Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/504B440805F411EF9385B1F3007001B1.roa
File: 504B440805F411EF9385B1F3007001B1.roa (raw, json)
Hash identifier: 5zd/RsDOt4w/S0hdEicrIdv+aMB0nlBVZSYrh7/ujzU=
Subject key identifier: 3D:8E:48:1D:F5:58:09:CE:27:6C:B4:81:6C:6F:D3:6A:EB:15:74:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/504B440805F411EF9385B1F3007001B1.roa
Signing time: Mon 29 Apr 2024 06:47:15 +0000
ROA not before: Mon 29 Apr 2024 06:47:12 +0000
ROA not after: Wed 05 Jun 2024 06:47:12 +0000
asID: 18779
IP address blocks: 154.195.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45562 (0xb1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 06:47:12 2024 GMT
Not After : Jun 5 06:47:12 2024 GMT
Subject: CN=662f4273-30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:63:18:af:1a:dc:d8:dc:39:8f:f3:8b:3c:
78:62:18:97:09:37:a7:b8:af:af:7e:88:86:f7:ec:
79:4b:7f:be:7b:e7:2f:7e:c0:16:23:59:9c:ce:9a:
8f:09:70:6f:5e:7c:d6:28:08:34:32:f0:00:97:f1:
3e:10:98:b5:b5:fa:97:35:9c:ac:e4:13:6b:c2:69:
39:e0:74:16:b4:3d:8b:53:b6:cb:2e:c3:c6:86:c2:
9b:88:d9:ce:62:32:66:c0:b5:b7:dd:d6:42:1a:99:
45:15:29:f3:b2:9b:43:69:37:e7:ce:5e:59:bf:8f:
79:94:8e:b5:41:95:4a:d9:7d:16:20:d6:1a:6e:fe:
f5:32:de:b5:e7:e5:50:c7:0d:eb:76:b3:3e:78:62:
ac:c6:9d:54:4e:19:ec:0e:7c:cd:55:d2:f2:5f:40:
99:e5:03:fa:5f:d2:5a:16:bd:aa:ff:4d:dc:7f:f1:
23:6a:ed:bb:4b:4d:cc:74:67:ce:dd:bd:d6:53:35:
17:da:03:7d:68:15:92:b0:e3:7f:65:01:03:8e:19:
12:5b:7a:d7:72:50:b8:2e:61:96:c0:fb:b3:6a:65:
33:3d:69:0b:ad:ae:ce:cc:af:62:81:22:6e:37:e0:
4a:e4:ea:8a:56:41:4a:13:29:1b:66:91:be:a5:ce:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:48:1D:F5:58:09:CE:27:6C:B4:81:6C:6F:D3:6A:EB:15:74:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/504B440805F411EF9385B1F3007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:71:02:f5:37:62:13:87:ce:c3:e2:51:6e:37:0e:0e:76:96:
d4:41:f5:45:08:59:38:15:64:4d:a8:4e:32:f4:c4:d1:03:e5:
f0:f8:19:a5:cc:5a:93:eb:c2:8d:fd:3d:23:31:fa:2a:f0:01:
0f:84:9b:4b:6d:2c:bd:17:50:89:89:58:ee:8c:d2:63:1f:59:
ba:5a:a7:5b:1e:73:b5:25:79:8b:1b:c4:ea:30:4c:38:d5:87:
26:01:cf:44:ef:28:66:ff:1e:70:24:f4:3a:bf:6a:cd:a6:b8:
1b:b2:90:b8:00:9c:66:50:3c:3b:1d:42:d0:17:64:e9:d4:81:
34:e6:6b:99:3b:4e:0e:29:4f:43:85:39:9c:61:01:05:19:31:
b8:49:ba:a8:a9:e2:3f:9f:7b:d9:7b:a2:c0:ff:20:e9:fb:83:
d9:35:40:9e:78:7f:eb:e7:63:f0:63:bc:0b:10:a7:0e:13:c0:
61:7c:40:a8:bb:68:79:89:6a:40:72:bc:6a:ab:3b:7b:f4:c4:
0c:d7:50:6b:50:8e:8f:30:25:8e:7b:e9:28:d8:77:2c:b8:ef:
ec:0f:98:9c:3f:b6:6f:ef:cf:f6:8b:2c:6d:e6:13:1a:10:64:
bd:19:d9:8a:af:51:c0:ae:cf:d1:4e:c8:b1:e5:34:ff:17:64:
20:00:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:22 2024 by rpki-client on console-ams.rpki-client.org