Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D93CEACCBF11EE83B09C87775412E6.roa
File: A0D93CEACCBF11EE83B09C87775412E6.roa (raw, json)
Hash identifier: 0AV/yr9/QtSlddAdr+UaLJqIRvPGv3HbK4yaaWgTjZk=
Subject key identifier: 94:73:C1:28:8F:4E:1A:B7:EA:4A:7B:9A:28:A4:61:FA:D5:37:5E:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AFB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D93CEACCBF11EE83B09C87775412E6.roa
Signing time: Fri 16 Feb 2024 11:36:31 +0000
ROA not before: Fri 16 Feb 2024 11:36:27 +0000
ROA not after: Fri 26 Apr 2024 11:36:27 +0000
asID: 9009
IP address blocks: 154.216.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35579 (0x8afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:36:27 2024 GMT
Not After : Apr 26 11:36:27 2024 GMT
Subject: CN=65cf48be-717c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:74:5b:4b:ce:ff:c6:64:31:c6:9e:cc:f7:
56:85:f4:66:ce:c2:5e:50:0c:b7:5f:d5:06:f9:a2:
e2:0e:b1:bc:fa:05:9f:a6:f3:ce:f3:7d:bb:69:31:
fb:04:a4:ab:7b:a6:9c:40:34:96:58:10:83:eb:02:
5e:c1:ae:3e:bd:10:9a:ae:f7:94:e7:02:11:3f:70:
73:25:43:68:48:21:f4:3a:4a:7c:71:df:48:bc:f7:
6f:a2:1a:5e:92:70:95:79:a5:7e:17:54:56:ff:ff:
1f:a7:01:01:a0:d5:10:ad:45:e7:c3:c5:10:7f:ce:
f2:27:da:39:cc:4b:ea:df:d8:b5:75:43:ad:9a:e7:
be:39:e1:b4:f1:9d:65:8b:3b:e8:cc:e7:90:b5:48:
2f:e7:ab:e8:d9:87:66:b2:9c:1e:38:6e:7f:87:3f:
22:7e:69:d3:ef:d0:f8:dd:55:2c:cb:ba:28:89:af:
9c:64:b6:2f:99:7c:f7:4f:ca:99:46:a1:ff:bf:e1:
14:7b:0a:2f:86:ed:c8:9b:70:51:da:65:14:fe:3a:
fb:25:db:aa:5b:d9:3b:0b:7c:12:3c:ac:6b:c4:2a:
ed:70:bd:d5:bd:30:31:9f:71:34:1a:49:66:01:73:
91:92:91:6e:77:be:52:68:38:8d:ae:18:d4:0a:40:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:73:C1:28:8F:4E:1A:B7:EA:4A:7B:9A:28:A4:61:FA:D5:37:5E:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0D93CEACCBF11EE83B09C87775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.237.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4e:b3:22:eb:73:4c:ae:47:f7:eb:b6:e1:3b:a9:8f:f6:76:
14:df:86:ef:44:a5:72:37:3a:f6:71:a8:4a:cc:0f:ff:98:d2:
45:5f:c8:c2:be:78:83:27:87:b3:24:87:21:47:01:93:e8:ff:
a9:a3:ba:16:86:f9:9f:bc:cc:1a:aa:f8:7f:bd:8c:eb:f0:df:
1b:3d:17:53:55:24:92:86:ff:ab:3f:ad:f0:8d:20:ec:b4:83:
5c:cb:58:1a:40:6f:8f:04:85:e8:11:36:9f:b1:60:29:d0:4a:
99:6d:de:9c:f3:93:a1:a5:91:e0:60:78:57:13:71:c8:e2:1e:
db:09:c9:30:17:f7:a5:e3:f8:63:4f:25:f3:93:23:ed:b5:ad:
88:67:ba:8a:43:4a:ad:3b:5b:80:fc:9b:d2:1c:87:75:da:56:
87:ef:85:1a:7a:ba:89:a4:bd:91:fc:5c:9c:bc:c0:37:78:04:
0c:e4:d6:db:97:b4:55:38:ba:1a:f5:3b:35:97:55:97:ed:17:
43:13:52:a1:5a:e3:d6:5b:76:97:9d:33:ca:eb:c5:33:ce:91:
6f:5e:27:02:ce:4d:9a:cf:ef:65:a2:f8:7c:46:fe:f9:c1:01:
48:7a:46:dc:c7:7b:9a:d0:1b:1f:ad:2f:09:9c:1d:16:05:b8:
d9:59:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:37 2024 by rpki-client on console-fra.rpki-client.org