Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/996CFC786D9011EEB96C32874AD9E6FC.roa
File: 996CFC786D9011EEB96C32874AD9E6FC.roa (raw, json)
Hash identifier: x0DJySpGUWaPqSlP65+H7jaIDC8V3UYDd/FdjU9E7rA=
Subject key identifier: 14:60:B4:2C:C3:08:48:96:E3:69:88:76:28:BD:A1:AB:0C:FA:54:9B
Certificate issuer: /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial: FE
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/996CFC786D9011EEB96C32874AD9E6FC.roa
Signing time: Wed 18 Oct 2023 08:30:31 +0000
ROA not before: Wed 18 Oct 2023 08:30:28 +0000
ROA not after: Sat 18 Oct 2025 08:30:28 +0000
asID: 15964
IP address blocks: 154.72.139.0/24 maxlen: 24
154.72.140.0/24 maxlen: 24
154.72.141.0/24 maxlen: 24
154.72.143.0/24 maxlen: 24
154.72.144.0/20 maxlen: 20
154.72.146.0/24 maxlen: 24
154.72.147.0/24 maxlen: 24
154.72.160.0/23 maxlen: 23
154.72.162.0/23 maxlen: 23
154.72.164.0/24 maxlen: 24
154.72.165.0/24 maxlen: 24
154.72.166.0/24 maxlen: 24
154.72.168.0/24 maxlen: 24
154.72.170.0/24 maxlen: 24
154.72.176.0/24 maxlen: 24
154.72.183.0/24 maxlen: 24
154.72.184.0/24 maxlen: 24
154.72.187.0/24 maxlen: 24
154.72.188.0/24 maxlen: 24
154.72.189.0/24 maxlen: 24
154.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Validity
Not Before: Oct 18 08:30:28 2023 GMT
Not After : Oct 18 08:30:28 2025 GMT
Subject: CN=652f97a7-b5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:63:1d:15:c2:fc:b5:58:d9:95:02:ae:e7:
71:1d:3a:44:82:92:27:3b:dc:8a:32:72:e3:27:0c:
f9:ab:2c:d4:36:19:c2:10:d0:17:63:96:64:23:a6:
e9:7c:32:a1:a3:48:e8:7e:77:8c:84:2e:f0:19:c8:
f4:e7:53:41:57:1d:7d:59:7a:66:a2:4a:a0:5f:32:
75:9f:47:ad:3b:3c:26:23:1e:3a:24:2e:6d:d3:ac:
b7:e2:51:58:41:05:9a:8d:78:8c:7a:60:83:f8:af:
f9:8a:97:b2:83:f9:85:cf:90:ca:2a:80:11:98:6b:
4e:12:01:2c:fe:8e:7a:9f:1e:1f:1e:ca:dd:37:7b:
37:ed:50:e7:78:e5:a0:4c:91:f8:1d:dc:5d:f6:04:
34:67:13:cb:9e:6a:66:dd:fb:bd:6e:88:8a:03:2b:
98:3e:84:f6:8b:5f:ae:0a:45:3b:b7:69:6f:d2:10:
fd:1d:78:b2:1c:bb:61:b3:21:ad:b3:31:c5:c0:c3:
40:d8:bf:c0:7f:94:8d:02:ae:ff:ff:aa:14:4b:8e:
fe:84:c2:c5:82:52:e6:2f:4f:72:5f:53:d6:c4:14:
c2:f8:1e:bc:45:15:96:18:1b:6b:60:df:30:e8:48:
04:ac:96:cc:10:6c:31:7e:7a:d7:29:ca:9f:55:1b:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:B4:2C:C3:08:48:96:E3:69:88:76:28:BD:A1:AB:0C:FA:54:9B
X509v3 Authority Key Identifier:
keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/996CFC786D9011EEB96C32874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.139.0-154.72.141.255
154.72.143.0-154.72.166.255
154.72.168.0/24
154.72.170.0/24
154.72.176.0/24
154.72.183.0-154.72.184.255
154.72.187.0-154.72.190.255
Signature Algorithm: sha256WithRSAEncryption
8d:fc:2e:17:eb:a2:6c:c5:14:bf:42:24:8b:fc:6e:67:0d:3e:
3c:85:18:fe:bd:25:32:12:27:5d:6c:cd:38:a0:28:35:ff:f8:
b4:3e:e3:b9:93:b6:17:17:e2:fd:73:9b:3c:92:00:92:34:47:
ce:f7:e1:bc:85:16:25:98:87:b5:4a:66:28:1f:3e:92:07:c6:
f2:c5:d7:29:ff:33:87:4f:bf:db:01:67:bb:53:46:53:2e:31:
15:5b:0f:64:f3:9b:64:65:39:0e:f5:f8:f9:53:35:8b:b0:63:
4f:7e:ac:b3:98:56:fa:05:fe:ed:7b:ec:f2:ff:24:4c:3c:a8:
38:6d:10:f2:a9:92:25:b3:56:3a:56:23:8e:22:b5:ee:67:2a:
9e:82:41:b9:e4:3a:4a:2d:e1:aa:76:46:06:3c:38:66:53:e6:
2e:2b:02:f9:eb:4d:22:7a:97:b5:bd:82:02:88:b1:1d:d5:e8:
f7:97:d4:6b:3f:8d:76:fd:07:fd:a8:4e:e2:76:2f:08:e1:a2:
84:4a:82:d7:1f:cb:60:c4:b0:0d:d5:26:ef:c0:cf:10:eb:82:
fe:62:bf:35:1e:97:d6:12:b5:57:a0:20:33:05:c9:f5:d3:28:
1b:30:47:d7:26:3f:c4:73:3d:e1:f3:64:5e:4d:c0:78:c4:56:
36:38:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:24:09 2024 by rpki-client on console-fra.rpki-client.org