Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FCE590C50611EEB12DEDB4775412E6.roa
File: 21FCE590C50611EEB12DEDB4775412E6.roa (raw, json)
Hash identifier: GKo1DT5FmFqfmORflwvFoktdAlVCXUc9sc01x/kRpL8=
Subject key identifier: 7C:61:14:C7:E6:85:BA:E3:3B:7C:B4:A8:A3:F2:53:EF:C3:57:4E:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8641
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FCE590C50611EEB12DEDB4775412E6.roa
Signing time: Tue 06 Feb 2024 15:41:03 +0000
ROA not before: Tue 06 Feb 2024 15:40:59 +0000
ROA not after: Thu 13 Jun 2024 15:40:59 +0000
asID: 212238
IP address blocks: 154.202.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34369 (0x8641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 6 15:40:59 2024 GMT
Not After : Jun 13 15:40:59 2024 GMT
Subject: CN=65c2530e-636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:e9:16:af:4c:09:1d:b4:11:d0:61:c6:77:
84:92:32:02:c3:5d:d3:5e:30:a7:fd:f1:25:f5:1b:
cd:52:69:63:fe:b4:02:2a:a0:e6:a7:da:77:62:aa:
b1:e5:4b:c8:79:2a:c0:af:11:1a:3e:b8:3c:b9:6c:
77:24:b0:ab:64:33:a9:99:35:88:40:d7:97:b5:1c:
7e:0d:6e:b0:10:13:31:01:b5:e7:11:83:ce:6f:3c:
41:22:98:62:77:da:49:3b:3c:f5:a5:11:5b:ed:1c:
9a:94:c1:63:7c:fe:56:c7:19:be:11:95:0b:d9:d8:
4f:0c:ba:5d:3d:b3:ab:18:b4:d9:ad:ad:e3:49:a9:
b4:8f:49:4b:93:c7:fc:5c:4a:54:c3:d0:42:06:83:
cf:fd:d0:1f:f7:5d:4f:52:13:02:40:da:db:2c:0e:
af:76:2b:64:8a:43:8e:a0:12:ab:a8:f7:09:51:59:
6f:11:62:ba:b0:7b:46:9f:9a:82:b4:e5:bf:e5:c6:
07:91:97:ef:23:f6:ab:b7:72:a2:1f:bf:07:2a:fa:
9a:73:e3:b2:51:e4:da:2f:e3:57:5b:7c:80:ef:cf:
bc:2c:6d:99:00:39:9d:13:67:78:09:dd:2c:71:99:
a8:63:70:d5:7f:4b:0b:ba:d4:82:5d:90:c8:f7:fd:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:14:C7:E6:85:BA:E3:3B:7C:B4:A8:A3:F2:53:EF:C3:57:4E:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21FCE590C50611EEB12DEDB4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8f:c3:67:56:de:42:b9:5c:b5:b3:22:5a:57:44:a8:21:39:
20:24:bd:6f:33:12:78:e0:96:df:b0:15:4b:6f:83:4e:74:60:
5c:2d:50:52:13:44:8c:d8:5b:56:14:20:66:4f:5e:10:be:df:
37:ed:3d:4a:fc:62:00:40:c2:37:f0:f0:33:5e:c2:1a:15:73:
f8:2d:34:aa:cb:ec:b7:45:98:ed:fb:c6:dc:d3:43:68:7d:95:
6a:fb:a7:b7:86:54:bc:e9:29:e2:90:a7:44:c0:78:6a:be:b8:
33:4a:54:4f:59:b8:fb:3f:79:ca:1f:e1:82:63:65:c7:06:63:
74:6c:25:f4:f9:01:b9:97:15:a6:50:58:cd:5b:36:80:89:d8:
e9:57:32:ed:d0:bb:87:29:65:40:84:59:f1:c2:46:a8:fe:ea:
f4:17:c0:77:8c:d2:88:e5:6f:4f:3d:17:47:64:40:e2:3a:2e:
45:80:8d:f1:43:f3:43:0f:b8:10:a2:53:f5:9e:2a:56:f6:ba:
fc:b7:c7:04:0b:a0:4e:d7:df:41:28:71:de:64:82:65:e6:66:
3a:f7:f6:f0:4c:eb:f8:f0:ca:6e:31:f0:c5:b9:31:6d:fd:83:
0e:78:11:9d:03:36:f0:4b:f4:20:74:d5:f3:03:c1:53:4c:86:
5f:27:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 00:01:56 2024 by rpki-client on console-ams.rpki-client.org