Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ADD286A82C011EE8A56AA434AD9E6FC.roa
File: 7ADD286A82C011EE8A56AA434AD9E6FC.roa (raw, json)
Hash identifier: WC3S9ryXTiNEzrl3SqD4RLe/kqc3oOD25+K1TvIsaaM=
Subject key identifier: C1:30:51:29:18:B3:49:20:3D:16:5A:4B:F4:33:26:2F:B1:22:F2:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 501A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ADD286A82C011EE8A56AA434AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:36:10 +0000
ROA not before: Tue 14 Nov 2023 07:36:07 +0000
ROA not after: Tue 12 Nov 2024 07:36:07 +0000
asID: 397630
IP address blocks: 154.201.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20506 (0x501a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:36:07 2023 GMT
Not After : Nov 12 07:36:07 2024 GMT
Subject: CN=6553236a-0f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:7a:a9:7a:42:a1:ec:0c:3d:19:26:0d:c9:
28:b4:63:7a:8c:a3:bc:bd:fe:9e:78:f5:53:7c:53:
c6:53:54:a1:f4:a6:aa:a6:c1:97:13:15:2d:04:36:
88:ce:70:a5:17:5f:10:16:be:b8:29:43:ba:11:28:
41:a9:ff:68:8e:f8:0f:6a:4e:09:7e:63:0d:e3:de:
68:84:93:4d:87:1a:3e:1a:29:28:8d:f8:35:99:89:
75:8d:28:0e:ae:bf:5f:14:a6:3b:f9:ee:e5:78:ed:
92:9b:14:77:04:4a:b4:a7:cd:2c:a0:52:d9:f3:8e:
9a:7a:3b:f4:52:5f:e5:45:27:a6:bf:99:4a:5e:fd:
29:44:84:d0:9d:0f:4d:db:9c:ec:e7:2f:87:46:62:
bf:c3:0c:d6:95:84:2b:5f:e0:c2:00:ff:49:3b:0e:
e2:52:3e:75:cd:b1:17:f7:08:f4:07:10:96:2b:85:
aa:4b:14:27:46:e0:9f:51:33:3c:b4:09:db:67:1f:
87:d8:09:a2:04:cb:a4:ea:0f:63:37:b3:80:8c:77:
fb:25:6f:d3:9a:7b:02:30:8e:25:20:97:c3:3a:62:
09:0f:65:84:c9:7c:45:e5:36:01:b0:11:da:60:85:
e8:77:27:4f:a9:75:93:a9:47:57:bb:bb:bf:14:94:
2d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:51:29:18:B3:49:20:3D:16:5A:4B:F4:33:26:2F:B1:22:F2:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7ADD286A82C011EE8A56AA434AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:20:d5:38:b4:45:57:06:4c:62:37:0d:b6:65:1b:61:0f:1b:
9f:da:cb:e8:40:7c:33:f6:dd:6b:a6:1c:0c:3f:20:9a:c5:60:
06:5b:6d:a4:35:f9:09:94:31:63:c2:b4:6e:94:6b:6f:55:a6:
ab:ec:0c:b9:92:a7:a8:89:91:6e:d0:bd:33:ad:24:f3:23:77:
7c:25:41:80:c9:d4:02:92:48:55:ad:2c:0f:6d:14:ff:c4:6b:
43:c1:d3:db:63:0d:b8:84:88:63:a8:6d:e4:db:cf:cc:56:bf:
da:67:a5:ad:47:95:52:d8:a0:02:80:04:92:90:2c:86:bc:78:
b7:a7:8f:50:39:9c:df:7f:dc:da:01:1e:30:5f:16:b7:34:e8:
0e:30:b6:d7:e2:d1:68:66:28:0e:fc:21:5c:82:76:48:1c:e8:
8a:f5:86:77:00:5c:bd:a3:31:25:81:81:97:c9:06:04:db:42:
50:ea:22:1e:64:5a:ad:ab:99:db:fa:0f:07:bd:f2:d8:dd:d2:
1b:20:f9:73:4b:df:ec:9b:68:e7:26:b7:ce:88:1b:52:0a:cd:
a3:cf:5d:71:5f:fd:c1:48:86:35:c4:68:c5:0f:f8:af:08:ba:
89:29:8a:42:56:65:ec:f4:79:ff:05:6f:2a:b5:24:4a:13:3b:
17:04:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org