Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68363A020B5B11EF886F3BF4007001B1.roa
File: 68363A020B5B11EF886F3BF4007001B1.roa (raw, json)
Hash identifier: EJ47eLRigA+bwUXt+VoDycmqCNm5B1hhSl6/N1As9SI=
Subject key identifier: 4F:DF:10:16:3E:5E:41:8C:D6:E4:48:24:10:43:A3:3B:32:DC:84:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B4E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68363A020B5B11EF886F3BF4007001B1.roa
Signing time: Mon 06 May 2024 03:47:49 +0000
ROA not before: Mon 06 May 2024 03:47:46 +0000
ROA not after: Tue 11 Jun 2024 03:47:46 +0000
asID: 63139
IP address blocks: 154.203.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46306 (0xb4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 03:47:46 2024 GMT
Not After : Jun 11 03:47:46 2024 GMT
Subject: CN=663852e5-055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:51:d8:aa:91:4c:c4:c2:62:33:cc:a8:b2:
dc:17:cf:8c:18:30:dc:b6:cb:ad:31:b9:79:59:5b:
3d:12:bd:43:65:a2:9a:6a:33:f8:ed:0a:03:d0:84:
0a:b3:46:28:56:c0:65:07:a7:f7:d7:37:29:d0:65:
32:72:4f:9c:be:8d:b3:e6:fa:77:57:04:5e:02:07:
e5:d9:ae:f7:f5:b6:1e:0f:3c:93:56:f8:61:50:0e:
68:f2:55:f1:e7:88:1d:30:4a:73:7c:11:e9:67:d5:
45:46:62:e2:a3:26:77:4c:1e:49:aa:eb:dd:c8:28:
09:e9:6d:82:b5:e9:ee:f9:47:15:76:20:87:8a:60:
58:e3:89:52:72:ed:00:59:78:f6:ee:5a:06:29:b7:
76:b2:c8:18:3b:9b:f2:8a:96:e8:dd:6e:76:43:4b:
60:be:92:e4:31:74:cd:95:2f:93:88:cf:20:fb:cd:
6c:9c:a7:f9:0b:df:34:b9:b1:fc:ae:df:76:e0:fc:
16:75:9d:44:d1:dc:8f:20:2b:bc:d9:59:8a:2e:c3:
4b:2b:f6:33:02:d9:5d:4d:47:e1:75:bf:0a:7e:0d:
fc:88:0a:80:b2:20:d5:28:f0:96:99:0c:55:23:3d:
e5:0b:10:e4:8c:60:e5:a5:55:1d:3b:1a:00:19:90:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DF:10:16:3E:5E:41:8C:D6:E4:48:24:10:43:A3:3B:32:DC:84:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68363A020B5B11EF886F3BF4007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:18:8b:58:d7:ff:79:29:43:13:c7:dd:8c:3b:8a:28:3e:d6:
35:64:13:96:d9:4d:50:26:7c:0f:35:1e:bc:61:b4:22:02:db:
d1:33:e4:8b:0c:83:b7:e5:3a:30:a7:05:86:5e:0d:22:5f:de:
b3:80:8e:43:ab:24:5f:36:73:f0:35:ae:7e:89:32:f1:33:25:
c9:46:89:7b:8c:8f:52:4d:dc:cc:ac:a0:c4:0f:75:b6:4b:4d:
5b:62:1e:ff:01:dd:de:21:f9:70:c9:83:40:57:ff:27:ff:2e:
9d:2d:ab:10:e5:1e:e5:cf:06:07:0c:57:02:88:0e:2d:34:77:
56:ee:e3:2c:30:31:fa:a6:05:c3:6e:0e:b1:0a:6d:d7:02:aa:
06:92:04:51:66:75:94:d6:86:0b:1e:c0:ca:b3:d9:b8:1f:61:
43:0d:f0:c4:f6:92:e2:90:71:a8:01:28:31:f1:ab:0c:a2:7c:
50:6b:b8:0a:3c:cd:30:80:31:68:f7:7e:e7:98:bf:7e:4c:d1:
a4:b9:35:b3:59:c3:a5:e9:c0:03:0f:21:05:c8:e4:fc:73:6b:
6f:a8:01:c9:b2:b2:9d:d6:b1:6d:17:e3:df:4a:43:22:6c:af:
15:ab:9c:1d:79:3a:f7:54:a5:ef:34:3d:07:0f:5d:d3:5b:b4:
36:e7:e5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:17 2024 by rpki-client on console-fra.rpki-client.org