Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42DE864853A411EEB3B7236E4AD9E6FC.roa
File: 42DE864853A411EEB3B7236E4AD9E6FC.roa (raw, json)
Hash identifier: hA7GZQb4NJ/tLZJCJhN0VvCfxR9DW+cbsI2Y4QfzQ8s=
Subject key identifier: 43:38:BC:AA:8D:B2:D3:12:D9:22:17:53:52:02:2F:E2:58:A8:CA:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3DB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42DE864853A411EEB3B7236E4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:45:46 +0000
ROA not before: Fri 15 Sep 2023 08:45:42 +0000
ROA not after: Sat 08 Jun 2024 08:45:42 +0000
asID: 136970
IP address blocks: 154.197.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15801 (0x3db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:45:42 2023 GMT
Not After : Jun 8 08:45:42 2024 GMT
Subject: CN=650419ba-ddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:ac:ff:8d:04:47:34:1f:b1:6a:91:91:a2:
e1:c0:80:e3:cf:08:7e:69:75:51:51:e5:bc:7a:27:
9d:a4:e7:f9:2f:40:38:45:a5:6a:ce:bc:c8:43:01:
be:a9:62:1d:78:af:3a:aa:5e:b7:63:ca:88:92:bb:
c2:51:d9:b7:49:69:41:2d:44:c9:d9:f1:10:00:82:
3a:39:34:e7:43:96:4e:d3:39:86:cd:6e:2c:73:09:
8c:a3:9d:32:04:fa:ec:ce:af:53:c1:47:9b:78:5a:
cd:18:4a:3e:c3:38:f6:0d:70:32:1f:85:2c:82:3a:
42:ac:f2:66:a1:f8:16:80:1a:aa:03:dc:20:b6:7d:
ee:49:ad:d6:4a:cd:ac:86:c6:34:57:b1:c5:21:b8:
f0:9f:15:c7:bd:e4:38:fe:d4:84:54:67:40:e6:5d:
13:04:10:f8:a4:33:63:ff:5d:0e:4b:ce:f2:71:5a:
51:08:b4:bd:12:c6:ae:8a:d2:de:d6:9e:51:b1:e6:
8a:eb:a3:d8:f0:43:38:8d:0d:7d:a7:60:2e:87:a2:
89:a3:90:d8:fc:74:91:bb:d9:2e:28:81:c0:b0:b3:
44:b0:a3:3a:0a:32:db:91:40:4b:12:28:fd:39:fa:
62:9b:c3:bc:fb:68:f1:33:df:12:2d:af:dd:b2:9e:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:BC:AA:8D:B2:D3:12:D9:22:17:53:52:02:2F:E2:58:A8:CA:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42DE864853A411EEB3B7236E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:01:18:27:fc:ca:9a:8f:42:eb:c2:ce:4a:2a:c0:40:39:1a:
d0:70:c7:bf:4c:98:a7:52:bc:38:5b:65:f7:9f:33:92:1a:9a:
7e:e4:17:c0:f2:0d:70:8d:23:42:59:86:4c:18:2e:5f:0f:17:
57:28:21:7c:62:e2:a0:49:8a:91:6b:05:b2:4c:87:6b:70:ef:
ee:ab:27:2a:00:41:cf:fb:3b:7b:5f:12:e4:c5:ca:e4:9d:31:
92:62:b6:d5:39:1b:25:71:6e:f0:9d:97:e3:ce:9c:05:f9:3f:
74:7c:8e:2c:65:1d:41:c0:0e:10:82:a1:6e:9e:98:db:f9:b4:
ce:1a:bf:fe:87:1c:ea:6c:a0:66:62:52:ff:02:2b:5c:72:b6:
6e:b9:1b:e0:e8:85:fd:22:71:b7:5c:fa:ea:bd:30:af:af:42:
a6:9a:b9:f0:6b:b2:2e:f9:3c:60:6a:51:2e:31:bb:c3:ce:9e:
aa:8d:a4:60:18:85:0e:86:45:20:03:9f:98:17:a0:33:ac:a1:
53:b9:1a:20:8b:48:f7:ae:49:0d:cd:f5:19:39:5b:0c:06:3f:
8c:8a:bc:84:19:8c:49:9d:7e:d3:3a:83:05:50:ec:aa:51:61:
1b:a7:cd:a0:e0:fc:d1:8b:5c:33:bc:23:9f:6b:47:8d:a5:47:
5e:37:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:53 2024 by rpki-client on console-fra.rpki-client.org