Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43762374286311EFA41354F17CDC24C2.roa
File: 43762374286311EFA41354F17CDC24C2.roa (raw, json)
Hash identifier: j4w3YZkdPJ5MSnlo2TlutpGsPkgIYFUdAneQkzqyVs4=
Subject key identifier: 8F:F6:FE:52:B7:6C:BA:E9:BC:44:FB:E3:CD:A2:BA:9B:73:C8:21:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: C1CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43762374286311EFA41354F17CDC24C2.roa
Signing time: Wed 12 Jun 2024 02:27:07 +0000
ROA not before: Wed 12 Jun 2024 02:27:04 +0000
ROA not after: Sun 15 Jun 2025 02:27:04 +0000
asID: 138678
IP address blocks: 154.202.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49615 (0xc1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 02:27:04 2024 GMT
Not After : Jun 15 02:27:04 2025 GMT
Subject: CN=6669077b-aaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:e9:0f:cc:b4:5b:59:51:1e:a5:67:8a:7a:
84:83:fe:c2:a1:50:b9:60:91:6c:00:8c:86:98:13:
0d:fa:5b:7a:3e:ce:84:9a:ab:8a:e4:6d:e3:98:2b:
88:7b:a7:51:00:fc:ec:9f:3d:88:04:bc:1d:fc:8d:
95:11:8c:e4:12:8d:93:58:64:8c:97:f8:6c:e3:83:
2b:6d:54:28:e2:6a:4b:58:ce:83:6c:37:78:a9:3a:
eb:e2:69:7f:92:c9:46:d5:ba:08:2b:d6:4c:05:a7:
f3:d2:6e:09:54:a3:bc:25:1b:db:b2:fc:e5:87:5d:
29:8f:9b:5d:0f:35:b8:b0:94:78:6f:ab:6d:5d:23:
72:be:a3:78:04:3d:61:68:d7:be:bf:4b:f2:ad:fd:
f4:1f:d1:f4:34:7f:15:d5:bb:df:b8:30:b8:d5:46:
b8:e4:e6:dd:ee:c4:56:d3:04:18:2a:e1:79:61:f9:
f7:5f:5f:20:b6:58:16:d4:4d:f9:2d:72:40:17:03:
e6:93:5e:de:56:45:67:c5:f6:6d:7a:5f:9b:16:da:
54:cb:e9:75:ad:f2:87:8c:3e:5d:2c:b8:d7:51:6a:
e7:0d:88:e5:b5:15:7c:08:42:cf:42:4b:30:2f:c3:
e4:13:8d:9c:84:4b:39:32:49:e2:ea:4b:0f:9b:76:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:FE:52:B7:6C:BA:E9:BC:44:FB:E3:CD:A2:BA:9B:73:C8:21:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43762374286311EFA41354F17CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c3:b2:79:42:84:c4:d7:6d:7d:42:11:5f:d0:40:a5:16:7b:
2b:11:1a:52:2d:4c:36:fb:dc:5e:f0:33:2d:18:37:ad:77:30:
8b:3c:06:a0:a5:40:0e:90:70:f6:83:85:4a:e0:79:29:71:ef:
25:a9:a7:44:70:8f:b4:74:1b:f6:dd:4a:53:02:d7:83:f2:f6:
f9:a5:27:7a:ee:0b:8e:1a:a4:19:9b:e6:00:72:78:78:7d:ff:
2f:34:24:96:fd:e6:9d:a2:80:02:e7:ea:4d:7d:54:2f:bd:86:
a0:d7:b5:6f:e7:49:8b:d4:70:fe:cd:99:12:5c:9a:26:33:c6:
64:59:0c:b0:b2:16:f7:0e:83:9e:b4:73:af:79:66:ee:68:bc:
8b:47:4d:be:74:bb:75:f0:27:e7:3f:0e:4a:92:66:64:69:a8:
64:34:08:23:04:fe:c6:2e:50:d1:a0:39:40:29:fc:ab:00:17:
e9:af:a6:59:f4:88:a2:e3:73:56:02:97:f2:db:95:18:a0:ec:
3d:8b:96:78:3e:e3:61:dc:8d:ba:00:39:e7:db:96:d6:6e:2f:
2f:04:e5:c9:f4:bc:5f:6a:7c:cf:32:03:e6:5d:11:95:bc:0a:
e3:84:c7:3c:d7:ff:b3:e7:3e:53:79:3c:6d:d1:92:59:df:06:
f1:04:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:04:02 2024 by rpki-client on console-ams.rpki-client.org