3:c9:41:11:80:9f:89:30:
05:9d:d7:92:76:1c:46:13:c7:56:4e:79:c0:6a:03:88:4a:d5:
bf:c7:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:28 2024 by rpki-client on console-fra.rpki-client.org