Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C0FA888E75D11EEA3945974775412E6.roa
File: 1C0FA888E75D11EEA3945974775412E6.roa (raw, json)
Hash identifier: 93TFqdg2gY4ZAqWGyzc9ogohQULmRoQFOF7FQLQtzes=
Subject key identifier: C3:EC:BD:61:60:35:5D:4F:F7:B2:C2:C1:2A:91:5A:6E:E2:8B:4D:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C0FA888E75D11EEA3945974775412E6.roa
Signing time: Thu 21 Mar 2024 08:29:18 +0000
ROA not before: Thu 21 Mar 2024 08:29:15 +0000
ROA not after: Tue 23 Apr 2024 08:29:15 +0000
asID: 44559
IP address blocks: 154.211.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42213 (0xa4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:29:15 2024 GMT
Not After : Apr 23 08:29:15 2024 GMT
Subject: CN=65fbefde-0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:54:73:54:d0:50:17:d5:aa:2f:b3:4a:19:
0d:c5:bc:02:98:48:38:57:24:36:68:c3:23:3b:e7:
a8:9f:68:1f:09:d2:3b:8d:47:f5:83:0d:85:ef:39:
84:04:c1:c4:7f:cd:d1:e4:dc:e1:f3:4e:b5:89:10:
3a:29:f1:cc:75:1a:2c:72:1d:9d:40:3a:f5:d3:19:
2d:72:72:98:49:29:91:56:fd:18:1f:bd:d7:49:fc:
ff:0e:2b:f1:44:6e:ba:a5:c9:42:b2:a2:25:bc:24:
01:78:f7:a7:4f:b2:6b:c0:d9:3d:03:19:97:19:45:
e4:cd:36:35:f6:e3:90:f4:b8:9d:04:70:a9:35:30:
d9:30:ba:73:fa:cc:57:14:58:61:9d:81:9f:b9:db:
ac:59:fa:d1:80:0e:01:9b:47:ef:81:1e:f2:5c:e9:
ed:25:b1:53:9f:75:da:17:0a:bb:44:ed:46:b6:2b:
f3:72:73:17:b7:4f:6b:21:2b:a7:ef:7e:19:52:77:
b2:8f:2c:ee:6d:a5:9e:f3:63:6d:8f:10:6a:c6:ba:
72:3a:1e:60:e8:91:b8:b3:60:dd:5a:28:02:57:61:
d5:64:0c:be:28:30:aa:2e:d9:19:3d:ec:25:e9:cd:
cb:38:60:81:a9:e5:47:9f:46:1e:e6:a1:b7:6c:18:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:BD:61:60:35:5D:4F:F7:B2:C2:C1:2A:91:5A:6E:E2:8B:4D:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C0FA888E75D11EEA3945974775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.38.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b7:38:b3:ab:d5:99:bc:f1:b3:da:30:1a:e6:d7:db:ce:36:
81:dc:75:be:1f:a0:93:f7:23:fd:bc:52:4f:d4:0b:54:1e:71:
34:b4:57:9f:fa:25:22:60:6a:2f:79:19:bf:19:55:41:3e:16:
89:9c:bb:d8:d6:ac:1e:4b:b9:3e:96:aa:ec:06:35:2b:36:22:
b8:ec:70:05:82:26:98:71:8a:df:80:29:0c:80:12:c1:c5:ed:
5d:a1:5c:ef:13:cc:c9:1d:09:47:52:84:0f:44:5e:55:fd:3f:
24:c5:96:f4:01:76:39:4d:4d:62:ca:af:b2:3f:c6:20:94:c3:
57:5f:38:27:aa:cf:7c:49:84:3b:21:be:a9:10:9f:3c:98:ac:
bf:5c:a0:af:97:b9:64:9a:85:fe:1a:31:27:02:ee:93:cf:85:
92:cc:ac:8c:f4:ec:27:53:2b:4a:1b:5b:c2:69:52:a4:f1:f1:
c3:d5:3e:12:5e:55:34:c9:00:00:bc:cf:c8:68:4d:47:75:74:
23:cf:22:fd:38:d2:a9:b1:bc:f0:8a:50:4c:ba:bf:6d:1d:1c:
37:4d:8b:32:62:f4:b4:61:08:15:97:f4:00:ca:be:6e:37:dd:
77:a5:29:67:22:8b:02:43:ad:e5:89:e6:6c:1a:74:ed:5b:af:
c5:33:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:13 2024 by rpki-client on console-fra.rpki-client.org