Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECF6BD10539C11EE8A0FE5554AD9E6FC.roa
File: ECF6BD10539C11EE8A0FE5554AD9E6FC.roa (raw, json)
Hash identifier: YwQ8oQPpc3oSviPNg9PhJ+ScPGekQleEmtujlHcxt2w=
Subject key identifier: C9:7C:50:E1:E4:46:E5:33:F8:17:98:3C:26:DB:70:E5:F6:03:20:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECF6BD10539C11EE8A0FE5554AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:53:15 +0000
ROA not before: Fri 15 Sep 2023 07:53:12 +0000
ROA not after: Sat 08 Jun 2024 07:53:12 +0000
asID: 142403
IP address blocks: 154.83.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15731 (0x3d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 07:53:12 2023 GMT
Not After : Jun 8 07:53:12 2024 GMT
Subject: CN=65040d6b-b0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:d0:25:81:e3:aa:21:9f:99:d1:3b:c7:2e:
08:fe:9d:c4:9b:80:86:76:24:9d:e9:62:cc:16:ef:
db:fb:6b:13:ac:c2:c6:08:34:55:77:c4:02:41:95:
a7:2b:1a:27:f2:93:06:75:ea:2e:e2:eb:b7:e8:c6:
38:0d:d0:97:3b:99:d8:e6:6d:4f:26:10:3a:4b:02:
64:87:97:de:48:ef:86:1f:8f:8f:4c:2c:02:e4:e8:
4c:ca:d1:1f:03:e3:9e:db:40:e1:23:d0:64:5f:ff:
3a:ac:87:66:65:a2:7b:ec:77:b6:c1:d7:13:e5:49:
5d:e4:2d:a6:d9:d2:b3:96:0c:b9:29:e8:e4:c3:cf:
41:c6:44:8c:4a:16:0d:14:9f:5a:99:a3:ba:f6:a3:
de:31:9f:8f:b8:b1:7c:5a:c5:f3:5f:f2:e8:14:36:
8f:63:98:c9:32:9d:06:df:00:6e:ea:55:b8:40:27:
bb:8d:a9:fd:98:2e:89:a3:39:d9:40:3a:94:06:e9:
30:84:94:e9:5d:31:3e:71:9e:7b:d0:41:1c:55:45:
fe:26:3b:1d:36:8b:a7:b1:87:07:af:53:21:7a:b2:
ae:fe:57:a6:9d:ae:18:1d:cf:a7:34:1b:6b:8f:68:
dd:5f:d3:a1:97:ff:75:0c:7a:62:f7:37:53:80:92:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:50:E1:E4:46:E5:33:F8:17:98:3C:26:DB:70:E5:F6:03:20:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECF6BD10539C11EE8A0FE5554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.17.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d7:e5:48:26:bb:26:25:e9:84:a4:07:17:d9:33:ff:41:c7:
53:85:57:1f:16:b2:70:2e:2e:ac:99:bc:a3:ed:59:72:ce:7d:
f7:4c:28:f9:60:43:5d:6c:70:96:b4:60:ba:4f:9e:d2:2d:1e:
65:cb:55:af:9e:41:ae:0d:d5:25:92:bf:c5:ea:7d:72:f6:4d:
9a:fb:64:5f:6c:24:b5:f6:9c:3e:c4:a0:96:a6:8d:91:b0:96:
df:35:57:a6:36:34:f6:78:9f:f8:e1:67:f8:e4:c6:f5:be:58:
c8:f6:0c:34:90:1b:43:f7:4d:db:0e:85:a5:d8:7b:2e:ca:60:
eb:18:cf:3d:36:d0:7b:7f:30:41:81:6d:de:0e:1b:2e:82:ad:
cb:a5:a7:3a:28:ff:81:03:e8:52:6b:12:d8:b2:2f:78:fc:b4:
cb:94:ad:bb:54:4e:8c:93:74:c3:78:26:19:5e:ae:c1:26:b0:
28:be:31:5d:32:6f:9f:55:2e:1b:62:5d:dd:2e:c6:23:36:ec:
52:e0:92:68:cf:c7:24:fb:87:4c:6b:70:76:88:6a:cb:f8:5f:
0c:91:89:09:8f:4b:3c:8e:8c:f8:2c:0c:69:1d:e5:f9:2f:a9:
19:23:6a:17:39:94:4c:ee:39:c1:59:6f:3c:a0:27:56:2c:35:
74:a5:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:42 2024 by rpki-client on console-fra.rpki-client.org