Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5138D8E75611EE8A99B7BE775412E6.roa
File: 3D5138D8E75611EE8A99B7BE775412E6.roa (raw, json)
Hash identifier: pBXiWk7zkEWThheO/1jod/y3m3gsZJTiT0xxfk9XMVQ=
Subject key identifier: 7F:36:3F:41:67:42:FF:57:66:65:E8:A9:7B:7C:29:B2:93:53:9A:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5138D8E75611EE8A99B7BE775412E6.roa
Signing time: Thu 21 Mar 2024 07:40:08 +0000
ROA not before: Thu 21 Mar 2024 07:40:04 +0000
ROA not after: Tue 23 Apr 2024 07:40:04 +0000
asID: 44559
IP address blocks: 154.218.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42147 (0xa4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:40:04 2024 GMT
Not After : Apr 23 07:40:04 2024 GMT
Subject: CN=65fbe458-778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:47:94:9b:ca:4c:31:ba:7e:12:a3:67:3f:
42:85:9e:60:64:ee:df:99:ce:e6:d4:30:a6:37:b5:
c8:ad:bc:47:eb:58:96:ad:bd:fb:53:63:27:dd:16:
c1:31:e8:08:02:c5:7d:20:ef:34:cc:b9:75:51:4e:
93:9a:36:fa:ec:35:a9:5d:77:07:93:74:10:97:6c:
0b:e8:71:2a:ad:46:ed:48:e7:81:b4:c5:36:71:93:
b9:ee:23:f5:44:95:76:12:1d:2e:dc:9a:41:9a:51:
ff:46:08:5d:05:75:1a:6b:42:fa:b7:10:27:68:e0:
d4:06:e4:dd:f0:87:64:de:29:5f:d1:90:d5:9b:ea:
71:28:18:2e:79:e0:8d:75:8e:a3:32:67:46:6b:20:
2d:38:0e:a6:5c:a7:c2:a8:cf:c1:76:6d:8b:ff:17:
e9:51:fb:c3:10:c7:e9:a5:1c:ad:2c:47:e9:1c:fc:
6c:0a:5f:77:3e:49:49:50:0b:e5:02:7a:e1:9f:f8:
7e:28:78:6c:3a:7b:32:be:f1:c0:e1:a1:51:d6:ad:
9e:48:65:a8:f8:53:9d:2a:d1:f5:a3:4a:65:1c:b9:
32:87:62:76:67:11:97:89:91:ec:9b:af:fd:42:85:
fe:32:33:bd:4c:c4:1e:b8:00:1d:79:09:91:18:f5:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:3F:41:67:42:FF:57:66:65:E8:A9:7B:7C:29:B2:93:53:9A:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D5138D8E75611EE8A99B7BE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.39.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2b:67:4a:d9:b9:f3:13:92:bd:b6:40:f6:05:a6:e2:b5:a9:
f6:41:2e:99:b0:1f:6b:0f:39:b2:3d:e3:1c:73:f0:4d:21:ca:
8a:ce:37:06:a2:0c:0e:24:0a:41:a4:7a:d4:ba:2e:ef:33:9e:
89:26:d8:2d:97:98:52:de:ca:1b:a9:fe:7f:7d:34:cc:f3:ac:
e7:b5:f0:51:3d:4c:7e:e4:0b:4f:10:37:5c:63:6c:09:21:33:
68:13:45:e3:6b:f7:31:bb:d8:fc:52:6d:de:0a:d2:22:54:1a:
fb:02:35:d9:7d:e4:cd:51:44:1d:07:22:45:5b:9f:50:d3:82:
33:13:1b:5f:17:66:94:63:ce:a6:da:cf:82:a7:e7:2f:72:de:
af:d7:af:66:2d:20:e9:23:97:7c:87:07:29:30:dd:24:66:36:
5a:01:ca:7c:35:79:34:51:fd:cb:0b:ae:09:c9:30:9a:d3:5d:
02:b7:5d:44:d3:ca:81:2c:f9:b5:a8:4c:94:99:44:5a:c2:82:
dd:80:ec:27:68:91:28:bd:3b:33:50:4f:e2:a8:25:6b:3a:d4:
57:b5:0d:de:66:89:86:0e:28:0d:28:f1:9d:11:2b:4c:1b:14:
47:4a:2f:02:04:b8:e3:b2:b9:8e:02:a9:22:18:1b:e8:46:f7:
38:6a:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:16 2024 by rpki-client on console-fra.rpki-client.org