Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E99B981C038111EFB22FABFE007001B1.roa
File: E99B981C038111EFB22FABFE007001B1.roa (raw, json)
Hash identifier: /bMjwwxdKO++FvY/lxPHarDxJDfvibrIJeo+rw2328w=
Subject key identifier: 34:F4:AB:FC:7E:E8:23:53:BA:2B:BD:2D:2C:4B:6D:E5:84:E3:39:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B156
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E99B981C038111EFB22FABFE007001B1.roa
Signing time: Fri 26 Apr 2024 04:03:18 +0000
ROA not before: Fri 26 Apr 2024 04:03:14 +0000
ROA not after: Tue 03 Sep 2024 04:03:14 +0000
asID: 131685
IP address blocks: 154.210.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 02 Jun 2024 00:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45398 (0xb156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:03:14 2024 GMT
Not After : Sep 3 04:03:14 2024 GMT
Subject: CN=662b2786-0034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:53:2a:cf:e7:58:8a:06:06:21:5e:6b:e2:
a0:70:44:45:a9:07:9f:55:f7:86:0f:89:ff:45:6c:
35:db:17:fe:fa:13:77:a8:58:77:bb:69:ee:ba:62:
53:77:a0:e1:75:b8:85:e1:cc:30:f0:99:24:e3:3b:
b6:46:76:2d:48:50:3f:7a:c3:71:fb:d8:cf:76:1f:
94:70:21:b1:38:81:d7:48:41:7a:0f:90:ca:29:c7:
85:45:b4:f0:7c:8e:9a:cc:b0:65:7a:59:5d:2b:93:
fa:f8:c0:28:b1:6e:c7:a3:30:cf:69:5b:a9:8e:49:
b1:11:f0:db:28:63:ce:c9:f0:9a:e0:1a:18:4e:64:
b6:2c:5a:c2:86:57:a5:55:81:0a:16:12:79:c8:fd:
7e:52:62:0d:57:77:f5:71:ee:ef:bf:1f:5d:4d:0f:
ff:d1:fa:f2:e5:29:2b:5b:07:ab:d8:19:bc:48:81:
ef:15:c5:c1:70:33:d7:81:54:b3:da:c4:d5:82:25:
5b:38:f5:df:eb:7c:7a:ad:38:cc:2c:de:08:1d:20:
50:59:a8:1b:fe:b2:14:b9:53:7d:b1:2d:19:5c:16:
fe:3b:b5:a2:87:86:91:1f:bc:b3:6c:65:ff:a7:9c:
d7:96:fc:34:24:ed:f8:c7:d0:c5:1e:6b:c5:77:1c:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:AB:FC:7E:E8:23:53:BA:2B:BD:2D:2C:4B:6D:E5:84:E3:39:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E99B981C038111EFB22FABFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:98:4b:38:c5:8e:af:6d:03:1d:cf:34:72:b3:86:83:04:c5:
65:78:2b:b3:f8:b4:c4:6a:4d:49:4d:80:89:33:c8:fb:e1:57:
91:ae:15:e8:99:45:40:39:77:7f:53:f3:fb:a7:98:fb:91:52:
16:87:54:77:6b:95:a0:00:ff:c9:46:7b:28:df:c3:0e:b6:c8:
ba:61:b1:46:66:e4:6c:26:b5:13:65:36:6e:0c:84:1e:af:a5:
fb:e8:ae:2a:c0:87:a9:d0:01:65:5a:04:b7:51:71:40:67:10:
4f:fb:e9:f2:b0:0f:f9:37:c3:b3:58:64:f4:b3:bb:23:e6:e8:
af:f9:4c:0a:9e:b9:a8:19:9d:64:6e:83:83:5e:06:47:38:5b:
14:e7:cc:3b:4b:08:19:89:98:8d:c9:23:87:d5:ff:2d:50:a4:
33:2a:da:ac:5c:15:94:d7:35:9c:04:91:8f:1b:8f:b9:62:a7:
0a:3b:43:9e:3b:ca:6f:1a:f4:82:f7:0c:c6:2d:ad:61:4d:af:
09:fd:80:c4:91:0c:c8:b6:b9:02:49:dd:8c:ab:b5:15:fa:f6:
f1:f4:1c:2d:cf:79:99:3e:c5:9a:17:ff:93:06:81:20:2c:1f:
c2:7b:fd:ab:e7:6b:78:6f:f9:49:60:06:b1:df:9c:55:f6:72:
18:1a:a3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:05:09 2024 by rpki-client on console-fra.rpki-client.org