Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36FCEEE2E73211EEA90D92A3775412E6.roa
File: 36FCEEE2E73211EEA90D92A3775412E6.roa (raw, json)
Hash identifier: H2ac4jEjakJpDsIUYfqkgls9xmUlTrJ97E5wtROAxk8=
Subject key identifier: E4:54:3B:25:B5:D3:41:9D:0A:94:D8:85:27:A6:C9:49:18:2C:D1:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A342
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36FCEEE2E73211EEA90D92A3775412E6.roa
Signing time: Thu 21 Mar 2024 03:22:15 +0000
ROA not before: Thu 21 Mar 2024 03:22:12 +0000
ROA not after: Tue 23 Apr 2024 03:22:12 +0000
asID: 44559
IP address blocks: 154.207.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41794 (0xa342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:22:12 2024 GMT
Not After : Apr 23 03:22:12 2024 GMT
Subject: CN=65fba7e7-3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:1c:cd:fb:42:0c:bd:39:b9:60:ce:fc:42:
2d:9d:43:f6:5e:22:6b:a3:1a:9a:e9:52:8a:ff:9f:
3c:ed:13:08:b7:a6:68:5b:2a:b0:9e:e7:0e:a8:63:
31:3d:6a:e4:5f:d7:5b:7f:3a:ad:ab:83:45:bf:91:
4b:5b:11:6e:6c:af:af:8c:f8:fb:66:e8:87:c3:bc:
32:2d:1c:55:3f:38:55:88:36:ef:1c:85:33:ea:ed:
e0:e5:6d:48:86:70:b0:e5:ec:61:6e:32:b7:b5:92:
32:c2:2e:0a:80:19:b6:8b:0b:a4:bb:2a:ba:f7:78:
f3:c4:4d:a8:34:cf:65:9c:74:ec:bd:70:54:09:4a:
b5:91:33:d5:f2:56:f7:72:8e:dc:86:b2:f7:1f:5a:
22:a3:2a:47:25:aa:43:80:e8:98:a8:98:73:7d:c6:
c8:f4:fe:ed:fa:4e:d4:09:6c:24:81:db:92:78:1a:
af:b4:66:0a:fe:3a:5a:2b:ab:ea:bd:42:ea:9e:38:
f8:dc:e3:3d:c7:cb:37:57:24:48:db:7f:65:30:11:
e3:72:7f:47:27:39:cf:c0:b3:c1:e6:09:c9:bc:6b:
a8:90:a0:54:48:3c:f9:c0:1d:da:f7:84:ea:61:7c:
94:ca:b9:f0:02:08:06:11:11:21:42:4e:e7:47:b2:
e4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:54:3B:25:B5:D3:41:9D:0A:94:D8:85:27:A6:C9:49:18:2C:D1:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36FCEEE2E73211EEA90D92A3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.24.0/24
Signature Algorithm: sha256WithRSAEncryption
30:af:95:a7:dc:f4:6b:ac:a3:0f:fc:9a:e2:c6:d1:11:fb:a2:
c8:aa:a9:a7:0f:29:fe:fb:a0:09:8d:88:9d:da:08:ba:97:5b:
ee:aa:97:7c:05:f6:9d:ca:7f:5e:2a:4e:14:ea:14:70:41:c8:
1a:f2:ed:0a:b4:9f:44:63:50:54:f0:d1:a2:a3:b5:48:15:fc:
f1:2f:ae:6a:b8:d6:2e:dc:51:f9:ae:93:b7:70:a9:ff:a6:20:
2f:54:ee:bc:7b:e6:27:4f:47:4b:28:38:96:53:58:ed:eb:e4:
a7:aa:40:3e:78:04:96:b6:73:51:67:bc:4e:53:00:f0:d9:17:
b0:62:be:fe:6a:06:dd:b1:db:87:3d:e0:76:64:d3:c0:7f:63:
63:7a:a7:05:26:64:da:e5:b5:8b:83:22:fa:55:f6:66:02:4e:
93:d0:8c:8a:52:ce:3d:b8:f6:56:26:1e:70:8c:7b:dc:05:6d:
aa:bf:f4:61:ab:c8:c8:2f:d7:95:c8:8c:c7:9f:6c:f8:38:1f:
78:0c:60:14:46:6f:af:19:9c:15:9b:b1:eb:3d:8c:67:1f:1c:
c8:70:5e:bc:d0:06:ae:d8:96:1e:ea:10:59:d0:b0:b4:95:61:
53:f1:64:8b:0a:f7:e7:9f:d1:e2:9d:3d:b7:af:73:66:f2:b8:
91:77:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:16 2024 by rpki-client on console-fra.rpki-client.org