Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386ABB9E047C11EF80E81568017001B1.roa
File: 386ABB9E047C11EF80E81568017001B1.roa (raw, json)
Hash identifier: JOdXPTbopKzgE14z+W7n/CqmdTnEU86wSLfv4K5ukVA=
Subject key identifier: E3:02:FE:7B:B3:0D:BA:A9:BB:19:9F:21:A3:A6:A6:46:21:58:F0:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386ABB9E047C11EF80E81568017001B1.roa
Signing time: Sat 27 Apr 2024 09:55:04 +0000
ROA not before: Sat 27 Apr 2024 09:55:01 +0000
ROA not after: Sat 25 May 2024 09:55:01 +0000
asID: 212238
IP address blocks: 154.203.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45485 (0xb1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 09:55:01 2024 GMT
Not After : May 25 09:55:01 2024 GMT
Subject: CN=662ccb78-a7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:32:2f:22:6a:6b:fc:8d:63:b8:c0:0f:c2:
9e:41:72:81:a9:f0:cb:e6:9f:88:c2:6c:94:96:f5:
e9:f0:23:c6:3a:19:c9:6f:c2:5d:38:bd:08:28:c5:
c4:b5:6f:35:8f:82:42:d5:19:80:79:af:b8:3c:00:
5d:42:22:b3:f8:11:e0:1d:42:04:86:f8:f8:8b:ca:
5d:ea:16:0f:d2:37:84:77:aa:f3:ca:be:49:ae:64:
99:71:70:42:4d:cf:06:3d:f5:2b:da:e6:dd:57:18:
df:dd:35:2f:92:08:21:77:15:0d:90:4f:4c:b4:45:
6e:6c:c7:03:ae:e3:07:63:c0:02:b9:88:3a:9a:63:
42:45:e1:72:f3:88:9d:c2:14:dc:de:e5:d6:23:62:
05:b9:02:db:a9:40:cb:4f:8a:f4:a7:7b:87:90:2d:
fa:0d:de:8a:61:4f:6d:2a:e2:ba:54:16:22:ab:49:
39:51:64:3c:95:5f:5d:05:11:50:2d:e5:7e:3d:f1:
79:8c:e7:f7:be:3f:51:bf:bb:32:ac:87:19:2d:3e:
a3:81:83:4b:a8:a1:b9:df:3e:a9:b9:c5:b4:c1:b0:
02:ea:23:26:8e:53:77:3b:36:d9:94:60:86:2e:a5:
20:98:3f:b0:dd:0c:bf:b5:60:9f:68:2e:11:2b:cc:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:FE:7B:B3:0D:BA:A9:BB:19:9F:21:A3:A6:A6:46:21:58:F0:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386ABB9E047C11EF80E81568017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.93.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:7a:d4:4c:ac:5a:0d:22:fa:cb:8b:fd:2a:71:06:84:3b:86:
c9:b8:49:9e:1a:e1:b1:4f:ee:0f:24:10:22:b4:06:34:24:bc:
03:50:19:a6:d1:bf:4e:5f:80:75:98:ac:74:e6:cf:22:c7:e1:
49:fd:d1:a2:88:5b:7c:5d:38:27:17:ee:e4:76:66:ce:c7:41:
ce:f7:34:a6:d4:03:92:48:31:ad:9c:9f:0b:03:16:54:99:6c:
a5:01:2c:92:40:37:18:21:94:6a:a3:1b:1b:c2:0a:bb:7b:ea:
ce:78:d5:c1:89:34:08:a6:6a:1f:2e:ac:3b:aa:2a:5d:71:06:
c8:19:5e:b4:17:09:c2:08:8e:d3:c1:b2:4f:3e:45:af:a1:5f:
b7:66:6e:21:a4:a7:2a:74:0d:d5:71:6e:bc:53:86:9e:12:6b:
ed:e8:58:5d:65:60:53:44:2c:8d:42:85:ea:ff:ff:d7:5e:7d:
15:99:f1:83:a1:64:32:e5:f8:d1:8d:ba:b9:64:29:84:af:95:
0b:e8:70:58:09:5f:ee:7b:58:62:73:b2:d4:fe:47:5c:a1:26:
62:9d:00:31:49:80:bc:85:2a:2b:2c:95:56:c5:52:dc:3f:eb:
b0:21:02:65:64:bf:67:47:d8:2b:73:ec:57:33:91:41:d1:97:
33:9c:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:20 2024 by rpki-client on console-ams.rpki-client.org