Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D2B483A76CD11EEBDE000144AD9E6FC.roa
File: 2D2B483A76CD11EEBDE000144AD9E6FC.roa (raw, json)
Hash identifier: lqzNBwnlSCoptstP1mw08XVjTZpYsNq/uOOhogGvMog=
Subject key identifier: 00:30:53:62:6D:BD:59:5A:2E:7C:59:E7:66:4C:1C:D6:8E:DF:BE:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4AFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D2B483A76CD11EEBDE000144AD9E6FC.roa
Signing time: Mon 30 Oct 2023 02:36:49 +0000
ROA not before: Mon 30 Oct 2023 02:36:46 +0000
ROA not after: Sun 17 Nov 2024 02:36:46 +0000
asID: 201390
IP address blocks: 154.91.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19199 (0x4aff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 02:36:46 2023 GMT
Not After : Nov 17 02:36:46 2024 GMT
Subject: CN=653f16c1-9a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:6a:26:f5:fb:98:b4:e2:12:b4:35:9d:93:
73:c7:d1:21:bf:58:b6:db:43:8e:45:4f:f3:67:93:
d5:cb:bd:0d:a9:a5:54:77:16:b8:25:32:50:6c:e9:
6f:fa:5a:a8:3d:8a:44:e8:a8:2c:2a:51:5d:ac:51:
7a:70:4c:54:aa:6c:de:57:34:43:9a:a2:2b:28:aa:
75:21:44:fb:02:50:70:6d:e3:35:c7:f7:36:64:c7:
01:9d:24:12:64:23:00:c8:e0:aa:d8:13:47:3d:ec:
6d:26:72:ad:fe:33:8d:a3:65:f9:34:7e:c6:2f:21:
4d:80:d9:42:26:dc:5a:9b:61:f8:30:a1:fd:03:8a:
72:89:d9:c0:f4:8d:f5:8a:2c:3f:26:38:dd:86:db:
f1:03:bc:99:b6:e0:1e:e3:0c:d1:f7:b9:4c:be:d2:
d0:ae:bb:e6:d9:cc:c5:38:25:44:a2:79:b1:10:09:
9f:d5:dd:71:91:a1:69:f4:fd:3c:77:3d:96:a5:77:
91:de:69:f9:8c:aa:fd:77:31:a4:84:1d:6e:64:3b:
cf:fa:4c:31:71:f2:74:ec:48:4d:ad:7d:cb:d5:d8:
93:3b:52:3a:0b:25:2c:3c:1f:5a:51:dd:a2:1c:55:
c3:21:e4:4c:b1:b9:a1:42:d6:51:6e:e1:42:03:b5:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:53:62:6D:BD:59:5A:2E:7C:59:E7:66:4C:1C:D6:8E:DF:BE:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D2B483A76CD11EEBDE000144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.2.0/24
Signature Algorithm: sha256WithRSAEncryption
92:59:8d:e1:b6:c2:6d:95:a3:50:06:cd:bd:c3:63:d5:fd:5e:
8d:43:76:9e:80:41:a4:f6:8f:01:c5:64:b0:3d:d6:35:60:36:
58:87:a1:b9:6e:25:ac:29:b6:f5:3e:c0:03:67:28:b2:6d:3e:
98:d6:20:d4:e8:15:f9:e2:62:97:0e:15:73:1f:63:48:21:14:
bf:6e:34:ce:2d:90:71:06:cb:3c:87:c4:56:2d:d2:a0:53:de:
7e:6f:d6:33:80:56:29:b1:39:d1:fc:67:89:2b:57:11:6d:4e:
48:02:08:ea:3e:1c:e9:d3:22:e6:59:f0:71:64:bf:7d:ab:6c:
a8:13:1c:0d:48:6c:39:89:55:74:fa:67:60:29:b9:9e:3f:29:
5b:ae:7b:21:aa:89:d2:ab:a0:89:a7:96:79:e2:76:19:2e:8f:
3d:67:b9:f5:af:9d:bc:ae:a5:12:60:5f:6f:cc:d6:9d:a0:d1:
cc:95:6d:10:c0:47:1d:ef:70:f8:9e:66:65:92:9e:4d:43:02:
bc:14:17:17:2d:7b:46:c1:c0:5d:91:f8:7b:78:f6:83:03:39:
d6:53:e4:86:0f:e6:0b:82:13:ef:25:fc:29:57:d4:5b:d6:ce:
67:ee:64:77:fa:3a:3d:8b:50:ba:aa:85:98:30:95:db:77:75:
eb:89:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org