Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03CB8F64FAF211EEAEF55831017001B1.roa
File: 03CB8F64FAF211EEAEF55831017001B1.roa (raw, json)
Hash identifier: 1/I7oT2eYWkgyH4RxxhRw1uzPVwT91P3rK5g09RQwiw=
Subject key identifier: AD:86:68:F5:F4:DC:59:35:99:34:2A:71:12:CF:D5:19:9E:28:B5:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03CB8F64FAF211EEAEF55831017001B1.roa
Signing time: Mon 15 Apr 2024 06:33:05 +0000
ROA not before: Mon 15 Apr 2024 06:33:01 +0000
ROA not after: Thu 30 May 2024 06:33:01 +0000
asID: 63139
IP address blocks: 154.94.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44248 (0xacd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:33:01 2024 GMT
Not After : May 30 06:33:01 2024 GMT
Subject: CN=661cca21-1c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:a3:5a:47:eb:4b:4a:90:d1:db:1c:56:a7:
ed:37:3f:8d:bb:89:59:bc:c6:c5:59:6f:b8:92:a3:
25:bc:b1:50:e7:dc:9d:cc:28:f2:56:31:2e:71:ad:
2b:1e:a4:f8:12:5a:55:bb:37:54:1c:75:9a:54:8c:
30:92:69:78:83:15:5b:e4:9f:fd:98:22:a2:7f:00:
07:f5:0c:6f:a5:92:66:40:c1:72:cf:31:ee:67:28:
1d:49:9b:cd:fa:23:fe:ca:de:ee:39:05:e4:48:08:
b1:fd:c9:96:4e:52:86:e4:d4:e4:c6:da:a6:09:b1:
71:b1:70:6c:43:65:1f:e1:28:bc:25:18:c6:b1:60:
1b:c2:00:f9:0a:9f:72:f7:06:d2:5c:bc:bd:9e:87:
84:88:c6:9b:25:63:3b:2b:c3:7d:d0:60:3b:95:20:
87:f7:e3:a9:ed:e4:29:18:6a:b9:fb:95:d6:12:2f:
c6:f0:2c:47:b8:18:37:0c:53:a7:d6:6b:73:5b:90:
91:2a:43:52:2b:92:04:d4:cb:3b:12:44:16:e2:66:
da:26:ad:67:88:d1:ed:48:56:6b:7e:4c:c8:54:6e:
85:f6:37:0e:e9:04:48:27:8c:49:c2:84:6b:6d:b9:
d8:25:ff:c7:3e:f8:c8:c3:32:81:c9:27:eb:77:c8:
07:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:86:68:F5:F4:DC:59:35:99:34:2A:71:12:CF:D5:19:9E:28:B5:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03CB8F64FAF211EEAEF55831017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.77.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ff:00:60:ca:e2:62:de:e6:7f:0e:98:0b:22:51:cb:23:2c:
dd:b9:31:7f:6a:2d:7c:39:45:c2:4b:4f:46:28:0a:48:f3:a2:
fd:7b:fa:e8:c1:c2:51:bc:a5:8f:81:25:f4:5e:af:74:6f:f3:
ba:ce:1f:33:07:12:ed:d8:1e:ed:1b:8b:f2:2d:d8:ed:8e:f7:
60:c3:b0:62:72:30:9e:12:a1:dc:48:1a:9a:6f:3b:3c:2e:53:
eb:64:35:0a:be:37:9c:80:be:29:d8:7b:fe:11:38:4c:fc:4d:
c5:f7:b6:3a:ce:6d:5f:74:f3:3b:42:5e:6c:f0:e8:ea:b8:29:
3d:6f:36:bc:64:35:cb:aa:f9:f0:61:2c:92:be:bb:15:55:5d:
dc:28:a8:fe:cf:74:84:db:23:76:f6:c0:0f:a0:4d:b1:ef:fb:
e4:a2:7b:28:4a:d9:56:94:54:d0:27:20:79:6c:3d:31:5f:4e:
bf:24:bb:4e:a2:bf:4d:44:aa:57:60:66:6f:78:ff:a5:8b:aa:
d4:3c:86:d0:f1:3e:07:42:70:b0:5e:7a:cd:10:a2:2f:0a:57:
d1:17:d8:c7:fa:1d:8a:b7:f8:6d:d0:a6:b6:6c:41:4b:5a:27:
f5:de:69:8d:08:cc:8c:3a:d5:64:fb:c5:1a:cc:34:f8:4a:68:
61:f6:3d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:01 2024 by rpki-client on console-ams.rpki-client.org