Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32DEA6CACCC011EEAA718688775412E6.roa
File: 32DEA6CACCC011EEAA718688775412E6.roa (raw, json)
Hash identifier: bGSuMobcfatyRjL7JlzWTViljlXTN3/SUGsXV1bMjng=
Subject key identifier: 00:4A:4D:17:02:E1:34:52:04:54:EB:EF:A3:0F:07:99:2A:89:61:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32DEA6CACCC011EEAA718688775412E6.roa
Signing time: Fri 16 Feb 2024 11:40:35 +0000
ROA not before: Fri 16 Feb 2024 11:40:32 +0000
ROA not after: Fri 26 Apr 2024 11:40:32 +0000
asID: 9009
IP address blocks: 154.216.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35585 (0x8b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:40:32 2024 GMT
Not After : Apr 26 11:40:32 2024 GMT
Subject: CN=65cf49b3-129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:af:6e:45:66:ed:71:71:23:3d:da:05:8f:
60:2c:7b:95:20:51:c4:fd:22:c4:75:3e:59:b5:c5:
d9:6a:e3:85:ae:6b:b0:4e:dd:6f:c3:b6:9c:62:a0:
80:3a:4e:c2:a6:49:2b:66:be:50:81:ee:f1:31:0b:
82:7e:37:54:0a:d0:18:5c:de:cd:0c:90:08:ef:fa:
67:39:91:d8:b2:e2:35:4d:b2:35:61:df:6c:5b:72:
33:ed:35:5d:a8:4e:37:a5:33:03:a0:f8:a0:82:72:
43:a7:72:d8:08:2a:37:44:cc:b0:53:3a:c8:e3:61:
51:5b:46:35:d6:45:98:72:f1:cc:1a:4a:65:9e:b6:
fb:f9:5f:ec:8f:6c:1f:c3:7e:3b:b9:f8:36:36:43:
3d:c8:7a:2a:b0:17:f4:86:a9:96:59:60:19:98:07:
83:04:9f:9c:7e:c0:f0:01:c2:9f:69:79:17:15:6c:
42:30:df:26:c6:94:f6:c5:1d:03:27:7a:2d:c7:51:
64:ac:c3:e6:27:3f:ac:67:88:be:1f:f2:ea:07:13:
dd:c6:6b:0a:e7:cd:0c:4e:9f:57:18:c2:57:c1:ba:
7a:cb:fe:33:60:6a:3c:07:81:bc:b4:ad:4c:82:b9:
a5:d1:32:3b:69:87:da:44:cc:f2:fa:3e:43:b1:cb:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:4D:17:02:E1:34:52:04:54:EB:EF:A3:0F:07:99:2A:89:61:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32DEA6CACCC011EEAA718688775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.240.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9d:76:32:03:4c:f9:a7:a5:b6:8f:6c:19:27:83:17:d2:04:
60:16:c5:36:cc:70:3d:d2:1a:5f:f2:20:fe:05:4d:5e:20:66:
bf:c5:5d:0a:7f:73:18:c3:b9:ab:0f:db:c0:e3:ac:98:98:7e:
a7:63:72:dc:8f:ba:c5:07:2f:4c:c6:f4:69:39:ec:02:93:aa:
41:b6:80:75:9d:b1:4a:8d:2f:85:1f:a6:97:01:9a:8b:57:d4:
88:e2:84:bd:ce:3d:f1:e9:ca:1d:15:ba:85:c2:62:94:ec:a0:
e5:cc:c4:71:da:67:51:8e:da:6f:89:27:dd:54:96:3e:25:a1:
a8:d3:03:4f:c6:3c:1e:d4:e0:67:7c:5c:ca:fb:77:d2:56:59:
c8:37:2f:4d:90:75:b4:b9:68:e1:6e:85:ce:63:8c:86:10:4f:
04:53:e6:67:7a:b0:56:ce:3c:c6:c4:27:21:bb:7b:78:1c:46:
e2:87:0e:73:9b:08:43:44:84:ea:f2:c7:26:74:29:54:f1:d2:
75:97:01:e5:8d:0a:f8:c4:ce:a1:fc:e1:9c:80:1e:0b:18:df:
4c:1a:6d:cf:9c:d0:c4:4e:0f:39:0e:51:54:f8:d3:4f:cd:5d:
dd:03:4c:bc:72:e8:d8:c3:4e:49:5e:03:8f:49:31:8e:42:dd:
84:c7:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:33 2024 by rpki-client on console-ams.rpki-client.org