Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5A6278E6853711EEAF78D41C4AD9E6FC.roa
File: 5A6278E6853711EEAF78D41C4AD9E6FC.roa (raw, json)
Hash identifier: grcDBUy7KAVenDb+XJyfB3Cw20Jma1vzplMK66nlAEg=
Subject key identifier: 1C:99:88:F7:30:AB:B5:CC:C8:76:98:C3:60:87:F1:2F:8F:1C:89:47
Certificate issuer: /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial: 04C4
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5A6278E6853711EEAF78D41C4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 10:52:08 +0000
ROA not before: Fri 17 Nov 2023 10:52:05 +0000
ROA not after: Mon 30 Nov 2026 10:52:05 +0000
asID: 37239
IP address blocks: 154.70.224.0/24 maxlen: 24
154.70.225.0/24 maxlen: 24
154.70.226.0/24 maxlen: 24
154.70.227.0/24 maxlen: 24
154.70.228.0/24 maxlen: 24
154.70.229.0/24 maxlen: 24
154.70.230.0/24 maxlen: 24
154.70.231.0/24 maxlen: 24
154.70.232.0/24 maxlen: 24
154.70.233.0/24 maxlen: 24
154.70.234.0/24 maxlen: 24
154.70.235.0/24 maxlen: 24
154.70.236.0/24 maxlen: 24
154.70.237.0/24 maxlen: 24
154.70.238.0/24 maxlen: 24
154.70.239.0/24 maxlen: 24
154.70.240.0/24 maxlen: 24
154.70.241.0/24 maxlen: 24
154.70.242.0/24 maxlen: 24
154.70.243.0/24 maxlen: 24
154.70.244.0/24 maxlen: 24
154.70.245.0/24 maxlen: 24
154.70.246.0/24 maxlen: 24
154.70.247.0/24 maxlen: 24
154.70.248.0/24 maxlen: 24
154.70.249.0/24 maxlen: 24
154.70.250.0/24 maxlen: 24
154.70.252.0/24 maxlen: 24
154.70.253.0/24 maxlen: 24
154.70.254.0/24 maxlen: 24
154.70.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:05:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Validity
Not Before: Nov 17 10:52:05 2023 GMT
Not After : Nov 30 10:52:05 2026 GMT
Subject: CN=655745d8-c89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:e9:34:b3:ea:42:58:9b:7f:49:f3:74:86:
9c:5a:8f:1f:07:bc:9f:e8:b2:1e:03:16:84:b0:a6:
7d:c8:df:bd:88:8e:2f:88:32:20:8e:09:83:4c:f0:
88:9f:c2:f2:88:5a:c5:7b:0f:b5:52:01:02:c7:27:
03:e1:22:a9:30:e1:7b:9d:db:88:9e:1d:14:a7:5b:
02:fc:e6:b5:2a:af:a6:b9:72:23:a8:6d:dc:97:63:
6c:6d:01:09:ec:0d:a0:66:47:23:6c:42:41:48:fc:
8d:eb:21:ea:88:26:50:9b:14:00:f1:92:f7:b9:bb:
56:96:d2:26:c7:a1:53:31:2c:2c:aa:a0:40:e4:88:
7f:80:67:ec:ed:eb:65:42:1c:cc:94:e6:1d:7a:f6:
c6:79:8d:4c:d4:c0:20:92:07:03:13:b6:1a:9b:0a:
7a:ac:9d:43:38:db:fe:a6:6a:20:1d:a0:63:5a:8c:
45:03:05:8c:e1:a6:b3:15:d3:7d:f8:5d:51:fe:2d:
b7:3e:ac:47:94:9a:3f:a1:47:bf:d2:96:42:eb:a7:
ac:e1:d8:29:1f:dd:57:8c:c0:63:0b:c3:a9:e6:e0:
49:3a:5f:e4:a4:82:71:2a:5b:e3:b5:47:7b:27:46:
bf:bb:0e:c2:20:f0:c5:42:59:96:22:74:7e:82:b2:
08:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:88:F7:30:AB:B5:CC:C8:76:98:C3:60:87:F1:2F:8F:1C:89:47
X509v3 Authority Key Identifier:
keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/5A6278E6853711EEAF78D41C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.70.224.0-154.70.250.255
154.70.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:88:aa:37:28:78:4d:37:95:3c:1e:f4:1e:68:98:93:e1:9f:
4a:78:e2:d3:c5:92:a2:b2:a1:d0:9f:30:24:dc:b5:60:c5:4f:
50:ac:cb:61:2d:c0:cd:0c:2b:8e:1b:7b:59:6d:e9:d0:57:c6:
9e:57:82:51:15:df:c8:0f:61:60:7a:cf:15:42:db:aa:da:b6:
47:8a:06:45:fb:e6:e7:c3:11:23:97:b3:06:2e:67:2d:a8:0e:
8d:44:90:ad:25:b2:79:2d:42:f6:55:b8:13:40:83:62:51:af:
af:e8:75:8c:a4:23:d8:c5:86:7d:2c:6c:61:e2:fd:db:bf:f5:
3d:46:86:d8:9d:37:62:91:ef:17:72:6b:3b:cd:6d:f7:d3:fa:
9f:83:64:96:e6:a4:47:9f:bd:0d:b0:0f:af:4b:34:fc:a1:fb:
d9:f9:4d:e1:40:91:90:fd:82:ab:e1:32:e3:9b:af:29:09:7e:
aa:d6:49:a2:3a:82:ba:aa:81:e1:d9:88:6e:43:7f:63:9f:cd:
c9:85:5c:12:b9:87:f1:15:31:c5:7a:d3:9b:f3:78:d9:68:9c:
91:cd:b8:e4:b6:09:b2:4d:9b:a7:5e:f8:7e:63:92:4b:96:49:
a4:a1:53:09:79:dd:fe:08:1e:97:48:c4:df:f1:a9:08:69:fd:
56:68:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:28:56 2024 by rpki-client on console-ams.rpki-client.org