Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4549CF5282B911EE895F0A2D4AD9E6FC.roa
File: 4549CF5282B911EE895F0A2D4AD9E6FC.roa (raw, json)
Hash identifier: cRmkWbds0R80kESNVwHpmPv06rnG2jRUlZJIMoHbpKo=
Subject key identifier: 3D:62:2A:DD:6A:96:AF:42:8A:53:D9:B0:D4:23:75:70:39:E6:B1:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4549CF5282B911EE895F0A2D4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:44:34 +0000
ROA not before: Tue 14 Nov 2023 06:44:30 +0000
ROA not after: Tue 12 Nov 2024 06:44:30 +0000
asID: 397630
IP address blocks: 154.202.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20432 (0x4fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:44:30 2023 GMT
Not After : Nov 12 06:44:30 2024 GMT
Subject: CN=65531752-dcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:bc:95:ae:76:c6:32:4b:6c:52:2d:7f:dd:
78:1e:d7:31:17:c1:d7:f4:26:94:e6:29:7e:c3:cf:
2a:3a:70:d5:88:89:3c:7e:af:a4:dc:55:4d:1b:32:
09:f8:4d:bd:01:e6:0e:73:0d:d6:28:85:b4:d5:9e:
e2:a7:45:f0:19:2c:04:6e:8d:a1:26:8c:ff:08:c3:
aa:55:a1:43:83:d8:70:b6:57:4c:9f:10:c4:1c:51:
f1:5c:01:5c:4b:66:be:26:f4:c5:21:f2:8d:fd:c5:
37:9a:86:f8:de:1f:42:76:e7:64:68:a8:08:b6:0a:
36:46:c2:9f:25:72:d7:8b:71:a8:ef:53:06:89:70:
83:5b:b6:be:df:ec:92:57:91:f5:c7:39:4e:2d:7c:
67:c6:30:ee:a7:bc:7a:77:d9:be:49:2f:e0:5e:b7:
a5:1c:b9:cc:37:3c:fc:dd:7e:ee:ea:4a:67:4b:a8:
c7:0c:23:6a:e0:4a:02:08:34:4e:75:ae:e6:85:23:
91:32:ae:dd:eb:23:55:28:bd:4d:e8:f3:9f:0e:14:
96:3e:a7:78:fb:2d:e0:68:a6:c1:0b:af:64:37:99:
01:f7:57:74:c9:68:b9:8d:b1:8b:54:3b:b5:9c:1b:
6c:57:a2:f1:45:15:ed:ef:fa:92:e7:43:ad:9f:44:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:62:2A:DD:6A:96:AF:42:8A:53:D9:B0:D4:23:75:70:39:E6:B1:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4549CF5282B911EE895F0A2D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.123.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:20:6a:81:ab:da:8e:31:f1:a5:ca:73:79:f2:a2:c0:ff:00:
1a:30:1b:79:4a:1e:5c:c8:4c:c5:00:ac:c0:fc:a0:0e:ba:91:
b1:41:d3:c8:54:1c:d9:e8:dd:14:56:7a:e9:c7:b2:af:d1:84:
af:a3:11:80:c9:3e:cc:f9:8a:b4:da:58:a5:3a:c9:7e:ce:49:
97:6a:de:29:ec:09:c2:12:3d:e8:a8:91:4d:80:c1:86:51:9e:
24:08:73:a6:5e:d2:30:ce:46:2c:cc:f9:a3:34:36:f1:e8:ed:
bc:dc:62:40:2a:dc:19:bb:15:19:d2:86:3a:e0:1e:43:00:0e:
6f:4b:20:02:46:bc:97:f4:08:ab:da:ec:48:cc:4a:3f:5c:37:
2f:fc:62:b7:1c:87:16:28:30:8f:4c:6a:5e:01:4e:2f:90:8f:
0b:72:fe:50:ac:e9:a3:75:20:a6:11:bb:09:4d:21:38:44:56:
a5:87:f3:00:e8:28:88:7f:29:d0:07:7c:48:82:66:92:df:ed:
8a:6b:18:f6:76:15:40:66:fa:66:a1:63:ee:ae:8a:be:40:c7:
83:b1:4e:6c:13:5a:75:f8:95:32:b6:a3:c8:cf:e0:cb:24:11:
80:7a:b5:3d:aa:ec:21:b6:cd:68:84:57:94:fd:fa:42:eb:4f:
2f:98:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:07 2024 by rpki-client on console-ams.rpki-client.org