Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292264EE014C11EF8DFF8EF8007001B1.roa
File: 292264EE014C11EF8DFF8EF8007001B1.roa (raw, json)
Hash identifier: t6pnNW1j5d2bjh8sXYOoMGAam2yTwJpZ5vv4uUbfCSw=
Subject key identifier: 97:D9:08:40:E9:98:68:08:F6:42:24:02:23:69:3A:75:42:69:59:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292264EE014C11EF8DFF8EF8007001B1.roa
Signing time: Tue 23 Apr 2024 08:33:29 +0000
ROA not before: Tue 23 Apr 2024 08:33:26 +0000
ROA not after: Sat 11 May 2024 08:33:26 +0000
asID: 9009
IP address blocks: 154.95.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44821 (0xaf15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:33:26 2024 GMT
Not After : May 11 08:33:26 2024 GMT
Subject: CN=66277259-b60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8a:1f:fe:82:a9:e4:3f:02:c0:02:cb:19:88:
c3:08:1e:93:a4:3a:8d:bb:3e:83:9b:eb:40:88:e6:
a1:10:b3:d8:3a:51:79:06:e3:be:d2:06:70:72:e6:
dd:f5:7f:ba:3f:ed:71:76:da:e0:5e:8f:b3:f2:ea:
b1:f9:d8:e3:ea:25:da:ee:fd:86:b0:2b:18:cb:5d:
f4:7c:b3:ee:ba:09:a2:18:24:bf:ac:13:5e:93:ef:
a2:a3:7f:44:77:2d:0d:17:e5:13:ae:c8:96:f7:52:
f8:8b:77:d5:4f:67:54:42:16:87:c8:f8:34:41:58:
c5:2c:57:6c:58:4b:76:00:db:34:ae:11:e9:35:01:
76:e6:87:2f:9b:8e:f2:65:5f:c4:0e:8f:95:fb:ab:
db:0b:96:f9:0a:57:da:f7:64:86:ef:cb:b5:18:e1:
a1:f5:1a:52:36:5f:8a:e7:c6:a4:9c:8e:98:10:05:
4e:ea:f9:af:ea:5e:eb:ff:92:8a:d2:34:32:5a:bf:
63:01:a4:53:ae:43:d6:10:c2:c0:26:ac:44:ac:14:
3b:aa:27:ce:e2:ae:24:43:b8:fd:7a:83:aa:21:7a:
91:5d:65:f2:cb:0e:74:9d:b4:c9:c9:d7:80:8a:d9:
e9:81:4c:fe:d8:1c:eb:2c:90:ad:d1:5b:64:31:f3:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:08:40:E9:98:68:08:F6:42:24:02:23:69:3A:75:42:69:59:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/292264EE014C11EF8DFF8EF8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.36.0/23
Signature Algorithm: sha256WithRSAEncryption
26:08:c5:cc:35:f2:7c:98:4a:87:5b:ad:14:4d:b0:ec:f5:19:
5a:3c:36:38:23:96:87:9b:18:75:e8:40:6e:1e:94:6f:4d:b6:
5e:87:04:ef:c8:77:8a:97:43:76:02:53:68:ca:3e:f7:ef:c5:
fc:b6:62:6e:76:b5:45:3f:e4:8c:be:fd:c5:7c:70:0b:8c:11:
1f:e6:e2:fb:0d:c8:c0:43:7d:e8:c0:d6:ed:5f:29:41:33:30:
07:70:f7:dd:b5:da:01:e0:27:9f:8b:f9:7a:13:ed:a4:4d:e5:
d1:af:f0:24:db:70:03:c2:df:37:d9:21:1f:e7:3c:f7:45:9e:
ea:0f:ec:7e:7d:40:77:98:25:98:cc:b2:d6:bc:25:53:ad:f4:
14:83:d9:5d:a9:dd:19:50:8e:f6:c2:e2:b2:02:b3:be:94:dd:
a9:d2:db:b2:10:c1:43:f0:1c:a7:db:66:1b:33:0f:9d:45:e3:
2d:44:5c:ba:b7:56:e9:93:4d:3c:18:a6:46:6c:ad:56:85:47:
ed:76:0b:d1:d1:6c:02:f8:2c:6f:9f:00:75:4e:ea:35:64:8e:
e0:ba:01:ff:29:32:e5:ed:2a:17:f1:d7:07:fa:f1:34:97:8b:
2d:77:4f:9d:ec:7b:ce:af:44:25:36:1d:f0:0c:b0:fb:54:36:
4d:59:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:42 2024 by rpki-client on console-ams.rpki-client.org