Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D3718C4ECA511EE87A5C64D775412E6.roa
File: 2D3718C4ECA511EE87A5C64D775412E6.roa (raw, json)
Hash identifier: hi2LFIznMuy1wA4kWE4E6JCENA3Ss025yHstj+oOm2U=
Subject key identifier: 77:97:7E:35:B8:98:71:C1:1C:9D:10:83:ED:5D:02:FC:B3:DB:5C:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D3718C4ECA511EE87A5C64D775412E6.roa
Signing time: Thu 28 Mar 2024 01:47:47 +0000
ROA not before: Thu 28 Mar 2024 01:47:43 +0000
ROA not after: Sat 11 May 2024 01:47:43 +0000
asID: 138915
IP address blocks: 154.203.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42694 (0xa6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 01:47:43 2024 GMT
Not After : May 11 01:47:43 2024 GMT
Subject: CN=6604cc43-d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:62:fc:ac:07:81:1d:d0:21:72:8c:4d:e5:
53:29:f6:3c:b2:93:36:7d:ae:a2:bd:07:f8:e5:6d:
9b:8e:7e:81:12:07:97:69:46:64:66:a7:63:04:61:
6d:79:02:6a:64:80:ee:b2:b0:5f:50:b6:25:9c:93:
74:f1:a3:b5:9b:00:6d:d1:5e:42:34:d3:f6:54:2e:
1a:73:83:38:91:61:03:6d:c9:b6:e1:85:7c:7a:4f:
ee:2b:6a:30:a6:b3:88:f9:27:82:d1:c6:91:9c:96:
0b:57:e1:9d:19:5e:27:61:a7:64:d6:d7:fc:73:3a:
03:22:c4:6b:5d:c3:77:52:c8:50:1f:80:ad:3d:94:
d7:2c:88:3b:34:3d:65:2b:d4:94:95:91:dc:73:e1:
7a:6f:13:b8:13:67:fb:e2:b4:55:1e:3e:0d:b4:48:
13:bc:25:dc:5c:94:80:c7:3d:ae:b7:a1:26:0d:e2:
8b:93:e7:5a:23:cf:21:36:28:47:74:4e:1f:c2:94:
1c:46:c6:6e:f2:bc:f6:80:55:f0:65:f2:be:8a:67:
ff:4c:4c:9d:23:99:8b:1e:dd:a2:29:d1:da:f0:7b:
11:09:3a:4d:23:e1:54:c4:8a:bd:c3:d7:a6:6e:7a:
5a:15:9a:46:56:9f:30:98:df:65:5c:12:cb:5f:d5:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:7E:35:B8:98:71:C1:1C:9D:10:83:ED:5D:02:FC:B3:DB:5C:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D3718C4ECA511EE87A5C64D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.141.0/24
Signature Algorithm: sha256WithRSAEncryption
54:41:b2:60:60:3e:f3:ec:ba:91:d0:3d:40:ac:3e:48:65:9f:
a6:1d:17:b0:cc:e1:72:15:8f:7e:90:9c:7c:f4:62:81:ff:df:
cd:bf:6a:38:7d:c3:73:83:43:ca:9b:7a:c0:c0:84:20:83:4c:
7e:1a:2d:d9:d6:51:75:a7:e1:49:52:2a:4b:d6:ce:d6:f0:e8:
e9:4f:79:4a:a2:c4:b5:01:f5:3c:9e:2d:a1:ec:72:e4:d6:75:
e2:3f:ee:20:2c:71:9f:2e:1a:78:60:d3:86:a9:3b:45:74:72:
f9:8b:02:f9:92:b6:8a:73:5a:20:c5:1c:37:3a:9b:f1:f6:78:
0f:37:b5:70:5c:ba:07:68:26:82:9e:32:97:23:1c:35:7e:14:
e8:8d:cd:dd:2c:a5:01:e5:a4:37:82:12:dd:9a:b3:6b:09:84:
a2:6e:42:64:94:c4:cd:62:39:e0:52:a6:59:25:71:05:78:37:
ec:b0:5e:0d:aa:32:ba:d1:f0:fb:17:70:56:f9:e2:06:a1:2f:
f8:a7:fb:83:4b:79:90:f4:3d:13:8f:cd:b3:df:f6:56:dc:90:
95:ec:15:2d:f9:1f:c4:d2:f2:0a:ad:22:b4:63:79:96:7b:70:
19:ef:b6:a4:95:49:b3:fe:22:9d:72:9d:a9:5b:8d:54:33:bf:
30:ca:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:19 2024 by rpki-client on console-fra.rpki-client.org