Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C208DA4C8E11EE8961CF5A4AD9E6FC.roa
File: 99C208DA4C8E11EE8961CF5A4AD9E6FC.roa (raw, json)
Hash identifier: NlFgrhEgQJbVDu/FEey0A8OnS9bicXH2kNwMzeL1D6Y=
Subject key identifier: 4E:0D:48:30:54:ED:FE:38:48:00:04:D5:7B:86:66:CE:B6:D2:75:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3C3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C208DA4C8E11EE8961CF5A4AD9E6FC.roa
Signing time: Wed 06 Sep 2023 08:23:04 +0000
ROA not before: Wed 06 Sep 2023 08:23:01 +0000
ROA not after: Mon 02 Sep 2024 08:23:01 +0000
asID: 136933
IP address blocks: 154.197.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15421 (0x3c3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 6 08:23:01 2023 GMT
Not After : Sep 2 08:23:01 2024 GMT
Subject: CN=64f836e8-a3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:4f:19:e1:4f:c0:80:ac:56:8f:5d:1f:bd:
fd:d3:70:b5:ed:98:62:f6:71:5f:38:c7:09:c5:ad:
30:4e:4f:6f:b5:02:a8:2b:fc:d2:fe:8c:d1:11:38:
b3:b8:ef:d3:91:31:a6:db:54:0e:ed:6e:11:18:61:
de:0b:0f:16:88:36:cc:44:a4:f4:9b:c3:3f:21:9c:
ec:18:b9:55:41:9e:7c:b3:b9:22:e2:c5:35:ae:ca:
ae:02:6f:2c:7c:c6:7f:a0:8f:79:ff:a7:e3:cb:f5:
4d:a0:68:a6:f3:3d:a8:f6:9c:86:0c:91:65:b9:86:
1c:b7:fe:5b:e1:ef:d1:19:96:ac:43:da:cd:c3:0b:
96:a5:e4:95:82:fd:5b:57:6f:61:63:04:48:fd:f1:
70:62:e6:84:e6:46:b9:1d:e3:91:12:58:52:95:93:
42:00:ed:bf:d5:67:60:ce:5f:f6:db:e1:f9:e4:9d:
ef:10:75:d0:0f:97:c2:ff:17:ac:6a:7b:d2:6a:b2:
5a:e7:79:31:85:cb:f9:0e:62:e6:e6:97:18:40:96:
35:b6:6c:5b:e5:1f:0a:f1:b1:0c:8a:97:b9:41:ad:
42:78:bb:e8:33:a2:96:85:ef:5f:18:ce:d7:d4:f4:
b2:70:0d:98:f4:62:91:af:30:b8:0a:5e:03:32:2a:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0D:48:30:54:ED:FE:38:48:00:04:D5:7B:86:66:CE:B6:D2:75:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99C208DA4C8E11EE8961CF5A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.98.0/23
Signature Algorithm: sha256WithRSAEncryption
35:11:68:d0:79:0d:dc:1b:19:08:6a:db:98:cf:3e:f2:a2:e5:
4a:b5:46:e7:44:7a:45:c1:13:22:2f:f7:60:86:7c:c0:fd:19:
b9:27:27:5a:14:cd:26:d0:bf:cf:1e:e4:a1:44:a4:7d:8c:87:
12:a6:95:12:cd:05:3c:7a:b9:dd:ca:7c:cf:6b:24:d8:97:80:
7f:eb:1a:d7:0c:0f:46:59:13:ba:96:5d:6e:63:ed:ff:69:fa:
d2:a1:0b:01:f6:ec:72:81:45:fb:ca:65:d3:f1:e6:36:2a:82:
d7:25:60:73:34:f4:f4:8e:4f:67:20:a7:a8:16:46:45:9b:99:
f4:b5:a6:8d:13:c4:68:5f:37:ba:03:7d:2d:f9:9e:35:99:b9:
5f:4d:8b:c6:4c:ef:7e:40:4e:32:bb:80:e1:a5:13:5f:7b:b4:
0b:f9:8e:f7:8d:b1:47:cf:ba:f8:97:42:a1:91:9e:da:06:04:
30:d3:ec:b1:e3:58:16:e1:de:09:e6:41:0f:d5:c7:85:a8:b3:
34:54:df:35:ba:e9:e3:5c:cc:93:01:33:b1:af:1d:ee:c4:ba:
6b:3d:ae:3c:c5:50:67:6e:24:17:2c:50:6a:c0:8f:20:e1:08:
7f:e1:12:b2:47:95:50:b7:d2:9f:8f:7c:db:12:db:b6:af:c7:
87:2a:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:11 2024 by rpki-client on console-ams.rpki-client.org