Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09840C9CE73311EE9C6201AB775412E6.roa
File: 09840C9CE73311EE9C6201AB775412E6.roa (raw, json)
Hash identifier: l1szcaoWaltBlyLsoreDYuiAPgaqufnumunxzR6NXYk=
Subject key identifier: 65:9C:1B:AE:D8:BE:87:F0:B5:D5:96:38:09:60:39:ED:46:CF:3C:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A34A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09840C9CE73311EE9C6201AB775412E6.roa
Signing time: Thu 21 Mar 2024 03:28:08 +0000
ROA not before: Thu 21 Mar 2024 03:28:05 +0000
ROA not after: Tue 23 Apr 2024 03:28:05 +0000
asID: 44559
IP address blocks: 154.207.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41802 (0xa34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:28:05 2024 GMT
Not After : Apr 23 03:28:05 2024 GMT
Subject: CN=65fba948-51ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:13:42:18:90:4a:17:35:4c:59:b2:88:aa:
3b:77:39:dd:28:f6:00:4a:1b:70:14:95:62:97:c6:
c4:fe:2c:25:ef:af:fd:6d:9d:e1:e9:66:e5:7d:2d:
33:40:4b:d7:48:d5:98:e6:2b:41:08:76:ea:27:a5:
43:90:7e:06:3f:d3:55:02:21:46:59:6e:02:ad:c5:
ab:7f:d4:f9:2e:c3:b4:f6:53:f5:7f:3d:d9:01:5b:
5f:2f:2e:b5:e8:60:e8:a1:f0:f0:b1:4e:72:62:09:
ed:f0:d6:15:18:e4:94:4f:4e:6d:0f:db:3a:f9:fe:
2f:59:e4:19:d8:8b:64:2d:b5:6d:e9:5f:e4:fa:6b:
fd:98:11:cb:93:47:14:99:26:ea:f3:7a:ca:29:ac:
d0:83:53:ff:82:08:a0:a5:72:ab:25:ed:6e:e2:3f:
89:87:4c:60:bd:12:48:7b:09:c7:f7:c0:4c:c2:ee:
31:41:0b:c8:73:e4:d6:39:15:fb:5c:34:32:0b:ca:
cc:b1:bd:ee:1c:2c:a3:66:18:e1:30:90:b5:22:c2:
cb:d5:b6:13:fa:7a:2b:b2:df:d9:12:eb:5a:94:f2:
64:6f:52:5d:0a:d4:87:c7:f5:26:6f:bd:7c:b0:4f:
95:91:95:ee:dc:99:88:63:4b:a9:72:bc:0a:7b:17:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9C:1B:AE:D8:BE:87:F0:B5:D5:96:38:09:60:39:ED:46:CF:3C:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09840C9CE73311EE9C6201AB775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:49:36:3a:1d:7c:26:77:4b:13:4d:21:29:0f:94:f4:81:aa:
57:29:4f:77:cb:48:0b:55:c5:28:25:e5:9c:7a:a1:a1:05:c4:
42:a4:af:31:72:e9:15:15:0d:84:13:5d:74:d1:5d:09:14:ad:
5a:94:1d:40:42:cf:f6:1e:7e:d1:7b:65:95:47:47:40:91:ef:
5f:52:99:6f:f8:70:26:a6:ac:ec:29:aa:cb:65:57:3b:f0:d2:
07:48:cf:1a:25:36:41:23:b3:0b:40:c9:0a:7e:ec:e9:6e:37:
3d:f2:95:2a:25:0b:97:a1:13:84:a4:d0:df:e5:02:08:5a:6f:
42:90:ae:5a:47:f0:90:38:39:df:c1:a1:7a:e4:4b:1e:1e:82:
3d:5d:11:69:f4:9a:74:32:b4:34:51:53:2b:cb:16:a5:81:74:
a1:a2:f7:b7:0e:6c:89:ee:fe:e4:47:23:76:84:de:59:fd:81:
3e:33:a2:fa:df:23:fe:1e:cf:c0:11:1e:d4:c4:ba:71:bd:2f:
76:7c:8e:1b:f3:ce:be:7f:30:95:33:b1:f1:57:06:2e:3c:c3:
96:cb:80:9a:97:6f:8f:41:70:18:19:3c:10:38:62:79:3b:6e:
4f:c2:ac:ee:23:7e:81:81:82:6f:8c:5a:ce:70:6d:50:b5:8e:
73:4e:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:13 2024 by rpki-client on console-ams.rpki-client.org