Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C1FD284FE1711EEA27AFE52017001B1.roa
File: 4C1FD284FE1711EEA27AFE52017001B1.roa (raw, json)
Hash identifier: VGnox4M4PRINjqXjvaZ4/ufZSH18rbTEFwpscf75svU=
Subject key identifier: DB:02:74:30:6B:D4:C2:F9:09:AE:1A:81:0C:2E:F0:A6:3E:30:9D:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C1FD284FE1711EEA27AFE52017001B1.roa
Signing time: Fri 19 Apr 2024 06:37:31 +0000
ROA not before: Fri 19 Apr 2024 06:37:28 +0000
ROA not after: Thu 30 May 2024 06:37:28 +0000
asID: 63139
IP address blocks: 154.93.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44600 (0xae38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 19 06:37:28 2024 GMT
Not After : May 30 06:37:28 2024 GMT
Subject: CN=6622112b-0f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:06:8a:c8:2b:2e:f2:fa:73:d2:38:89:ef:
9d:e9:97:aa:c6:d1:2b:a5:f8:45:a2:84:ee:90:2c:
b3:ae:71:5e:a4:3d:09:4c:26:9d:9b:e1:f9:57:ad:
b0:bc:b1:b0:f2:ca:88:13:df:44:8e:f1:65:e8:46:
b8:11:a4:b3:1e:7c:68:1d:91:e0:97:2d:fb:0e:80:
66:18:e6:c7:dd:4a:79:4a:db:3a:33:a3:3e:24:0d:
e1:d5:d0:dd:3f:77:2a:d5:46:ef:a1:f6:46:4c:9f:
27:d6:2a:96:ba:63:e1:a7:96:88:0b:45:02:ef:8e:
19:b7:26:6d:60:59:93:a1:22:32:b0:db:bf:4f:da:
d2:4c:55:d0:bd:ea:21:a7:16:9e:ab:d9:5d:4e:0f:
55:b0:1c:ea:ab:62:c4:30:77:29:10:cf:f0:ec:cb:
8a:4f:38:46:21:1d:ec:cc:b3:09:e1:a3:c1:28:5c:
36:35:23:dc:e9:3b:03:f3:87:08:a2:08:c9:7e:81:
5e:18:df:1f:92:47:70:6b:24:ea:3d:d8:ee:d9:a9:
61:3f:fe:4d:af:b0:30:f5:a2:87:33:f2:53:ff:08:
a9:f5:14:3d:37:42:04:24:a6:26:fa:fb:26:91:a9:
fe:a7:b8:a2:e0:44:70:64:34:aa:45:dc:1b:79:c9:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:02:74:30:6B:D4:C2:F9:09:AE:1A:81:0C:2E:F0:A6:3E:30:9D:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C1FD284FE1711EEA27AFE52017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.77.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:89:de:7f:26:44:85:90:c0:17:aa:f6:41:18:dc:25:f9:dd:
2f:58:78:5a:81:e5:6c:31:97:19:5b:dd:84:37:38:76:ca:b2:
95:2e:3f:1a:fe:ad:14:4b:c5:b1:50:6f:31:13:4f:8a:df:45:
03:b5:6f:6e:c3:bb:25:63:96:70:6c:b9:5d:22:b7:52:38:67:
04:f3:11:69:43:b1:18:15:b2:d5:19:0f:39:7b:59:54:17:c9:
f9:a5:2b:95:a0:09:12:11:3d:ad:9c:38:45:40:a2:64:50:9d:
07:66:06:c6:ab:66:72:52:39:19:51:2c:8d:d6:e0:14:61:2d:
07:84:b4:e7:ae:a5:46:79:48:65:2e:e4:e2:25:a1:d6:37:77:
63:bd:b4:af:1e:82:40:31:6d:aa:a2:d7:e1:de:2d:20:23:bb:
99:95:64:51:8d:e6:db:6e:93:dd:aa:ae:dc:10:58:03:aa:2e:
7d:01:d2:fc:7d:c5:fd:b5:07:bc:f2:8e:a4:cd:23:bb:3c:da:
98:28:c6:46:3f:95:2b:97:8b:a4:cd:47:d8:12:60:09:86:41:
aa:b4:03:25:07:36:5f:be:bf:24:ab:50:be:3c:e4:b6:94:8b:
1a:87:f3:8a:81:d1:e2:59:05:5f:bf:1d:b0:31:e8:24:00:af:
80:cb:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org