Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A527ED50539D11EE9D5D29584AD9E6FC.roa
File: A527ED50539D11EE9D5D29584AD9E6FC.roa (raw, json)
Hash identifier: Jmh41vCrtAJU0HdQT5EXl3umANLxnhV746rv/HO96js=
Subject key identifier: 9B:AE:9C:A8:0E:17:75:91:F9:29:79:C6:E9:C2:6A:96:CA:88:ED:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A527ED50539D11EE9D5D29584AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:58:24 +0000
ROA not before: Fri 15 Sep 2023 07:58:21 +0000
ROA not after: Sat 08 Jun 2024 07:58:21 +0000
asID: 142403
IP address blocks: 154.83.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15741 (0x3d7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:58:21 2023 GMT
Not After : Jun 8 07:58:21 2024 GMT
Subject: CN=65040ea0-91f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:ae:06:06:d0:e9:90:83:45:0f:49:ed:21:
36:84:76:84:ad:3c:e1:a9:cd:a7:24:62:09:5c:0a:
3f:ad:70:3c:b8:b6:0e:c3:c6:02:39:51:e3:69:58:
a3:ae:14:cc:66:28:a7:e4:b1:00:b6:e3:30:21:63:
84:1f:f8:3d:3c:f6:26:df:2d:e6:d4:36:ee:da:cb:
f6:99:7b:47:28:73:d3:d2:eb:b5:44:a2:b4:dc:ef:
aa:8c:93:6c:91:41:22:0b:78:62:de:e1:1b:c5:7d:
9f:b1:10:e5:43:01:62:4f:8a:48:67:66:d6:35:4b:
a8:ed:76:8e:38:41:17:7f:c3:b7:18:99:89:69:18:
b5:68:77:5c:2b:1b:53:39:26:bf:ef:65:ca:1b:16:
b7:c6:3c:12:db:e1:6b:8f:da:53:71:44:a3:94:66:
d0:77:88:91:35:fc:f1:e7:6a:50:be:81:5e:e1:c7:
20:7a:14:c7:bd:32:ff:c4:fe:6a:f0:48:a7:68:2a:
f1:06:34:5e:e8:29:26:82:38:a1:0f:12:8a:6f:d6:
4f:28:ba:9b:8d:c9:fe:91:d5:d1:f6:13:79:64:16:
b6:1b:31:35:71:2d:9a:83:f3:b6:70:2d:90:3d:8b:
05:5b:03:ea:b2:bc:51:f9:ee:a6:54:6a:5f:7e:98:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:9C:A8:0E:17:75:91:F9:29:79:C6:E9:C2:6A:96:CA:88:ED:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A527ED50539D11EE9D5D29584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.12.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9f:2b:d8:56:60:98:89:33:be:e2:2b:ed:1a:e8:3e:b3:94:
80:58:d8:31:06:05:39:77:86:77:c1:52:40:23:3c:85:22:e1:
a5:11:22:ed:69:41:22:df:fd:bd:18:22:c7:82:51:8b:f9:8a:
af:9a:ba:1f:03:d2:82:5f:c0:28:ee:f6:a1:6d:8f:e2:5d:f3:
29:e3:d1:85:69:10:92:5e:51:37:c6:e6:2f:1a:0d:64:1a:14:
c2:b4:c3:20:aa:c9:a4:59:97:80:a3:9a:cb:37:e9:9e:81:be:
7b:9c:c5:12:e7:52:34:84:8b:8d:02:42:81:58:6d:45:58:28:
9a:59:b8:7f:bc:22:3d:c2:ca:3c:2b:64:74:ac:2a:df:05:59:
42:1b:8c:ec:39:f5:4c:22:02:b2:36:94:be:e9:25:00:c0:33:
e6:5c:c5:c2:07:de:c4:98:d5:53:80:07:2e:7c:71:f1:66:ea:
55:68:75:39:1b:e6:d1:4c:0f:a6:97:cf:39:d7:14:69:47:31:
56:75:95:17:02:1d:7f:b4:96:e6:d5:1c:b8:ea:8e:ae:fd:5e:
1a:8c:7d:90:6f:1c:d1:78:b6:c5:6e:56:e8:60:a6:4d:9a:a2:
7c:48:fe:6f:73:f3:eb:4d:25:ea:18:14:25:03:90:dd:9f:51:
b1:2c:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:27 2024 by rpki-client on console-ams.rpki-client.org