Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40DCB494727311EEB9BCBE2C4AD9E6FC.roa
File: 40DCB494727311EEB9BCBE2C4AD9E6FC.roa (raw, json)
Hash identifier: +47Mp66PVlY8tUNz1N0PcqZNI1mIsUHmHeqppYYxd6c=
Subject key identifier: 49:5D:9E:E1:EE:F3:9F:81:A9:C7:FE:33:59:45:EB:5E:E2:75:09:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4761
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40DCB494727311EEB9BCBE2C4AD9E6FC.roa
Signing time: Tue 24 Oct 2023 13:43:03 +0000
ROA not before: Tue 24 Oct 2023 13:43:00 +0000
ROA not after: Wed 23 Oct 2024 13:43:00 +0000
asID: 29802
IP address blocks: 154.81.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18273 (0x4761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 13:43:00 2023 GMT
Not After : Oct 23 13:43:00 2024 GMT
Subject: CN=6537c9e7-2ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:d1:a6:43:69:84:2e:3a:bf:32:bb:41:c7:
e0:2e:de:f3:0c:80:b3:08:90:16:3c:59:6e:9c:15:
65:66:9c:4b:3e:18:b3:d0:86:5b:e4:3b:9b:c4:34:
59:99:dd:db:ef:d7:36:f8:cc:c4:ea:33:21:b3:08:
72:25:64:90:de:7d:82:d3:13:42:b3:3b:d8:21:6d:
1a:ae:04:d8:a6:b4:13:ce:80:10:90:a0:07:b0:8e:
dd:59:b6:03:07:59:eb:81:3c:bd:d0:1d:1e:76:3e:
ab:6e:c0:e9:e4:e0:df:ef:39:c6:a6:35:f6:ab:e8:
d4:5a:a5:2d:16:f6:7b:22:2a:47:c6:ab:36:65:d6:
ad:d0:f5:23:3d:14:d5:0b:f7:b4:b7:fe:93:5b:ad:
e2:5e:18:9a:c0:3f:f9:67:c2:aa:8f:60:73:b8:c9:
a6:8c:63:06:9a:fb:7f:8b:8e:3d:92:ac:5b:84:eb:
99:a3:cc:19:f7:77:98:f0:a2:d5:99:85:42:b2:fc:
13:a5:2b:c5:2b:43:d6:07:58:14:da:48:25:70:93:
15:c0:09:74:5a:b8:2e:16:3b:17:d6:92:38:f1:89:
3c:fe:c9:ed:d6:f8:77:2b:12:3b:5f:be:b7:4f:37:
0f:2d:76:3d:fd:e9:cc:23:fa:76:ca:92:d5:34:22:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:9E:E1:EE:F3:9F:81:A9:C7:FE:33:59:45:EB:5E:E2:75:09:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40DCB494727311EEB9BCBE2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.56.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:66:7c:70:ca:c9:40:72:b8:c6:e6:57:56:64:60:59:ab:cf:
c7:29:21:17:38:ef:f4:b6:f2:65:20:c2:03:ae:7d:4f:dc:38:
42:51:f7:f3:81:a9:6d:ba:fe:c8:a0:47:0f:b5:ce:a5:3a:a2:
99:52:a8:3f:d4:cd:7e:43:db:34:32:61:a8:a4:aa:45:a6:fe:
70:db:e4:a6:21:06:56:55:43:13:3b:74:a4:6b:5c:06:82:05:
bc:54:fa:29:5a:7b:63:4b:b6:44:fc:a7:46:c0:4a:19:38:48:
e3:b5:ee:60:6c:5b:d4:d8:f7:f1:5f:05:c0:5c:2f:cf:93:3b:
5c:26:22:09:af:24:9b:c2:eb:b8:55:2c:57:71:49:1a:c7:52:
fb:bc:ec:d9:3e:55:6e:26:78:7c:25:75:97:7b:2a:86:2f:8c:
91:98:1f:7e:2a:dd:a3:d3:16:88:fd:2a:92:98:dd:ae:23:71:
77:e4:eb:09:19:3c:ed:00:41:e9:5b:7e:a6:7e:c5:f5:08:54:
33:58:c6:dc:68:af:35:9c:ab:11:58:31:50:4d:24:ff:53:20:
d2:c7:be:7a:9b:6c:b2:ac:9c:f8:95:85:c3:ca:3c:ae:45:c4:
c4:b0:19:e1:4b:c6:fd:38:0d:52:b5:4d:16:bd:68:9a:67:69:
22:66:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:02:37 2024 by rpki-client on console-fra.rpki-client.org