Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C43594CCC111EE892C8D8B775412E6.roa
File: F7C43594CCC111EE892C8D8B775412E6.roa (raw, json)
Hash identifier: varA1zXbCTr7HRO/kppHuRcZxx6GGrn96NWvMvaoZNI=
Subject key identifier: DC:81:B4:06:5A:66:37:A0:F4:72:7D:09:05:19:0E:72:3B:87:0C:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8B13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C43594CCC111EE892C8D8B775412E6.roa
Signing time: Fri 16 Feb 2024 11:53:15 +0000
ROA not before: Fri 16 Feb 2024 11:53:12 +0000
ROA not after: Fri 26 Apr 2024 11:53:12 +0000
asID: 9009
IP address blocks: 154.216.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:53:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35603 (0x8b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 11:53:12 2024 GMT
Not After : Apr 26 11:53:12 2024 GMT
Subject: CN=65cf4cab-5143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:4f:5f:d7:f4:4a:6e:98:ed:98:86:03:4c:
a0:73:56:b2:99:2c:9f:b5:c2:67:db:3f:a4:92:eb:
c3:d7:1d:ac:bb:47:07:21:28:77:4c:87:01:5e:33:
65:17:6d:81:9c:c9:58:8c:01:4c:cb:73:b0:aa:3b:
02:37:d5:65:65:79:a5:fa:53:b5:27:a3:73:b3:41:
92:df:e6:b2:af:7a:93:b7:41:ff:64:66:85:7e:a0:
93:2d:9d:b7:66:ef:72:f6:66:73:14:49:d2:4b:48:
d3:f9:d3:e0:35:12:60:8e:12:e4:73:ff:29:32:db:
6b:64:a5:f5:11:be:cf:b8:63:af:ba:43:2d:fc:35:
8f:4a:d6:b0:9e:a0:22:76:01:1f:64:67:e7:99:fd:
fc:96:bf:73:a7:cd:f9:8a:af:e1:ba:0a:14:e3:65:
a0:62:f8:5b:63:00:a8:e0:c6:d7:b5:c0:89:9a:d9:
86:cd:99:dd:64:88:b2:ff:ac:2d:04:97:39:b6:e7:
e6:a6:c8:d2:be:e6:be:59:3d:02:b6:33:1a:18:55:
f2:15:58:98:d6:bf:1a:a7:1e:c7:90:c8:fa:c4:38:
e1:61:2b:0e:d2:3f:a7:10:65:90:74:28:77:38:7b:
59:7a:a7:3f:f5:2a:37:6b:a3:eb:88:ce:88:c2:54:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:81:B4:06:5A:66:37:A0:F4:72:7D:09:05:19:0E:72:3B:87:0C:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C43594CCC111EE892C8D8B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.249.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e2:bb:3c:e6:2d:8d:a8:ff:5b:be:89:8c:47:9c:1d:9f:1a:
64:e5:6a:c7:29:70:63:a9:05:c2:f6:73:e6:21:0a:99:93:6e:
c4:60:fd:ba:71:30:ab:b3:2c:0a:ce:af:be:60:bf:6e:7f:b7:
e5:0d:32:6b:65:1e:ad:3a:d8:01:e4:cd:cc:0d:48:1e:2b:1a:
f4:e2:e7:36:69:5d:f1:86:5c:e9:a4:d3:a9:c2:93:95:56:1c:
2d:69:24:63:07:73:c8:6d:a0:fd:21:5b:0b:ab:7e:46:06:55:
f2:5c:1b:46:42:67:08:4e:1d:e8:b1:ab:f7:44:cd:61:95:e7:
27:8c:95:12:40:ca:d1:2b:af:82:76:11:f8:c9:1f:6b:7a:80:
3e:c9:80:18:bf:68:16:53:92:89:bb:c6:d3:d1:bd:1a:8a:11:
ec:6b:a1:12:f8:b8:4c:d4:1a:eb:2b:85:ea:93:49:59:d0:78:
a3:f8:ef:a2:cc:0c:8d:c4:27:28:dc:12:6a:8d:54:59:9c:b7:
b1:d4:91:aa:27:56:0a:db:b7:08:ab:1f:d7:e4:4f:30:d9:f1:
ea:77:c0:16:23:94:e0:46:f4:3b:3e:71:91:00:da:f5:71:8a:
b6:bc:cb:47:b9:7f:1d:34:1b:10:a2:b4:b1:0b:e4:ea:a3:8e:
30:2c:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:41 2024 by rpki-client on console-fra.rpki-client.org