Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B453C42FBAB11EE9485E41B017001B1.roa
File: 3B453C42FBAB11EE9485E41B017001B1.roa (raw, json)
Hash identifier: PU/WiaYjMjXKROpnjp7AxfK1fXLINqYx1PQh4uWwgXw=
Subject key identifier: 19:AF:81:21:6A:CF:E1:D2:53:26:CB:28:33:51:96:95:B6:31:81:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B453C42FBAB11EE9485E41B017001B1.roa
Signing time: Tue 16 Apr 2024 04:38:55 +0000
ROA not before: Tue 16 Apr 2024 04:38:51 +0000
ROA not after: Thu 30 May 2024 04:38:51 +0000
asID: 63139
IP address blocks: 154.94.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44465 (0xadb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 16 04:38:51 2024 GMT
Not After : May 30 04:38:51 2024 GMT
Subject: CN=661e00df-d28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:34:ba:ce:a1:66:2b:d5:d0:51:67:2f:9e:
41:8c:58:db:14:4d:b2:dd:bb:f1:ed:e0:b4:c4:f3:
f7:3e:58:02:7d:2d:fe:af:00:94:83:7b:f2:f7:b0:
91:15:7c:d5:5c:02:d9:fb:ca:31:94:41:54:94:31:
a9:45:e1:f3:52:25:8e:3d:20:c1:02:83:da:bf:9f:
a0:c5:a9:9b:7a:ec:09:0e:63:1a:ce:b2:a3:58:3d:
4b:7d:65:40:b8:9e:82:2d:26:99:1e:bf:b2:8f:a4:
a1:39:f5:dc:7f:11:d2:28:91:ef:32:98:a1:cd:1d:
ad:d1:06:3c:03:00:a5:12:d6:ab:39:bf:05:89:75:
1a:34:b9:83:8b:3a:9f:86:8c:b7:51:3e:0a:7a:1f:
c4:52:ce:82:46:1e:1b:a5:ad:03:be:73:d3:d6:47:
7e:c3:e4:d9:c0:62:06:95:92:e7:4a:1f:02:bb:7e:
b5:07:36:de:5a:c6:5f:26:0a:5a:53:d4:6c:d0:15:
bd:9f:9a:6d:5d:df:5e:1a:2a:ba:81:ea:f8:01:ff:
6c:90:77:6a:9e:bb:ee:25:d0:6d:b4:6b:f9:9e:d8:
64:a1:ec:45:aa:75:e9:c2:c7:01:b3:8d:35:db:5c:
61:cc:a0:be:92:0c:92:ff:45:18:9e:03:21:31:75:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:81:21:6A:CF:E1:D2:53:26:CB:28:33:51:96:95:B6:31:81:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B453C42FBAB11EE9485E41B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.111.0/24
Signature Algorithm: sha256WithRSAEncryption
27:23:13:80:38:dd:e3:19:40:0b:02:ea:2b:de:7e:f0:b1:cb:
2c:5a:82:82:61:86:da:5d:84:7f:1c:65:25:6a:f8:cb:a8:b8:
11:31:0f:47:ef:c7:57:2d:94:65:8c:2c:6f:b8:2c:33:ec:13:
ae:f8:05:6c:19:b5:49:cb:9e:6d:2e:e4:06:c1:ec:15:40:a5:
4a:8f:03:81:66:c6:20:38:62:99:01:aa:29:4b:6e:bb:10:65:
69:c6:00:64:e6:88:20:1b:69:91:4d:7d:30:6a:57:ee:0c:e9:
00:30:30:b6:69:3c:d3:7f:c4:a6:37:50:cb:bb:51:ec:25:6e:
4a:92:42:32:40:18:df:38:30:72:2a:73:29:a7:7d:56:25:e5:
33:60:64:f4:33:dd:d0:b0:ea:5f:1f:0a:78:e0:89:a3:5a:88:
08:cf:f1:06:85:7d:2f:74:06:74:6e:3f:2d:00:2d:1c:65:37:
23:78:1e:d1:dc:51:7a:0d:b3:9b:9b:ae:f6:01:33:f9:cd:38:
6c:0c:cf:14:4e:e0:5f:d6:a0:3b:bc:de:a6:2b:8f:ab:13:75:
ca:76:f5:70:2b:c1:7c:f9:eb:db:52:de:ce:f2:51:8c:77:bb:
58:c2:9a:a7:09:fd:b7:01:95:a3:73:02:98:24:d4:8c:90:a5:
3b:b2:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:52 2024 by rpki-client on console-fra.rpki-client.org