Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE01D06CCB411EE888D8375775412E6.roa
File: 3FE01D06CCB411EE888D8375775412E6.roa (raw, json)
Hash identifier: HnQ2XtQlu/APSu+5JIGNyiSniw57v11qaoNzSQ9oeug=
Subject key identifier: DE:16:63:63:70:91:83:B3:F6:6C:69:80:AE:7B:3B:0A:E9:BA:5A:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8AB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE01D06CCB411EE888D8375775412E6.roa
Signing time: Fri 16 Feb 2024 10:15:03 +0000
ROA not before: Fri 16 Feb 2024 10:15:00 +0000
ROA not after: Fri 26 Apr 2024 10:15:00 +0000
asID: 9009
IP address blocks: 154.218.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 10:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35513 (0x8ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 16 10:15:00 2024 GMT
Not After : Apr 26 10:15:00 2024 GMT
Subject: CN=65cf35a7-d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:3b:03:2b:f8:14:16:ef:6e:27:5f:77:79:
e8:4a:c3:a3:be:f4:a0:db:ad:78:14:b5:52:19:81:
ca:17:67:7a:dc:e9:db:9a:ed:0a:6c:7d:35:b7:2a:
24:f3:e1:1b:54:7d:44:3d:38:2d:40:30:c7:a9:25:
8a:29:89:0d:61:44:9b:ea:64:10:66:2c:36:b6:70:
96:82:8c:f1:9d:95:ce:83:e4:55:c7:50:98:d9:5e:
21:1c:da:0c:f7:d9:b5:f8:f5:f5:4c:6d:fa:39:9a:
db:81:68:e0:09:b4:9b:cf:eb:78:3e:31:7a:ef:79:
07:94:6a:a3:07:b0:5e:33:e0:58:f6:91:f9:4e:ab:
04:d4:d2:3c:33:4e:e8:10:58:03:0e:31:86:eb:62:
f7:c9:56:53:cf:d5:80:24:61:52:80:0e:33:cc:26:
54:0d:ed:23:8e:1f:2e:b0:cc:c3:3a:59:5f:95:77:
a1:ed:cb:39:fe:33:6d:b5:1b:05:5c:fe:03:07:28:
a2:ba:1b:18:e1:cb:27:fc:d1:18:f6:a4:95:af:9a:
fa:49:98:9a:9c:a6:40:3c:13:51:62:08:a4:d6:5d:
21:02:61:31:03:53:8c:d4:37:5b:24:01:04:2b:46:
e6:8d:6f:1b:f2:77:2b:8d:95:fa:4f:4f:f4:fa:f5:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:63:63:70:91:83:B3:F6:6C:69:80:AE:7B:3B:0A:E9:BA:5A:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FE01D06CCB411EE888D8375775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1b:f4:b8:be:0f:86:8a:8c:a0:d2:11:45:06:74:a1:0e:b8:
3d:91:28:d5:37:99:3e:3d:9b:5f:92:4f:17:59:8a:e0:2d:f2:
2a:64:bf:d4:58:0d:dc:2b:e0:f2:32:fe:18:57:b4:6b:b1:95:
d9:a3:dc:59:48:64:76:40:92:c4:ce:3a:ad:7f:45:83:d3:6c:
e9:5b:5f:63:8d:85:6e:e4:68:a1:61:fa:06:0d:39:5e:5e:c9:
5b:94:39:34:e2:5a:3a:5f:f5:73:c2:5e:c5:ed:b9:c5:36:4e:
83:97:ee:bf:98:bf:e2:97:c2:21:88:be:58:59:9a:2c:9d:92:
de:22:e9:94:24:73:85:09:87:ce:0f:7c:ac:3e:0c:44:0b:1a:
ce:98:ae:c1:d6:a7:60:c1:fe:cb:84:e6:b0:a5:c2:1b:e3:7a:
9c:ce:c1:a9:b3:25:88:e8:db:19:53:f9:33:5e:d1:b6:b3:35:
91:f8:ab:cf:48:11:09:29:89:dd:35:c3:57:fb:7b:fe:0d:ea:
51:6e:53:d9:90:38:06:bd:d9:47:54:1a:89:c1:a2:34:f1:0d:
f6:7e:45:70:a7:36:2f:80:ed:26:13:d0:13:8b:98:88:63:1b:
55:9e:b5:82:d5:05:1e:c9:d4:f5:6c:e3:74:4a:af:3b:fa:67:
77:68:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:30 2024 by rpki-client on console-fra.rpki-client.org