Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E613A8AF87611EEA39EB9F3007001B1.roa
File: 3E613A8AF87611EEA39EB9F3007001B1.roa (raw, json)
Hash identifier: LnchJMwp4Ah/w/au2jb3lFzLPJ0+xSGnS/kZ9+lW4vc=
Subject key identifier: 48:F2:8F:35:68:62:4C:AF:8B:C8:DD:05:92:D1:85:5C:FD:06:E7:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ABB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E613A8AF87611EEA39EB9F3007001B1.roa
Signing time: Fri 12 Apr 2024 02:42:03 +0000
ROA not before: Fri 12 Apr 2024 02:42:00 +0000
ROA not after: Mon 22 Apr 2024 02:42:00 +0000
asID: 5065
IP address blocks: 154.84.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 02:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43956 (0xabb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 12 02:42:00 2024 GMT
Not After : Apr 22 02:42:00 2024 GMT
Subject: CN=66189f7b-9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:e2:13:ab:bd:27:91:be:4d:61:26:70:50:
96:40:2e:d4:88:eb:31:39:79:32:47:f3:4e:57:6c:
0b:89:07:e3:ed:32:04:3b:ee:d4:eb:27:f4:c8:f1:
b0:80:04:86:5a:dc:a9:25:40:9e:d6:63:49:8e:ee:
0a:a4:8e:a0:c3:aa:8c:29:bc:a4:a2:41:4f:27:cb:
46:44:a1:b2:ab:7d:1c:38:6c:ef:00:2f:cf:14:ff:
f1:aa:a8:d4:df:32:9d:01:25:22:7e:b3:6d:2c:7a:
7c:ba:64:58:40:79:7e:45:30:90:69:f3:d4:dc:ba:
24:16:00:f4:f6:bf:0f:27:79:da:19:34:2c:57:14:
29:c8:5d:37:e4:82:dd:22:bc:f7:73:d9:51:92:60:
9e:42:1a:90:08:bf:64:d3:c5:44:ff:8d:22:56:3b:
bf:e7:5f:23:60:09:01:8e:ce:c1:bc:7b:24:ee:bf:
06:6c:06:d8:21:84:e8:3f:55:13:e9:ea:c1:f2:3c:
4d:20:e6:c9:69:51:86:d9:2c:0a:7b:ae:84:62:cf:
2a:e0:56:5d:b1:5b:d2:16:b0:a3:aa:19:a3:25:6a:
e0:b4:1c:00:2d:a0:4e:d0:9c:44:ea:27:97:ca:79:
af:17:83:ba:36:47:98:00:a3:09:68:d9:b8:35:5c:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F2:8F:35:68:62:4C:AF:8B:C8:DD:05:92:D1:85:5C:FD:06:E7:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E613A8AF87611EEA39EB9F3007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.184.0/22
Signature Algorithm: sha256WithRSAEncryption
97:7a:bc:c9:75:80:35:37:ef:90:cb:21:98:d7:29:17:8a:ae:
5d:ed:a3:8f:78:ad:6e:cd:a7:52:45:6b:12:df:06:1d:a2:97:
61:78:d3:b5:c2:ab:55:5e:ef:16:de:2a:6c:3c:af:80:a5:4f:
8c:3a:35:94:da:ce:8d:52:2b:f8:38:c7:8b:b4:cb:9c:88:f7:
41:f9:98:ef:a0:a6:20:55:fb:42:e7:59:2d:fe:91:37:33:9d:
f0:f4:96:cd:74:c2:53:2d:0f:2f:7a:27:87:66:04:f9:db:c9:
2c:d9:44:85:48:b3:4f:83:7b:62:ad:ce:2b:92:4b:6b:86:0f:
64:46:ee:84:23:d6:90:25:1a:8c:9b:f0:92:e2:1b:8a:17:97:
e3:1e:92:ca:48:7e:5f:b9:6c:55:66:ca:73:65:3b:f8:01:78:
27:97:2c:e3:a1:64:20:b3:18:59:46:a5:9e:26:ee:0a:10:32:
57:37:15:7e:08:a2:c9:af:b9:16:07:9f:25:36:b6:cc:3f:50:
9a:18:2d:d4:76:30:9b:3c:c7:b9:61:36:0a:b8:64:ef:1f:99:
e6:5b:4b:ad:7b:93:48:d4:d0:4c:b6:c4:0b:57:93:b1:1f:03:
09:e0:aa:fa:db:04:70:69:70:34:fd:32:0c:7f:a8:c1:ae:a9:
9a:15:f1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:17 2024 by rpki-client on console-ams.rpki-client.org