Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EAD51BAE73F11EE867D668B775412E6.roa
File: 3EAD51BAE73F11EE867D668B775412E6.roa (raw, json)
Hash identifier: +2VbZKkDlN5ImdaLJiuUXJ3edkjWoiebffhTlKKWXF8=
Subject key identifier: 10:92:CD:3C:F4:1F:57:F5:DF:EB:A7:80:F9:4B:80:4C:95:00:7A:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EAD51BAE73F11EE867D668B775412E6.roa
Signing time: Thu 21 Mar 2024 04:55:32 +0000
ROA not before: Thu 21 Mar 2024 04:55:28 +0000
ROA not after: Tue 23 Apr 2024 04:55:28 +0000
asID: 44559
IP address blocks: 154.221.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41924 (0xa3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:55:28 2024 GMT
Not After : Apr 23 04:55:28 2024 GMT
Subject: CN=65fbbdc4-f7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:df:8f:a1:a4:31:43:96:2e:77:aa:3c:8c:
8a:72:fc:2e:cb:89:97:19:6a:35:a5:9a:4f:a1:0b:
3f:4f:0d:4c:9e:22:df:6b:d1:86:84:10:6a:17:78:
58:a7:d7:aa:73:51:67:e6:61:b5:4c:67:2b:10:50:
67:b3:fb:e9:35:c5:74:78:1a:0f:3b:1d:8f:03:00:
7c:11:92:cc:f3:a8:fe:86:d1:2a:73:91:ed:f3:d6:
e4:9c:85:29:04:f9:c5:60:86:38:4b:f5:11:b7:7f:
40:9d:ba:40:ba:e4:65:ae:a0:79:ad:8a:65:d2:f3:
25:b3:bb:99:33:82:a8:24:ef:69:a0:cf:07:4e:cf:
4b:bb:0a:d0:7f:fe:ff:c2:3d:98:b4:89:a2:fd:a3:
af:75:b4:9b:e1:60:e6:70:77:84:09:63:0a:60:98:
9f:ae:3b:1d:90:17:8b:ad:df:26:bd:ce:46:47:02:
62:c2:e4:df:52:3e:70:23:44:8f:68:84:b2:a9:30:
61:e0:68:d6:93:ba:95:b6:1c:c5:17:c0:0e:8d:ef:
29:62:82:44:84:24:1d:e0:3f:21:c8:37:97:aa:c3:
70:d5:dc:1c:a5:4b:51:df:b8:cf:e2:c3:7a:d0:5d:
8d:77:06:1d:f7:8b:4d:9e:7e:7b:d5:22:7b:69:fe:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:CD:3C:F4:1F:57:F5:DF:EB:A7:80:F9:4B:80:4C:95:00:7A:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EAD51BAE73F11EE867D668B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.215.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0e:e5:d0:37:4a:4a:28:52:f6:1e:c6:a9:0e:11:0a:9f:76:
a7:d5:ec:17:59:b4:c4:43:16:22:a7:d2:5d:40:9b:4c:7e:8a:
0c:96:d9:12:b1:e9:ee:38:f2:ae:8f:56:03:9c:e0:16:77:4a:
dd:f5:29:f3:bb:d2:f0:bc:eb:fd:bb:f9:22:1c:72:92:ba:d0:
10:bf:0c:a0:6e:21:32:23:18:31:13:47:79:1a:52:de:5c:f7:
a0:ce:94:99:76:f8:7b:e3:8b:85:c3:8b:eb:d5:c6:af:8a:05:
33:f8:99:6a:b6:91:72:2b:11:95:bf:cc:fd:4d:78:a7:a6:a1:
62:c3:8a:ce:f4:94:71:ba:2c:de:7a:13:76:70:c9:a4:c5:ef:
89:83:1e:27:ef:df:79:c0:18:32:57:e0:a0:49:1f:f8:22:23:
67:07:af:2f:ce:24:f9:b6:ef:aa:f2:0e:fd:c6:a1:28:3b:78:
75:99:7c:44:b2:63:a5:40:14:13:f1:cc:82:a6:74:2b:06:49:
dc:48:47:ff:88:f9:fa:cd:09:e5:5f:aa:70:c1:66:01:56:7d:
eb:67:bd:bf:4c:34:79:d0:50:f4:45:24:95:f8:ef:82:12:41:
e9:cb:eb:27:a3:93:7f:40:b1:4d:11:47:d3:0a:ca:c0:95:d7:
32:9c:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:17 2024 by rpki-client on console-ams.rpki-client.org