Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC702F2F95A11EEAF188A35017001B1.roa
File: 1DC702F2F95A11EEAF188A35017001B1.roa (raw, json)
Hash identifier: dEQafch8Ycb3g4atuDk/E/Hn4LU/qQLs+bgbzKU3DYw=
Subject key identifier: 57:5C:C9:11:E5:2A:C6:B7:FA:AB:82:D2:CE:16:F4:90:23:07:80:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC702F2F95A11EEAF188A35017001B1.roa
Signing time: Sat 13 Apr 2024 05:53:14 +0000
ROA not before: Sat 13 Apr 2024 05:53:10 +0000
ROA not after: Wed 15 May 2024 05:53:10 +0000
asID: 23470
IP address blocks: 154.194.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43973 (0xabc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 13 05:53:10 2024 GMT
Not After : May 15 05:53:10 2024 GMT
Subject: CN=661a1dca-d5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:4b:73:15:88:31:06:34:61:f5:03:ae:c1:
8c:ca:23:c5:4c:a9:63:d8:ca:2e:43:74:13:93:0b:
03:f3:67:88:dc:77:3e:1c:ee:7d:d5:21:3b:f9:d3:
24:74:bf:10:f5:76:d1:86:9b:28:5c:31:49:12:bb:
09:b0:84:20:08:53:89:8e:90:63:36:d9:1c:c2:00:
96:c1:95:cd:c2:ff:8c:7a:51:fe:b2:6d:5e:9a:4b:
ed:a3:df:02:41:07:0f:66:09:c4:1e:53:fe:58:45:
29:fb:cb:0d:a1:99:93:cd:0a:2a:39:80:b4:9f:77:
9a:bb:f5:9d:65:42:0f:f8:a9:72:a6:60:c4:61:a3:
ab:90:13:2c:53:82:69:5e:16:6b:6f:25:3a:a4:2e:
71:aa:f6:7f:d5:5e:6a:b4:f4:bd:85:76:5a:e0:f6:
35:d1:20:19:8d:ad:49:4a:d8:e0:a4:a9:d6:68:eb:
b5:d5:3e:d3:13:4d:76:49:f2:cb:aa:88:dc:5a:aa:
23:92:21:55:8a:05:86:89:29:58:1c:f7:75:d7:a3:
32:a1:0f:c9:6b:88:88:80:40:55:3a:d4:ae:c8:b0:
3f:49:14:7a:ac:fe:a6:a6:ee:dd:64:2b:5b:d2:76:
a4:9b:45:0d:d5:63:cc:38:41:38:e9:08:09:51:e7:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:C9:11:E5:2A:C6:B7:FA:AB:82:D2:CE:16:F4:90:23:07:80:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC702F2F95A11EEAF188A35017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.46.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ea:43:79:2c:57:ed:73:b5:f1:9a:d0:7f:e7:8e:86:bf:00:
b3:44:69:9c:3e:52:36:d9:16:d8:f2:db:23:3d:96:34:1c:ab:
c2:c5:4b:ae:ef:fe:d6:11:83:4f:28:0e:8f:53:3d:21:51:f4:
c8:2a:42:e4:7c:25:63:3e:44:db:5c:a7:ac:1d:7e:77:f2:76:
cb:94:64:26:c2:cb:3f:58:ef:f7:51:59:e1:33:db:3a:11:2a:
7c:54:16:02:7e:2d:23:16:d1:80:2e:35:6f:7e:b8:11:c9:e4:
cb:58:be:80:51:7b:f5:01:b2:59:bd:b0:44:51:0e:55:7b:de:
73:61:6d:ba:3a:0e:92:ef:89:cc:f0:25:87:82:f2:eb:52:ba:
f6:6a:c5:f2:3d:5a:1f:e7:e3:31:cb:98:bd:2a:ab:c6:fc:85:
7c:47:30:f5:a1:88:4e:19:9b:7b:e1:a7:69:ae:28:23:af:27:
43:f7:c3:f7:fa:d2:90:ca:7c:66:e8:68:6b:98:a6:96:a7:96:
86:c8:4b:9c:48:87:64:8b:14:98:68:3d:73:aa:1c:81:a9:57:
d7:c2:11:d6:48:90:83:90:b1:3d:fb:7f:c4:b0:1b:e7:53:f6:
17:cc:d4:f8:cb:23:7c:e0:f3:18:56:6e:92:72:d2:65:ef:38:
74:26:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:52 2024 by rpki-client on console-fra.rpki-client.org