Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4894705CC04111EE901A4BA2775412E6.roa
File: 4894705CC04111EE901A4BA2775412E6.roa (raw, json)
Hash identifier: F3vUoCK2zRdy0Pi2H7rcEsjT8NnuyIH3Ghi/3LP9juQ=
Subject key identifier: 63:11:8E:26:D7:0D:FF:96:51:23:EB:02:BF:67:2B:49:70:E5:3B:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 804B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4894705CC04111EE901A4BA2775412E6.roa
Signing time: Wed 31 Jan 2024 14:01:52 +0000
ROA not before: Wed 31 Jan 2024 14:01:48 +0000
ROA not after: Sun 02 Feb 2025 14:01:48 +0000
asID: 150812
IP address blocks: 154.197.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32843 (0x804b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 14:01:48 2024 GMT
Not After : Feb 2 14:01:48 2025 GMT
Subject: CN=65ba52d0-f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:29:f6:96:93:14:1b:56:fa:6e:c1:54:b4:
06:d6:f0:0b:e7:09:b1:66:83:67:30:a8:a6:29:f1:
36:c7:03:ec:54:59:2f:cc:b4:bb:a8:69:b6:d2:8b:
9c:62:65:c5:93:01:b1:d6:42:3c:ff:ad:de:7d:f0:
40:65:ad:6e:c7:34:46:52:ac:9a:bc:9f:64:30:8b:
ff:29:c2:4d:08:85:34:5e:98:c7:37:f4:10:c9:8d:
4e:4b:38:ba:1f:c8:cc:47:a7:25:02:ef:0b:0f:c4:
bb:86:0c:c5:29:48:1b:68:6c:5e:66:a2:69:71:dd:
e8:b3:45:de:20:4a:9c:30:d0:b6:1a:cd:98:0e:47:
13:73:70:70:25:87:b8:a2:a1:e7:08:9e:c2:54:13:
23:70:2d:31:25:b1:c4:68:86:36:cc:97:f9:7f:84:
f3:bb:76:85:02:da:d4:8b:97:4e:8e:e1:00:ba:2f:
19:bc:7c:2d:a2:44:f3:fc:ee:05:c9:08:d5:59:1e:
64:eb:5b:43:f6:1c:79:61:69:67:3a:d1:8c:7a:e9:
36:35:47:d9:48:82:81:f8:18:15:aa:f2:8f:c2:57:
56:74:c6:7c:30:13:b9:20:8a:62:4e:d8:02:a5:56:
41:f6:ef:22:a4:3b:95:f1:4d:6b:f7:63:55:5f:db:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:8E:26:D7:0D:FF:96:51:23:EB:02:BF:67:2B:49:70:E5:3B:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4894705CC04111EE901A4BA2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.54.0/24
Signature Algorithm: sha256WithRSAEncryption
58:38:16:5d:df:58:e7:10:62:09:d0:84:61:60:a4:9e:e7:cf:
3f:33:ff:8f:03:6f:3f:73:f8:e4:10:e6:8d:03:c8:ea:54:94:
fc:da:b5:74:88:1e:0b:af:3d:18:4f:33:58:4d:00:fe:07:ee:
86:07:81:d1:57:2a:6c:22:21:d5:63:fe:4e:bb:b2:e1:33:7e:
c3:b1:d6:ad:e5:e7:33:ab:7a:b7:27:53:c9:da:88:62:5e:04:
36:fc:fd:5d:b4:fa:53:8e:55:e6:4f:ea:b8:31:62:09:f4:c1:
22:c8:3e:ae:c0:d5:fa:d6:d5:c8:0b:5f:e2:1d:18:ae:18:17:
c7:23:9b:fd:ff:16:7c:7b:72:96:fc:8a:d5:50:5f:f1:bd:2e:
0e:b1:25:22:47:a8:01:32:8f:8a:a0:fa:f1:20:ef:cc:b4:75:
b6:88:69:2c:f2:cc:68:5d:33:de:9b:2a:04:46:cd:21:a8:a3:
43:50:dc:d6:0f:bb:b0:e2:5d:54:50:c8:bf:cb:bd:7f:0e:45:
5c:09:75:c1:6f:af:70:55:da:2a:94:d7:5b:16:e6:f6:02:64:
3d:31:7f:f2:2e:7f:05:be:af:c3:ea:3d:08:46:c0:d1:7a:0c:
b7:5d:96:cf:13:cc:1c:dc:f3:85:bc:47:cf:db:0c:d1:20:c1:
73:9e:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:22 2024 by rpki-client on console-fra.rpki-client.org