Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C87DAB4FAF411EE95160143017001B1.roa
File: 7C87DAB4FAF411EE95160143017001B1.roa (raw, json)
Hash identifier: p+v9W9ZCQPKqNe+kL9Yj6raI5DWMY6W48ejqwzlLqWM=
Subject key identifier: 7C:53:B3:8F:5C:85:75:72:38:4D:5F:95:93:45:F9:29:0F:3D:2A:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C87DAB4FAF411EE95160143017001B1.roa
Signing time: Mon 15 Apr 2024 06:50:46 +0000
ROA not before: Mon 15 Apr 2024 06:50:43 +0000
ROA not after: Thu 30 May 2024 06:50:43 +0000
asID: 63139
IP address blocks: 154.94.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44252 (0xacdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:50:43 2024 GMT
Not After : May 30 06:50:43 2024 GMT
Subject: CN=661cce46-665f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:42:4c:5b:9a:3c:82:77:81:d6:92:63:85:
ba:19:66:83:af:fc:0b:64:50:4a:23:b8:ed:f4:97:
60:f7:07:5c:bb:4e:17:f6:b8:04:2a:36:f7:73:d9:
cc:bc:76:ea:0e:26:24:cf:d7:ae:3c:a5:14:58:47:
33:b6:d3:8a:7f:bb:3a:8e:24:25:53:aa:1a:78:d6:
7c:64:1e:a1:15:a6:a4:27:8d:d8:1b:bc:6d:02:22:
a3:cd:54:21:62:cc:69:43:52:f1:d6:0c:80:bd:71:
ee:28:6b:95:b6:df:12:64:d4:ec:eb:35:64:7a:2d:
9b:32:84:f0:e4:32:c7:6e:27:b3:65:b3:0b:14:73:
1e:f8:69:ee:f8:46:d9:44:7a:6a:5d:af:85:c2:8a:
44:71:51:71:e9:e3:12:3c:89:29:35:ab:a4:da:e9:
06:a0:bd:ec:64:5c:b1:0e:b6:5b:6c:b2:62:75:d9:
65:bf:e0:b4:97:f4:b1:9c:b5:d5:2d:0b:55:21:e3:
d4:4e:a6:9b:14:6a:3e:69:57:54:a7:4c:17:c7:75:
3c:92:92:a5:46:71:ea:11:75:01:1c:30:a8:2c:e8:
1f:39:cf:54:73:ae:ce:cb:5e:be:d0:c4:29:8e:cd:
44:b5:a7:b5:4a:e4:ce:66:6f:b5:93:97:10:01:98:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:53:B3:8F:5C:85:75:72:38:4D:5F:95:93:45:F9:29:0F:3D:2A:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C87DAB4FAF411EE95160143017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.75.0/24
Signature Algorithm: sha256WithRSAEncryption
87:26:c4:b9:d1:e6:22:2d:6e:f4:3b:8c:ad:d7:26:e1:9c:a1:
f1:03:57:31:69:d1:d9:63:d4:af:87:63:3b:52:56:8c:08:9b:
98:ac:17:87:b5:b2:40:68:77:88:44:7d:5c:27:39:3a:cd:cf:
7f:4c:46:ab:bc:cd:2e:9a:ac:6a:b0:44:ca:56:d3:be:b6:67:
7b:8e:f4:f1:46:9b:fd:1c:2a:cb:ae:fd:09:dd:79:e0:0f:92:
be:c0:a8:8e:12:fb:8b:a0:49:c6:13:69:89:43:d7:54:7b:bf:
5f:c0:12:53:d9:12:fb:18:71:39:39:a1:df:a2:62:fe:40:0d:
45:ab:58:ff:bb:b0:09:89:c8:1a:60:91:ba:41:ab:ac:a9:f4:
29:80:9e:1e:05:f1:70:5c:fb:93:53:a1:f6:19:21:20:f3:89:
eb:fd:89:6a:4e:a5:2d:24:9a:f2:b6:66:ff:06:cd:29:56:40:
88:a8:9c:0c:d0:5f:7e:8b:2f:ce:0c:73:26:5e:5d:a3:94:30:
01:95:d8:e2:11:67:47:6c:3c:3e:28:69:00:dc:1f:31:74:6f:
fa:bf:59:be:0d:c8:a9:d1:0f:b3:23:7a:9c:3e:0d:7f:19:32:
12:73:93:16:81:8f:99:5e:bf:4d:a5:eb:1d:b4:1b:c1:4c:cc:
fd:f6:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:13 2024 by rpki-client on console-ams.rpki-client.org