Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B63DAA08FE11EFA522ED3B017001B1.roa
File: B4B63DAA08FE11EFA522ED3B017001B1.roa (raw, json)
Hash identifier: IosFqbVJeH7hDcjG/6j3bGjpxyiKRi8aSWNJ44P1+Fs=
Subject key identifier: 21:FF:BA:68:59:D7:AB:C9:54:04:22:53:0C:8D:CB:3B:81:44:90:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B413
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B63DAA08FE11EFA522ED3B017001B1.roa
Signing time: Fri 03 May 2024 03:39:12 +0000
ROA not before: Fri 03 May 2024 03:39:09 +0000
ROA not after: Wed 07 Aug 2024 03:39:09 +0000
asID: 400999
IP address blocks: 154.196.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46099 (0xb413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 3 03:39:09 2024 GMT
Not After : Aug 7 03:39:09 2024 GMT
Subject: CN=66345c60-37d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:44:c1:04:22:e5:e2:d7:81:76:f8:2a:5f:
28:6a:c4:5c:35:fa:16:8f:ed:1a:c3:fc:89:43:92:
90:50:cb:cd:bd:a4:78:c8:09:76:78:5e:68:60:c6:
b6:54:b0:89:c6:87:1d:42:56:eb:a7:50:b7:ae:c9:
0a:fd:5a:db:6e:42:fa:8d:aa:d8:eb:a3:23:83:8c:
bd:fd:79:91:dc:4b:1b:55:d3:9d:68:62:9e:bc:ba:
b2:ea:9a:e0:fb:8f:6f:41:f0:fe:04:05:14:ff:98:
f9:4e:71:a9:f6:97:7b:18:c9:be:18:19:9f:c2:28:
d6:56:66:ad:68:e3:ff:16:4c:16:e0:92:8c:b6:c8:
43:58:80:e5:64:c4:b7:ae:16:ef:27:17:d7:78:51:
dc:92:e0:cb:39:23:4c:ff:c0:a7:fb:a4:f2:83:7d:
c6:5f:ed:6c:b4:04:43:14:ea:b7:e3:85:09:95:1a:
1d:1a:5c:97:4a:d9:5c:6e:0d:41:38:e3:ec:b4:a9:
b4:c2:02:4c:0a:e9:01:4f:2f:d7:97:eb:e3:d0:a2:
93:93:1a:70:6b:1f:8e:ed:97:5c:eb:b1:e0:8a:49:
67:6d:e9:36:17:54:f9:6e:ca:f5:82:cd:11:44:8a:
da:e9:33:ba:ba:29:7c:6a:ad:a6:23:46:fb:f3:33:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:BA:68:59:D7:AB:C9:54:04:22:53:0C:8D:CB:3B:81:44:90:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B63DAA08FE11EFA522ED3B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d8:43:77:0b:b1:5a:c9:6e:ec:1e:3a:b5:87:c3:33:62:10:
f7:77:a5:33:72:a1:74:2b:15:d5:69:4c:e4:a7:19:a7:32:53:
9e:1e:e3:3f:2b:2f:14:70:7b:09:f9:52:28:64:01:26:ea:1d:
17:6b:f0:dd:27:7f:63:59:e0:a4:2c:ca:43:a6:93:bd:9e:ca:
e0:c9:86:27:5a:0b:b6:e5:8a:4a:2f:2c:fe:95:86:9b:d6:21:
d5:b5:9e:ea:6c:8d:d6:e1:a0:10:48:1c:83:a7:86:92:5b:dc:
b4:66:0c:e3:6b:05:97:44:fc:98:2a:59:ca:51:86:12:d2:62:
a9:77:a8:c2:18:30:9f:38:83:45:4b:62:91:4b:78:9f:74:bb:
77:7a:f3:3b:fb:c6:5d:95:95:b5:6e:d6:e9:48:a4:c5:c4:15:
13:f0:33:d2:f3:76:0f:b9:55:92:84:4c:be:df:73:d5:7f:11:
04:45:2b:ea:c8:cf:b9:24:a9:7e:6c:17:d7:03:a3:8a:6a:08:
73:25:eb:96:d4:b6:fb:83:19:ec:4a:41:a9:c6:22:bc:79:52:
f2:04:a7:d2:30:aa:3d:9d:95:c8:88:c5:49:91:96:62:13:9d:
02:b5:14:0c:21:52:53:b8:8c:5a:79:0b:0c:91:4b:2f:37:6d:
8e:a9:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:22 2024 by rpki-client on console-fra.rpki-client.org