Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/421D673CEDB511EEA5D9AC9C775412E6.roa
File: 421D673CEDB511EEA5D9AC9C775412E6.roa (raw, json)
Hash identifier: vE5o7+FlZKJbISk+dQXEyeAO+OeydJXDJD9V/yODplg=
Subject key identifier: 41:83:AE:95:6E:68:A3:01:B2:BD:03:48:33:13:07:5C:07:DF:87:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A71D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/421D673CEDB511EEA5D9AC9C775412E6.roa
Signing time: Fri 29 Mar 2024 10:15:25 +0000
ROA not before: Fri 29 Mar 2024 10:15:21 +0000
ROA not after: Sat 04 May 2024 10:15:21 +0000
asID: 142062
IP address blocks: 154.86.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42781 (0xa71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:15:21 2024 GMT
Not After : May 4 10:15:21 2024 GMT
Subject: CN=660694bd-b530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:bd:80:f4:63:84:9a:50:6d:fe:a2:39:e6:
9f:4a:76:68:a3:28:b2:fa:d9:60:f0:9d:11:24:5e:
4b:7b:a5:67:54:dd:af:57:1d:24:6a:d9:c3:92:5b:
67:94:7d:19:5d:f9:2e:96:01:95:ac:ea:88:4d:51:
0c:aa:87:d1:ff:c3:f4:4f:e1:df:8a:0a:ea:99:d4:
bc:78:61:bb:99:52:f8:91:3e:6a:08:52:6f:17:88:
d0:d1:38:78:e8:5c:cd:db:cb:ef:4e:5f:0d:0e:a5:
00:18:5f:c3:56:40:8e:76:b7:e0:7d:b7:14:ea:6b:
0d:5d:98:a2:77:74:3a:27:9f:46:df:fb:1e:8e:42:
3f:12:06:11:4e:72:90:d1:8d:60:85:fd:da:49:1f:
aa:6f:e2:a8:71:8a:31:58:b1:55:09:42:f5:64:20:
50:4d:60:f4:86:21:b0:e6:ec:81:da:aa:43:98:3b:
6e:2c:69:e9:b6:7c:92:55:44:6b:53:21:ed:d1:d6:
d5:3e:c9:9e:b7:4d:2d:0c:b5:7b:24:71:48:3f:9e:
85:c6:fa:a1:9a:83:af:7f:c1:18:fd:82:b8:33:3a:
5e:4c:90:95:eb:0c:49:49:c1:7a:04:36:1d:ea:7e:
84:a9:29:78:49:f1:91:51:18:fe:5d:34:e0:1c:c8:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:AE:95:6E:68:A3:01:B2:BD:03:48:33:13:07:5C:07:DF:87:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/421D673CEDB511EEA5D9AC9C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:a8:1d:23:7b:a9:95:bb:1c:2f:5f:16:26:4e:42:19:5b:
ee:42:d4:f2:bd:f3:bc:7b:d7:dd:54:a9:31:93:f7:bd:78:aa:
d3:30:aa:87:29:52:cc:ba:d8:54:25:69:12:82:f4:08:9a:83:
f1:27:4d:8c:04:6f:01:11:ba:f6:6b:7a:bc:6c:2e:78:dc:64:
6a:4e:60:f4:02:f2:bf:3c:3e:31:c8:e6:98:fb:7e:e6:08:41:
8a:22:57:ee:9e:f7:e8:b7:bc:ef:a0:f1:97:53:ec:30:b5:3f:
1d:d6:57:fb:5e:58:6b:ca:06:eb:72:e5:31:49:5d:00:96:e6:
5f:9e:b9:93:da:e6:60:b6:ba:36:d6:70:05:c5:ae:8d:e7:ff:
44:53:bc:99:28:02:2c:43:d5:8a:e4:72:b6:28:2b:39:c6:7a:
ff:20:a3:d9:28:d9:46:e1:aa:94:5d:1c:b1:ba:64:85:0a:7c:
60:03:3e:4d:2e:05:1a:60:1f:e2:f6:01:ff:74:bf:58:92:be:
c9:f5:09:e9:58:06:cc:36:98:25:65:2a:a5:ec:92:b6:ee:f5:
5b:34:7f:21:da:fc:2a:0f:ed:f6:ac:81:35:1e:23:9d:89:c6:
f6:90:00:35:04:19:25:1f:90:a2:b1:f5:d8:fa:82:5b:71:d8:
1e:fc:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org