Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/435E7A1EE74311EE9B1F7EA9775412E6.roa
File: 435E7A1EE74311EE9B1F7EA9775412E6.roa (raw, json)
Hash identifier: oFvQC/sDUatwdqnkggFdcVvTEJLNfNSQRVLAQVyeoys=
Subject key identifier: DB:28:46:3C:44:02:96:D4:88:D5:1B:24:46:59:FB:A2:7D:97:90:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/435E7A1EE74311EE9B1F7EA9775412E6.roa
Signing time: Thu 21 Mar 2024 05:24:18 +0000
ROA not before: Thu 21 Mar 2024 05:24:14 +0000
ROA not after: Tue 23 Apr 2024 05:24:14 +0000
asID: 44559
IP address blocks: 154.221.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41964 (0xa3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:24:14 2024 GMT
Not After : Apr 23 05:24:14 2024 GMT
Subject: CN=65fbc481-0386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:9b:e0:84:94:84:9c:16:d3:99:db:38:55:
14:93:3f:fb:86:61:57:04:99:0d:f9:4e:c7:59:9d:
9a:45:c5:60:9c:35:31:46:bd:e6:d9:e6:46:8f:09:
e9:4c:9f:f0:a7:b1:82:e1:27:3b:49:cf:63:24:7a:
69:d7:ca:46:29:d0:d9:1d:b8:18:f2:e4:be:9d:ab:
8b:98:41:de:c5:69:18:03:8a:cf:fc:a7:a8:08:43:
8d:50:05:3b:80:2a:34:b8:54:c4:ef:59:fa:da:e0:
f7:38:64:9c:3f:88:f1:59:27:85:93:74:b6:bd:1f:
da:5f:89:e0:c6:a3:20:d0:86:36:58:56:74:ed:9c:
c5:7f:4c:a0:83:6c:21:83:27:35:b1:62:82:48:5c:
0d:25:d0:ba:94:22:a6:81:5f:df:1e:95:2a:14:01:
0f:74:00:a3:9a:c0:ce:2e:69:1c:f2:89:f8:1c:5f:
a5:70:2d:20:cd:50:22:78:24:5d:a2:b9:6e:30:0d:
28:6f:d0:4d:51:a7:59:0e:63:97:f8:a2:17:42:81:
0b:61:10:fc:b0:5e:02:24:2d:cd:68:74:a6:5c:43:
d3:5f:ee:cd:ad:19:aa:d4:49:30:9e:fb:14:1b:e3:
b5:40:04:75:61:d8:5d:a2:26:27:1e:d4:fa:3f:e7:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:46:3C:44:02:96:D4:88:D5:1B:24:46:59:FB:A2:7D:97:90:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/435E7A1EE74311EE9B1F7EA9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.195.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d8:81:28:01:6c:98:aa:ea:4c:a7:88:21:8d:16:d0:1e:0b:
4c:36:df:60:02:a7:ed:69:28:57:2f:96:eb:ae:9f:8a:1e:50:
c0:5e:75:5f:f8:1e:ce:af:74:8e:79:fd:29:ee:a0:fb:d4:a7:
cf:b8:6f:c6:ad:4a:2e:81:e4:0c:9a:ba:90:62:ea:23:06:34:
d3:82:0e:f7:c8:00:72:75:ba:53:0c:02:a4:28:8f:58:af:22:
0e:12:43:e3:0c:d8:ef:79:95:6a:5d:a5:b6:5d:31:16:69:b4:
ff:48:3a:de:26:59:90:d4:21:2d:90:7c:43:5c:65:88:fb:c2:
6a:6d:08:b4:6e:e2:ce:8d:b0:f5:7e:c1:4e:d8:91:19:80:46:
21:63:b4:bb:76:02:65:21:72:51:ce:e6:10:21:f0:0d:25:08:
41:c6:74:85:ce:78:d8:f4:4d:dd:8d:34:82:dd:a3:d5:75:f2:
54:86:ae:cd:5a:20:cc:6e:70:8e:32:7f:ab:bb:8a:d9:2e:8d:
e5:ec:22:3a:0e:d0:f5:2b:07:9e:bd:e9:ba:f4:be:09:65:4f:
b1:b7:dc:bb:1a:93:5d:c5:ff:fd:84:f5:89:4f:dc:62:10:34:
62:4a:de:c9:a2:ba:7a:30:f7:a7:c3:3e:16:eb:c9:c6:81:79:
08:0e:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:18 2024 by rpki-client on console-ams.rpki-client.org