Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04867E400B5111EF8D2B881B017001B1.roa
File: 04867E400B5111EF8D2B881B017001B1.roa (raw, json)
Hash identifier: OPPbp0dsev/I5X9WzHvApZsO2+LGyaFvFRXkSZfjLPo=
Subject key identifier: BC:D4:69:AA:3C:F5:F8:9E:7A:F2:60:CF:C9:43:86:87:4E:E3:C6:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B49E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04867E400B5111EF8D2B881B017001B1.roa
Signing time: Mon 06 May 2024 02:33:27 +0000
ROA not before: Mon 06 May 2024 02:33:24 +0000
ROA not after: Tue 11 Jun 2024 02:33:24 +0000
asID: 138915
IP address blocks: 154.205.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46238 (0xb49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:33:24 2024 GMT
Not After : Jun 11 02:33:24 2024 GMT
Subject: CN=66384177-f64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:6d:fe:38:2c:3e:b1:77:64:8a:42:5a:f3:
95:5b:ab:c7:66:26:4f:ce:d0:3c:bc:e9:17:e6:1c:
f1:b8:fc:5b:16:db:50:63:c1:0a:b3:68:ac:df:8e:
8f:2b:b7:94:ca:4f:bf:7d:3c:97:98:2e:0a:5c:e1:
d1:99:05:03:1e:0f:3b:68:f0:1c:47:6d:0f:6b:80:
5b:32:a4:cb:5c:bd:da:c9:f2:af:31:21:83:00:b2:
75:86:ea:e9:99:49:4a:a0:50:64:8d:86:27:55:f2:
39:a5:43:c6:90:ef:ed:99:54:d6:ee:30:26:cc:4f:
7e:63:24:a5:1a:ee:a9:d4:99:a3:d9:cd:2f:dd:e0:
de:8a:d9:b5:0c:67:ff:b6:f9:a3:f8:5f:20:8c:24:
d0:45:77:d9:63:70:ca:b0:f8:b0:3c:7e:45:fd:bb:
ac:b3:ef:de:20:1f:21:2f:d4:86:64:f9:85:ee:12:
df:23:24:84:f2:5b:4e:18:e7:75:a5:3e:85:9b:d6:
ab:cd:f8:ad:cc:e6:da:a8:db:26:32:d7:ed:53:e7:
d4:35:22:8d:8a:84:d7:39:62:4f:c1:5f:f7:d2:64:
5b:08:36:fe:55:0e:bd:12:4c:74:37:14:7f:5f:78:
b6:c6:d1:25:e6:25:57:e7:b5:70:60:ef:53:02:4c:
f2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:69:AA:3C:F5:F8:9E:7A:F2:60:CF:C9:43:86:87:4E:E3:C6:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04867E400B5111EF8D2B881B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.130.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d6:a1:63:fb:2a:9d:1f:3b:c9:29:54:66:94:b6:77:3b:2d:
c8:62:e5:5a:41:63:e6:de:ef:e4:ea:c0:12:f8:9a:8b:96:a3:
0c:04:05:36:e6:64:6c:e0:c3:5a:02:10:23:bb:5a:c3:5e:4b:
7d:f7:8d:ef:89:68:83:6b:ef:37:bd:c7:6e:da:80:b7:87:05:
85:99:da:0b:b8:62:03:8b:3b:38:0e:56:56:1b:bf:fa:90:aa:
e1:d4:ce:58:f3:73:e3:74:be:76:d5:8e:f9:7f:48:62:da:0d:
22:b2:b4:12:96:56:8d:b3:6e:52:0e:0c:1d:04:96:8e:b1:94:
0c:0a:be:a5:de:dc:e3:5f:d4:d2:d1:d2:21:db:0b:2a:68:8c:
a6:a9:6f:31:e8:42:a4:16:a3:85:53:1f:a1:0c:92:f5:6e:f9:
a6:69:38:86:62:d8:c3:6a:d3:0e:76:29:ac:48:5b:eb:d9:e8:
bb:61:bb:a7:b8:a2:ec:ca:8f:4e:5a:63:fa:b2:92:32:1b:39:
1d:90:4d:0d:8e:d3:5a:dc:22:0d:d7:1d:a3:8c:cb:b4:e9:28:
af:fa:8d:e6:60:96:6f:52:c7:10:82:b1:ee:8f:e6:d3:8c:2b:
6c:49:b5:82:32:d4:ca:72:42:60:52:fc:a1:51:11:28:4c:06:
7d:4e:78:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:10 2024 by rpki-client on console-fra.rpki-client.org