Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/53D289E63CCE11EE935F8A394AD9E6FC.roa
File: 53D289E63CCE11EE935F8A394AD9E6FC.roa (raw, json)
Hash identifier: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=
Subject key identifier: 69:C5:3D:33:D2:AE:AA:00:34:3E:26:D9:72:05:7A:F7:61:13:DF:59
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0172
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/53D289E63CCE11EE935F8A394AD9E6FC.roa
Signing time: Thu 17 Aug 2023 07:18:56 +0000
ROA not before: Thu 17 Aug 2023 07:18:53 +0000
ROA not after: Fri 13 Aug 2027 07:18:53 +0000
asID: 4809
IP address blocks: 154.72.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Aug 17 07:18:53 2023 GMT
Not After : Aug 13 07:18:53 2027 GMT
Subject: CN=64ddc9e0-727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:16:82:78:dd:13:39:ae:1a:60:f2:08:ea:
f7:32:07:17:ce:b0:dc:0c:de:8f:4b:93:75:05:c1:
44:8d:c3:f9:c6:2d:78:bb:4a:f1:18:22:4a:c1:da:
bb:0f:10:bc:d4:07:bb:50:60:27:34:7c:da:ea:f8:
64:1f:a6:a0:23:5a:ba:da:08:4f:39:c7:b4:19:35:
8b:dd:ff:42:b7:d3:35:bc:11:8f:1b:e9:93:bb:4f:
d0:38:38:89:a4:88:31:b4:54:b1:db:3b:52:51:b6:
3a:fd:18:7c:4c:ea:12:3d:ad:92:93:8b:a2:7b:34:
37:df:04:55:d7:a0:27:c5:b0:50:24:80:e2:7f:d5:
ba:84:53:40:88:b4:f7:16:2a:27:43:f4:a7:b9:cb:
90:bc:09:f2:a7:c8:51:80:11:9f:01:38:8f:76:83:
2c:5c:be:99:54:ef:4f:50:0b:5b:1e:f7:34:56:78:
dd:bf:5b:35:d9:8b:7b:79:60:35:e8:98:fb:2d:25:
40:2f:b0:1e:db:b1:3e:05:1d:31:ea:26:3f:61:80:
d5:37:95:48:e5:22:c9:1c:b0:07:6f:24:ee:3c:88:
71:0b:f8:b0:ad:1e:e0:84:38:26:30:aa:2e:4b:85:
f1:83:82:55:48:5f:10:39:fc:bf:0e:e6:0a:6c:a6:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:3D:33:D2:AE:AA:00:34:3E:26:D9:72:05:7A:F7:61:13:DF:59
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/53D289E63CCE11EE935F8A394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.47.0/24
Signature Algorithm: sha256WithRSAEncryption
da:90:4e:6c:40:26:a9:3c:ab:dd:9f:66:e2:38:54:0d:9a:b4:
ab:21:0c:35:41:2f:a1:ed:16:0b:dd:f3:aa:07:68:3d:fe:08:
2a:3c:66:37:b4:6e:16:c4:74:3d:a8:ab:62:28:70:01:f9:dc:
94:37:6a:4b:5f:5f:21:9b:32:9b:a0:30:0e:c7:d1:57:e8:62:
52:7c:a3:50:6b:cb:66:21:fb:62:c4:0d:e2:bf:41:2d:0b:40:
79:45:7b:e4:d8:f8:c0:0d:ad:f2:36:a4:98:63:80:78:3c:00:
db:56:df:21:61:44:8c:f9:cc:7b:c5:f7:c6:0f:3b:f8:a2:c1:
59:e1:ce:cb:4b:f7:75:0c:c9:b0:89:b5:cd:17:ac:3b:db:58:
da:74:03:a9:ed:cb:84:62:4b:5f:4b:60:01:a2:ed:1e:b5:2d:
3f:df:3e:7c:56:4b:e1:14:2b:b8:20:56:de:0a:c5:c7:a0:c6:
ab:74:9f:98:10:64:6f:58:d8:05:72:44:43:dd:ad:f0:41:97:
ad:ad:15:d8:92:75:6d:e4:13:f1:0d:c5:56:1e:a2:6b:ab:85:
e4:82:5d:10:ec:c6:70:91:f7:a1:4a:e2:6f:40:fa:c0:40:f3:
ea:65:6c:63:e5:6e:27:37:aa:0f:9c:e1:52:c0:81:c0:44:ab:
54:ba:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:31 2024 by rpki-client on console-fra.rpki-client.org