Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8FF698EDB411EEADFD5096775412E6.roa
File: 3F8FF698EDB411EEADFD5096775412E6.roa (raw, json)
Hash identifier: 18ekHMjOPq28PYpSXbp4CuKx0ZdTvFSs2c0E0S8qAks=
Subject key identifier: 94:8A:1D:F3:F0:72:06:6E:9E:F0:4E:8E:DA:9E:D0:0A:0A:CD:71:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A715
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8FF698EDB411EEADFD5096775412E6.roa
Signing time: Fri 29 Mar 2024 10:08:11 +0000
ROA not before: Fri 29 Mar 2024 10:08:08 +0000
ROA not after: Sat 04 May 2024 10:08:08 +0000
asID: 142062
IP address blocks: 154.86.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42773 (0xa715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:08:08 2024 GMT
Not After : May 4 10:08:08 2024 GMT
Subject: CN=6606930b-c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3f:fd:17:39:80:4d:7a:14:13:08:24:68:75:
c9:40:00:61:b0:c9:4a:3b:1b:24:4f:05:d8:d4:2b:
9e:bd:38:cf:64:f4:12:66:71:80:96:36:f6:d1:55:
37:37:57:99:4f:fb:71:c6:23:57:ca:1b:93:00:10:
12:2a:a7:c7:08:5b:c2:0f:ab:ca:7f:26:e3:75:d5:
cb:ec:84:2d:a5:b6:77:f2:e8:4d:4b:1a:3f:00:13:
b5:eb:f9:62:60:59:11:31:6f:a3:c4:6c:11:86:01:
ec:12:46:e0:dc:3b:dd:58:fb:ce:16:2b:9f:19:49:
18:f7:5a:ef:e7:c8:53:af:09:3a:8f:ce:ac:16:57:
aa:a8:d7:08:c7:7f:47:30:9a:95:5c:1c:82:3a:bf:
a5:6d:20:c2:ff:bf:ff:0d:f5:bf:f3:fc:44:e4:34:
55:c7:01:37:ce:13:4b:99:ff:e8:92:b7:7e:4d:82:
04:ec:6d:47:12:f0:97:54:8a:93:69:b6:2e:77:87:
67:60:a8:12:40:15:4f:3e:df:c5:21:a1:1c:84:27:
c4:03:0f:5b:27:df:ff:a6:54:46:bf:b9:f7:2f:25:
a0:33:ac:b1:5b:11:3c:28:5d:3f:97:36:e7:ac:c7:
e1:55:6c:0b:cd:47:73:26:54:1e:86:bf:12:ff:82:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8A:1D:F3:F0:72:06:6E:9E:F0:4E:8E:DA:9E:D0:0A:0A:CD:71:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F8FF698EDB411EEADFD5096775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5b:66:a4:1e:71:0d:26:ec:b4:63:68:bc:97:10:43:87:e4:
2a:d5:ca:df:17:2c:d7:19:77:32:bf:c3:01:13:c1:f6:43:83:
c2:ad:ca:0a:d5:9a:67:42:b4:24:b0:de:82:38:91:4a:fd:99:
5c:b5:f9:96:48:a0:50:55:6c:a9:43:5e:89:f4:79:fd:b6:ca:
20:ad:2b:ca:e1:f8:84:88:8c:07:e9:43:d9:16:46:3f:92:2d:
20:dc:f4:bf:7a:ec:e6:44:ff:cc:d5:b1:2c:9b:c4:60:42:f6:
9a:69:ec:1f:7e:3f:c7:af:50:0c:41:cc:6b:a2:d2:64:82:1d:
d9:c9:ef:fb:bf:fd:37:d5:be:1d:d4:d5:8f:b2:4e:31:f6:d2:
5c:83:a1:31:ec:75:b0:6b:b9:e6:90:70:28:43:e3:07:9b:5d:
16:5c:7b:a8:64:bc:69:5a:68:8f:81:10:b8:51:ef:c0:12:7a:
0c:80:0b:c5:08:64:78:3d:85:21:e5:e8:68:34:c6:1f:96:b5:
4f:b4:a5:76:50:1b:d9:15:dc:32:ce:04:4f:0f:61:8a:73:36:
3e:cd:b1:95:c1:17:b5:85:8b:fe:6a:e3:e2:f0:09:f8:52:ea:
15:f9:82:6d:cb:06:d2:81:0e:b7:0a:81:e3:c3:52:07:c0:a4:
99:c9:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:21 2024 by rpki-client on console-fra.rpki-client.org