Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/134193BAE74411EEB30EBEB0775412E6.roa
File: 134193BAE74411EEB30EBEB0775412E6.roa (raw, json)
Hash identifier: Rbq4pV2TDn9tpLutmlOxbWK9oOD0FK0PViqklft5ni0=
Subject key identifier: DA:B6:26:9B:A1:5C:BE:72:5E:DB:B5:33:96:FC:36:C1:B5:73:E7:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/134193BAE74411EEB30EBEB0775412E6.roa
Signing time: Thu 21 Mar 2024 05:30:06 +0000
ROA not before: Thu 21 Mar 2024 05:30:03 +0000
ROA not after: Tue 23 Apr 2024 05:30:03 +0000
asID: 44559
IP address blocks: 154.220.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41972 (0xa3f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:30:03 2024 GMT
Not After : Apr 23 05:30:03 2024 GMT
Subject: CN=65fbc5de-8032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:a6:35:c7:9a:56:e5:4d:7e:b5:b1:91:be:
f2:f7:a9:f7:32:6c:19:25:4b:54:4e:6f:ec:81:88:
15:b5:f3:a9:b9:37:3d:1b:d9:51:8a:59:63:d4:aa:
31:f2:98:90:1a:a3:07:3a:0b:a9:fc:5d:18:76:45:
25:e1:57:be:45:fe:ba:d9:c3:65:3b:9a:07:09:ff:
71:f7:9b:38:b9:ec:ad:7c:96:ef:47:14:ea:c7:1f:
4b:59:e9:35:76:f0:31:73:e7:99:bf:7a:25:d2:8c:
48:e0:0d:ef:7c:df:ad:4d:91:2b:55:70:3e:1f:fe:
b8:f6:b7:fa:eb:c3:29:4c:74:e2:f8:f7:61:c1:c3:
8c:2e:9d:fc:8a:79:b0:7a:43:3c:75:ec:22:32:65:
4a:ec:73:f7:0b:62:5d:9e:5d:95:8b:a0:fd:ef:d7:
4d:c8:61:ad:9a:d7:60:08:2d:3b:7e:29:3f:25:da:
5a:13:a2:7e:4a:ee:cb:7a:4b:dc:c7:88:d4:eb:9d:
3f:7a:c5:fb:20:95:b0:2b:36:7f:59:11:89:bf:c7:
3a:7a:4b:92:13:c3:4e:ce:3c:5c:db:1b:ad:50:b2:
91:1d:0b:a8:68:f6:91:99:12:0e:a4:22:fe:2b:7d:
70:e4:c0:9f:e6:bf:f9:bb:79:e7:43:6f:ad:1e:b5:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:26:9B:A1:5C:BE:72:5E:DB:B5:33:96:FC:36:C1:B5:73:E7:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/134193BAE74411EEB30EBEB0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.191.0/24
Signature Algorithm: sha256WithRSAEncryption
62:77:df:a8:da:57:80:68:f6:63:6e:c4:19:67:9e:89:bb:dd:
56:64:d7:bd:4c:d0:d6:fb:d5:36:6e:99:00:e0:20:9f:02:2f:
39:1a:14:8f:79:ef:d6:d3:4a:a5:3f:e0:e2:4a:d3:34:e2:4e:
26:25:a8:d6:c4:81:e2:d9:27:32:26:5d:a1:2f:a3:30:ab:92:
1b:95:ba:7c:d0:d4:71:ad:e0:4d:4e:12:b3:ca:ef:bf:dd:d0:
e3:5b:cc:e0:7d:bc:fe:96:5d:8b:a1:c1:ac:09:b5:87:a8:aa:
3a:d8:15:11:94:2e:f8:a8:aa:3a:37:67:16:f8:00:a2:ab:3e:
7c:c2:10:82:b1:13:06:50:f4:a0:4a:37:76:47:29:ff:ef:22:
c4:87:2e:63:a1:a0:f7:fb:d7:5f:26:a9:a4:07:38:a2:a7:5a:
6f:1f:af:e8:5c:af:dc:4f:d1:2f:9c:af:e2:1d:98:7b:54:a9:
46:23:49:05:c1:7b:04:e0:90:e5:9e:bf:a2:71:66:27:dc:41:
aa:52:56:26:25:35:c9:66:4d:a1:e9:c8:25:c3:3a:a7:c8:21:
47:60:d8:43:07:df:0f:dc:76:7b:b6:cd:d5:95:99:f8:d8:f5:
4f:b8:40:75:61:23:ee:41:cc:b9:81:c8:e6:12:76:94:da:ff:
b4:7e:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org