Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB94E1EE74511EEB5EFA6B8775412E6.roa
File: 1CB94E1EE74511EEB5EFA6B8775412E6.roa (raw, json)
Hash identifier: HAQXjf71odLKv39EatN/XvltjxCl3U5GmZIziPijkUA=
Subject key identifier: 34:08:EA:B6:DF:A4:76:ED:7A:3E:18:6B:CD:8C:CC:1F:3E:C2:16:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB94E1EE74511EEB5EFA6B8775412E6.roa
Signing time: Thu 21 Mar 2024 05:37:32 +0000
ROA not before: Thu 21 Mar 2024 05:37:28 +0000
ROA not after: Tue 23 Apr 2024 05:37:28 +0000
asID: 44559
IP address blocks: 154.220.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41982 (0xa3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:37:28 2024 GMT
Not After : Apr 23 05:37:28 2024 GMT
Subject: CN=65fbc79b-a1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:12:4d:23:0a:df:f1:e6:11:e3:d6:df:a9:
6b:34:6e:7f:b1:30:f1:a4:e2:ef:f3:39:21:49:4c:
ef:69:68:6e:e3:6e:d3:49:c6:94:ca:8f:b3:78:2e:
58:9a:73:13:86:b1:e2:1f:1b:0d:5b:2d:2e:c8:97:
34:a8:48:26:d5:6f:98:e6:45:0e:04:c4:d0:dc:79:
c1:e2:3b:32:54:1c:f9:63:05:8a:7c:25:e0:2b:2a:
40:88:e2:ef:5c:c7:03:2b:a4:5a:85:df:7b:d6:81:
2c:33:9b:16:f6:da:03:f9:ce:47:fa:1c:55:05:37:
60:05:5e:4c:67:3b:46:96:48:63:2d:65:10:8b:52:
ee:a7:7c:d1:f8:4c:f2:cb:b6:ff:0b:a2:80:48:86:
89:cc:01:71:04:b0:f4:95:1c:50:57:81:55:ed:eb:
1f:45:e9:b0:00:af:d9:c2:06:a8:4d:7d:3d:cc:a4:
41:6b:84:83:ba:a9:ca:0c:e5:ad:05:5c:8d:97:77:
97:40:60:5b:e1:5a:db:28:e2:a5:38:d7:71:25:44:
de:57:a9:a0:ac:08:33:cb:3a:23:74:ea:cd:7d:21:
c4:33:b6:73:28:e2:f8:a9:39:c9:32:d0:0a:5a:d8:
f9:ee:53:3c:ab:ef:7e:77:b9:8b:42:32:13:93:06:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:08:EA:B6:DF:A4:76:ED:7A:3E:18:6B:CD:8C:CC:1F:3E:C2:16:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CB94E1EE74511EEB5EFA6B8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ad:e0:7c:aa:bb:46:cc:a9:e3:6a:0b:65:fc:9c:1f:36:7f:
40:a8:79:82:de:1d:82:f4:55:b3:cf:6c:76:a7:97:4a:4a:04:
92:cc:62:23:f5:d0:dc:de:cc:7f:60:d9:ce:67:69:cb:31:95:
c2:de:65:9f:f3:c1:d7:21:44:3b:db:2b:d4:cb:2a:17:42:7f:
c1:29:22:64:44:b6:01:df:b3:fa:34:92:96:04:43:eb:23:50:
36:97:3b:82:d2:28:a6:c9:0a:89:bc:cd:e6:e0:52:8c:69:6b:
3c:4d:cb:76:13:40:39:9c:78:0f:e7:a0:dc:43:36:bb:b1:1e:
49:3b:e1:8e:8c:97:61:fa:04:0c:21:da:ab:09:04:c4:9a:ec:
f5:89:b2:b3:93:bc:09:6a:07:7e:39:80:32:67:53:8e:ab:58:
62:4f:08:c6:1a:95:d2:09:50:cb:4e:16:cc:c0:d7:a9:5b:f4:
bb:03:94:6c:93:1f:57:8a:60:cc:67:f6:4c:a8:4a:66:64:26:
35:d5:5d:3e:93:ae:e6:d6:b1:bb:6e:65:c9:de:c2:8f:3a:09:
c6:b4:a4:65:75:b0:31:47:88:eb:60:06:48:b5:b3:3c:64:e6:
a6:54:ad:ad:ec:83:f9:67:c0:07:86:03:72:0b:00:a7:ab:63:
76:d5:57:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:14 2024 by rpki-client on console-fra.rpki-client.org