Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3051B4FCEDB211EEA1AD5286775412E6.roa
File: 3051B4FCEDB211EEA1AD5286775412E6.roa (raw, json)
Hash identifier: 1Bd4U4Emd8Hm5xmsVNVJNmLi7N4LPmUjwmI++rM0mLs=
Subject key identifier: 7B:4F:9D:FD:87:FF:83:C2:50:C3:E6:C2:4D:62:88:AC:0B:E4:25:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A701
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3051B4FCEDB211EEA1AD5286775412E6.roa
Signing time: Fri 29 Mar 2024 09:53:27 +0000
ROA not before: Fri 29 Mar 2024 09:53:23 +0000
ROA not after: Fri 26 Apr 2024 09:53:23 +0000
asID: 62240
IP address blocks: 154.195.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 09:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42753 (0xa701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:53:23 2024 GMT
Not After : Apr 26 09:53:23 2024 GMT
Subject: CN=66068f96-c0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:38:fd:08:3b:f7:36:60:2f:33:d6:b1:12:
8b:ce:1c:c4:c4:4f:24:5d:eb:61:8d:ba:5e:ea:00:
31:3c:98:82:26:f0:69:34:de:be:6a:67:34:b2:a9:
c3:19:5b:63:36:5e:fa:a8:ef:4f:83:7b:3c:47:60:
70:88:ca:41:39:74:a5:4f:9f:69:bb:83:12:c9:99:
3a:4b:40:12:2e:3e:eb:f1:d4:0e:41:b9:f3:b6:cf:
00:0e:58:33:8a:90:a1:32:f4:43:9b:ea:03:bb:29:
65:80:ce:2f:f5:45:93:c4:45:ef:1c:ed:ba:16:9a:
b7:79:0d:89:34:88:93:0c:5e:46:f7:5b:cc:5e:2a:
4c:29:1e:b6:0d:bd:84:49:c2:64:b2:c5:73:2c:04:
59:01:5b:a1:fa:31:46:24:47:21:ee:14:32:50:cc:
d7:d1:79:16:e7:38:a6:15:26:98:08:e7:07:6d:71:
19:93:67:52:c0:ad:3d:e3:90:fe:e0:8a:3a:6e:49:
d0:0a:1f:ef:56:ad:88:82:50:39:a8:ee:4c:c8:da:
3e:b3:f6:fe:52:8d:75:65:fc:14:2a:ff:11:92:89:
9e:23:be:43:55:23:eb:19:af:7f:f2:71:24:52:07:
2d:97:3a:39:a4:63:ba:ce:9f:e5:b4:5f:a1:b2:d3:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4F:9D:FD:87:FF:83:C2:50:C3:E6:C2:4D:62:88:AC:0B:E4:25:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3051B4FCEDB211EEA1AD5286775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/19
Signature Algorithm: sha256WithRSAEncryption
80:f3:69:25:92:6e:2f:72:6a:f4:80:06:1e:73:1d:45:c7:07:
d4:72:c8:7e:7e:93:74:80:75:6b:c8:71:da:33:e9:d7:72:7e:
9d:93:a5:01:f3:7b:a1:f4:9c:dd:91:18:3f:2d:ed:b5:91:b4:
69:46:58:1c:f2:cd:bd:02:06:77:47:2e:27:8d:68:7a:d0:17:
33:dd:fb:e4:83:7a:31:27:f9:94:a9:4c:4b:0b:47:13:d5:de:
aa:f7:09:e1:26:76:db:b5:7d:d3:93:6d:37:11:46:a0:c1:c5:
4d:07:68:f9:2c:05:74:51:4b:c5:54:fd:11:10:c4:44:23:5d:
8a:5d:4e:66:55:0c:ff:61:11:99:6a:c4:c5:36:29:f3:a3:20:
4c:cc:6b:5a:47:ea:99:15:43:3a:54:39:bf:b9:e9:f5:e4:4d:
55:27:9c:e7:a9:96:1e:55:fe:cb:c9:1e:b0:cd:ca:3a:85:31:
38:ca:be:93:28:ae:a4:0e:83:84:c9:02:b6:a9:28:38:c7:be:
9f:67:e3:31:52:92:b4:17:fe:bf:33:cc:b8:e3:c4:96:85:6f:
e5:e1:b4:0b:02:b2:3d:ce:e9:c9:c6:ee:76:91:03:f6:2d:8d:
e0:c0:61:74:79:f5:88:1a:67:ee:38:71:d4:40:e0:07:7d:cc:
82:df:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:28 2024 by rpki-client on console-fra.rpki-client.org