Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDDA04499A811EE8256F726D25BE465.roa
File: 0BDDA04499A811EE8256F726D25BE465.roa (raw, json)
Hash identifier: jkPvisEEHtACuN0HL980FwEMy3mfWdpXvxI7I0UtnYU=
Subject key identifier: 23:C4:03:65:F6:C9:90:59:55:B8:23:B9:CD:E2:0C:CC:83:4C:83:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 6113
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDDA04499A811EE8256F726D25BE465.roa
Signing time: Wed 13 Dec 2023 11:09:13 +0000
ROA not before: Wed 13 Dec 2023 11:09:09 +0000
ROA not after: Mon 16 Dec 2024 11:09:09 +0000
asID: 40065
IP address blocks: 154.197.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24851 (0x6113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 13 11:09:09 2023 GMT
Not After : Dec 16 11:09:09 2024 GMT
Subject: CN=657990d9-24f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:31:a6:3e:bf:01:58:ef:cf:65:ea:9f:87:
f9:8c:40:3c:d2:85:69:1c:7a:62:46:ad:c6:a9:40:
2e:8c:b0:3a:5e:fc:1f:49:8f:3b:b8:e9:99:36:e7:
d1:0e:04:e2:b1:d0:30:9b:18:ea:a3:f0:ed:28:8d:
1c:57:a3:fd:78:c2:be:8a:fc:c9:c2:bd:bd:38:88:
55:d8:84:dc:69:f2:4f:50:a9:68:95:58:8c:0e:f9:
4c:7c:82:ee:4f:90:a4:a1:e4:0c:e5:f4:07:f6:32:
d6:3a:84:28:a6:84:5d:73:60:67:cf:aa:5c:0f:d0:
b3:f7:02:df:b4:fb:e6:a5:ec:51:95:da:41:86:62:
0f:ab:36:c4:42:51:c7:e8:c1:32:d5:9f:41:77:84:
a5:5c:ef:20:2b:e5:01:30:8b:34:2b:c0:56:e8:fd:
93:9d:21:36:8f:ed:4d:6a:c9:57:93:a1:f6:1c:aa:
9b:7b:1d:34:bb:e0:35:fc:52:3c:ff:ac:0c:a8:7f:
76:b0:ff:03:77:c7:a0:db:b3:47:65:14:99:8e:ae:
70:d1:34:24:61:5b:e8:06:ba:ec:54:f5:1e:1a:72:
e8:41:df:8e:16:52:c9:fb:04:bc:8e:27:f8:c6:24:
e0:21:2a:6c:95:25:54:8b:09:83:a3:55:5c:61:2b:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:03:65:F6:C9:90:59:55:B8:23:B9:CD:E2:0C:CC:83:4C:83:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BDDA04499A811EE8256F726D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.92.0/24
Signature Algorithm: sha256WithRSAEncryption
46:22:c8:16:eb:57:7f:04:d3:69:83:71:1e:a8:78:46:d7:f2:
5e:35:bf:80:7f:38:36:a6:4b:4d:84:a9:88:73:d9:0b:70:7c:
38:89:cd:2e:f1:25:46:7c:64:69:88:76:78:b3:b7:f2:52:0c:
90:c8:b7:d0:d4:43:a2:0d:de:37:0f:63:7d:af:38:f0:90:ad:
10:b2:ea:67:71:ae:55:0e:e0:61:8d:2b:ef:48:57:01:98:1d:
9c:29:7a:87:17:8e:68:cc:06:5d:e4:7c:54:c3:9c:39:13:70:
f5:b2:fa:43:3a:98:86:e9:bc:c2:87:e4:ee:af:8d:66:61:05:
b9:32:2a:7c:03:ab:7f:84:7e:eb:4c:76:e5:e9:71:a7:7c:d3:
37:17:6c:ed:63:ad:bc:4f:de:2c:ca:59:3a:fa:b9:5c:d9:85:
e7:4d:e9:1c:10:c7:a9:be:fa:7e:f7:fc:8a:d0:93:92:84:93:
65:2f:f9:0d:03:2e:46:8b:0c:88:de:d1:e8:9f:01:47:dc:3a:
f5:f6:e6:0b:c2:f4:d1:51:31:26:f9:f9:17:af:ad:fc:aa:4e:
f4:fb:1c:58:3c:63:ab:2a:7e:d6:a5:66:7b:9e:95:56:29:37:
a8:3a:3b:88:56:c8:0f:30:21:b8:60:d9:63:bf:0f:cb:59:b9:
f9:33:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org