Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/190A7678E50911EE9BF021C2775412E6.roa
File: 190A7678E50911EE9BF021C2775412E6.roa (raw, json)
Hash identifier: jBaPpTMZZpoaItW7YCN88LAsgW+WLYuU6s6uq9P7IIA=
Subject key identifier: DC:CF:2F:26:52:79:EB:51:2E:25:11:AE:23:B0:40:CB:81:6F:AA:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A2DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/190A7678E50911EE9BF021C2775412E6.roa
Signing time: Mon 18 Mar 2024 09:22:53 +0000
ROA not before: Mon 18 Mar 2024 09:22:50 +0000
ROA not after: Sat 20 Apr 2024 09:22:50 +0000
asID: 39600
IP address blocks: 154.202.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 09:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41695 (0xa2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 09:22:50 2024 GMT
Not After : Apr 20 09:22:50 2024 GMT
Subject: CN=65f807ed-51fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:69:ea:38:aa:59:e1:e6:b2:3c:d7:a9:ba:
df:50:82:c4:b8:09:cc:42:84:63:92:d2:9a:5f:b2:
a6:fd:0e:b4:a4:71:c5:73:da:b0:a6:af:21:2d:f5:
40:5e:9d:07:7c:f3:fb:22:de:30:a0:b1:60:c9:3c:
ed:fd:e2:fd:93:21:af:63:5f:14:4b:13:6d:bc:c8:
6d:86:22:0e:4d:2c:d6:1d:64:80:24:32:00:da:52:
40:fa:05:14:1a:28:f7:8b:d2:a3:ae:2d:5e:40:f7:
d3:96:ca:f4:b9:66:47:44:16:c4:09:21:19:0c:8a:
b0:43:80:43:c1:b6:88:19:91:c7:3e:3f:bb:2f:0e:
32:01:b9:81:0d:75:69:67:ad:8d:0a:1f:11:cd:69:
8d:8c:6d:2b:dd:61:6c:18:67:a3:a7:a6:6e:42:e7:
47:0b:c7:a2:b0:fd:16:c1:cb:54:54:18:31:ed:86:
cf:5e:a9:d2:06:2e:46:38:07:a4:de:0b:c1:50:f0:
e3:7f:aa:07:f1:77:a3:ff:5d:c2:d0:01:66:54:2c:
59:94:45:38:03:f1:5c:f6:96:47:dd:18:8b:e9:84:
e9:eb:47:e6:6d:a5:90:49:e3:f3:32:d2:2d:3e:91:
ba:18:38:4d:3a:c7:e4:7e:83:c8:f6:da:84:c2:5f:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CF:2F:26:52:79:EB:51:2E:25:11:AE:23:B0:40:CB:81:6F:AA:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/190A7678E50911EE9BF021C2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.16.0/21
Signature Algorithm: sha256WithRSAEncryption
59:f3:78:53:5d:e8:ec:0d:31:90:af:5f:8b:ef:84:84:a2:b9:
1f:75:f6:37:ee:55:9e:c3:51:70:5a:fa:f5:b8:fe:7e:ff:8d:
38:f5:3d:86:89:0b:7f:7f:be:5d:e6:ab:66:06:9f:37:96:ec:
d6:20:44:58:74:8b:d7:af:fc:68:84:d7:f4:5c:1c:af:5f:ab:
13:ef:11:91:7f:50:49:8d:a0:e9:93:0c:f6:3e:a6:ec:3e:f1:
e9:f1:60:fc:7e:44:1a:ff:a0:20:9a:82:e4:e9:7e:42:61:a3:
03:41:a1:14:cb:41:f5:a2:e7:fc:dc:c5:b5:c8:a8:c1:f3:93:
28:ee:6d:1d:52:a1:dd:75:52:31:db:e5:e7:9c:f4:de:65:55:
10:36:ed:34:54:bd:cc:6f:95:4f:cb:63:c9:0b:59:12:c9:28:
c1:7e:f5:8f:64:66:dd:dd:fd:82:5b:c0:77:57:96:c0:a5:56:
46:c9:d6:db:22:42:a7:32:85:8f:f0:c5:28:56:f3:16:71:3d:
d7:90:d9:73:a0:20:69:72:4b:c3:38:bb:08:b4:19:9d:8c:80:
19:63:ec:5b:7a:e7:57:b6:2a:07:3f:9f:65:49:20:02:33:2e:
40:68:5a:e8:0c:a9:ea:85:20:13:3c:7c:41:71:a8:73:57:40:
e7:dc:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:16 2024 by rpki-client on console-fra.rpki-client.org