Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1EC10FC088411EFA1E1A04F017001B1.roa
File: A1EC10FC088411EFA1E1A04F017001B1.roa (raw, json)
Hash identifier: /3NriRSx60DS/2gt3PB75jPtdeTuWNzZmbldPKb5jD8=
Subject key identifier: 70:21:7D:C0:69:54:41:24:AB:E7:C9:66:98:21:30:86:22:49:5F:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B3BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1EC10FC088411EFA1E1A04F017001B1.roa
Signing time: Thu 02 May 2024 13:05:22 +0000
ROA not before: Thu 02 May 2024 13:05:18 +0000
ROA not after: Wed 07 Aug 2024 13:05:18 +0000
asID: 400999
IP address blocks: 154.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46012 (0xb3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 13:05:18 2024 GMT
Not After : Aug 7 13:05:18 2024 GMT
Subject: CN=66338f92-5497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:01:89:2d:e5:5b:37:29:6d:26:17:4d:3a:
88:35:6e:ab:ac:e9:46:5b:26:be:2f:aa:bd:33:d4:
af:40:df:9c:cd:62:b8:45:82:86:70:e8:93:c6:06:
86:61:03:8f:ae:ac:03:1f:8d:86:31:81:25:db:22:
45:ac:26:20:1d:d2:cf:b5:69:11:d8:6f:fc:92:02:
04:88:a5:12:41:97:e3:60:20:c2:85:37:df:04:53:
49:a7:ea:35:ec:0f:7f:42:4f:3e:60:58:2c:46:0f:
20:bc:e9:17:7d:fe:4c:71:02:d7:1f:a7:fa:8b:43:
5b:74:fc:84:02:47:1b:c0:72:2f:00:95:75:77:f2:
30:94:29:1f:5a:48:e1:32:b9:76:7f:c0:ee:63:cc:
3d:a4:5a:01:8c:f5:c4:a6:7b:dc:16:13:41:ac:51:
cb:0b:c3:b1:6c:1c:e4:82:51:51:05:b1:0b:f5:63:
e4:0c:b1:77:d4:8c:51:60:8b:f0:c4:24:43:ce:64:
bb:3d:a6:68:95:a0:92:ea:6d:cd:14:e1:49:33:f4:
4c:f3:2f:52:89:15:2f:ea:9f:5a:bd:a5:35:bf:a4:
70:51:07:87:f4:0d:fa:36:24:25:e1:15:86:2c:d5:
dc:3b:b2:f2:28:ad:13:1f:44:a3:0f:a4:84:d9:f0:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:7D:C0:69:54:41:24:AB:E7:C9:66:98:21:30:86:22:49:5F:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1EC10FC088411EFA1E1A04F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2a:36:68:3f:7f:85:96:a6:1b:05:27:1f:f0:29:c1:1f:52:
18:4d:99:69:02:64:15:3b:92:d8:96:11:33:a2:fb:5f:b8:6c:
c9:55:f7:0b:15:2e:4b:0a:d5:8e:20:ab:c7:d0:a9:d3:c4:9b:
dd:0b:b2:94:86:bb:a6:5b:42:67:d3:51:70:ca:87:9a:cd:1d:
19:b1:57:a9:31:95:31:f7:69:41:4d:6d:35:9c:0e:ae:84:90:
9f:70:d9:5d:e6:d3:d7:1f:fe:39:5f:51:1c:cd:f8:7a:e8:c5:
61:82:f2:2b:ba:a7:38:ea:55:b0:40:ea:b8:2c:d1:5a:5b:fe:
f9:6e:be:33:56:45:6e:34:30:72:fb:49:59:ba:46:a4:35:7c:
ff:5a:f2:e3:04:a8:54:3c:e4:24:2f:94:93:79:3a:ed:2c:1b:
39:52:57:32:54:e5:46:76:73:96:16:d8:a7:74:c8:38:9a:0b:
66:03:30:4e:cc:6d:66:d4:90:40:76:b9:c2:8d:6a:30:f3:cd:
37:93:ef:06:94:7e:f7:91:14:6b:12:9d:e2:b9:b5:e0:96:47:
39:29:36:0f:58:d9:45:b0:01:bf:ec:5d:17:3d:c7:76:62:55:
d6:1b:b5:81:fe:2b:37:3f:b8:f7:2f:fc:33:11:d7:fa:6e:3b:
3d:0a:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:21 2024 by rpki-client on console-fra.rpki-client.org