Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46E1F922E75C11EE96BF616E775412E6.roa
File: 46E1F922E75C11EE96BF616E775412E6.roa (raw, json)
Hash identifier: JXbPGMdBEx2/uchBjoCjpPRBFvzLPnMw5AF9cSaH1qM=
Subject key identifier: AC:F5:85:47:ED:CC:2C:DA:7E:18:5D:D2:FF:29:6B:70:A4:20:E9:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46E1F922E75C11EE96BF616E775412E6.roa
Signing time: Thu 21 Mar 2024 08:23:21 +0000
ROA not before: Thu 21 Mar 2024 08:23:17 +0000
ROA not after: Tue 23 Apr 2024 08:23:17 +0000
asID: 44559
IP address blocks: 154.211.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42205 (0xa4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:23:17 2024 GMT
Not After : Apr 23 08:23:17 2024 GMT
Subject: CN=65fbee79-d621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:55:91:df:86:b2:35:4d:f9:c0:7a:23:e3:
01:b8:06:2d:fd:89:3b:53:86:be:0d:c3:7d:f2:47:
eb:74:9b:09:72:c2:bb:42:bc:dc:97:b8:ea:58:9c:
8c:d8:28:b7:0c:5f:90:52:44:eb:3f:8c:72:da:d7:
6c:08:7c:61:e1:29:62:99:a0:a3:b6:89:42:50:b4:
a6:6d:24:d3:4d:85:dd:c6:17:1c:25:7d:94:4f:c6:
de:f1:8b:3f:97:96:22:af:45:e9:1b:87:c6:5e:86:
7f:53:05:a2:b8:59:ef:74:b5:e1:21:be:3e:5d:45:
f1:a1:6a:77:21:1c:6c:d8:46:39:1b:6e:19:88:d2:
a4:dc:b0:15:66:1b:98:fe:51:e5:1e:95:52:10:ee:
4d:4a:0a:40:68:a2:2b:03:32:c8:2f:82:fe:28:97:
69:da:85:1c:64:17:1f:6b:6e:5e:4d:6e:c4:68:bf:
18:a0:77:14:63:f5:bd:64:4d:5c:74:af:9f:13:2a:
9e:67:48:f1:96:73:af:17:17:67:b9:04:5c:bf:a5:
74:ee:e7:49:62:81:8b:50:5c:6c:0e:bf:f0:30:a1:
fe:45:f0:cc:6c:b3:a8:93:06:44:05:82:ce:55:23:
d3:8d:b6:79:5c:90:35:f5:71:f0:35:68:c7:a4:8c:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:85:47:ED:CC:2C:DA:7E:18:5D:D2:FF:29:6B:70:A4:20:E9:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46E1F922E75C11EE96BF616E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:39:fe:a1:49:28:bb:78:a1:34:93:ef:27:e0:47:0c:25:ef:
bc:9c:8e:5d:1e:5a:f8:0d:8a:b1:02:83:c9:8c:4e:52:93:2b:
f1:a0:c7:6e:ee:18:c0:91:fc:a1:8b:a3:66:e9:d2:94:11:09:
34:b8:cf:70:5b:b0:2b:fc:b8:2b:fa:7d:a6:a5:30:19:33:1e:
84:05:e4:fc:64:2c:5d:45:9d:02:89:4e:82:8e:97:1e:cc:fa:
c3:45:00:60:29:3c:ba:cb:ac:d4:70:ce:18:97:6b:8f:96:1c:
cb:a0:33:9b:89:f8:cd:81:23:12:98:91:16:37:ad:c0:c1:78:
3b:c1:7e:7e:4b:b7:8f:52:7a:40:31:55:4b:0a:a5:78:2e:bb:
ac:c1:9d:ef:ca:ab:d2:9b:3a:a8:61:7c:39:4f:35:a7:61:10:
38:02:22:f8:74:27:a8:3b:0d:88:d2:65:82:fd:08:1f:f2:6f:
b9:15:cc:0d:5d:40:79:c5:24:0d:57:48:aa:7f:f7:74:b2:b3:
5b:c3:6f:6e:30:40:0d:eb:01:a5:9c:79:8b:da:8b:1b:89:f1:
78:3c:e9:55:d6:bf:6e:eb:4f:b3:77:d3:58:a9:4c:62:3b:7b:
02:d0:e3:ed:c3:2c:49:95:1e:93:89:fb:c1:d1:cf:f8:e8:f6:
8a:19:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:17 2024 by rpki-client on console-fra.rpki-client.org