Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAE4D66F91811ED811A951B4AD9E6FC.roa
File: 4CAE4D66F91811ED811A951B4AD9E6FC.roa (raw, json)
Hash identifier: oBUBhyMFiD/ThizvPpNEw9oYvFfRViXkCFDdjarTDps=
Subject key identifier: DF:40:D0:F6:B1:B3:C1:21:CE:F6:FD:62:E6:D3:88:D8:35:D9:E4:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2652
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAE4D66F91811ED811A951B4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:17:08 +0000
ROA not before: Tue 23 May 2023 03:17:05 +0000
ROA not after: Tue 20 Aug 2024 03:17:05 +0000
asID: 399674
IP address blocks: 154.205.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9810 (0x2652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 03:17:05 2023 GMT
Not After : Aug 20 03:17:05 2024 GMT
Subject: CN=646c3034-2150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:45:6b:3a:08:a2:89:b0:1c:47:2f:1d:ea:
c7:31:02:e1:ba:76:5d:f7:31:ef:eb:a5:b1:f7:90:
25:02:86:fb:01:09:0c:e9:e2:37:b2:02:34:55:a0:
f8:6e:b6:90:1d:cb:b8:32:21:23:fb:33:1e:4c:bc:
40:16:86:1f:a6:14:2b:a8:51:f5:ea:4f:59:96:7b:
3d:2a:57:82:1b:ee:5d:6e:dc:f4:65:8a:ec:f3:44:
a9:f5:b2:cf:12:d0:ab:15:b6:6f:f9:7e:f3:3f:22:
89:1e:bd:b2:c7:1f:83:4d:fa:70:c3:2a:91:17:86:
f8:c2:c2:fc:af:08:06:f3:e6:bf:a5:ac:4a:65:9e:
56:75:1e:58:2e:75:d7:90:3f:f6:28:ec:92:c1:f8:
3a:d0:49:b2:87:f9:34:79:de:00:c4:d5:fd:d8:d9:
88:9a:21:b8:9f:cf:1f:84:ec:5a:96:b3:d2:b2:2b:
ce:7d:b9:e9:00:a9:97:45:5f:a3:26:89:e1:0a:7a:
fb:7b:3c:f0:da:fd:e8:3e:c8:76:e3:3d:44:78:bc:
f1:3e:81:b2:ad:6c:ab:ef:4a:4a:36:7e:e2:61:a9:
5e:7e:bf:4b:79:ae:0d:af:f2:7d:01:f4:3d:70:fd:
1b:f1:ec:38:a4:86:ba:d8:5b:cb:a3:39:b5:e3:cb:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:40:D0:F6:B1:B3:C1:21:CE:F6:FD:62:E6:D3:88:D8:35:D9:E4:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4CAE4D66F91811ED811A951B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.136.0/21
Signature Algorithm: sha256WithRSAEncryption
53:86:48:bf:36:18:57:99:c8:84:ef:d5:48:93:0f:4e:48:2d:
d9:a2:46:4b:f6:ab:e6:e7:53:87:ad:c7:86:9d:1b:d0:1c:27:
af:93:43:4c:6b:2d:e6:25:b0:e3:65:49:84:7a:82:89:c9:59:
a8:d6:98:d8:01:a5:ed:bd:b5:e4:62:57:c0:e2:f0:76:5b:3b:
75:52:6a:ba:a5:7e:17:d5:45:aa:f5:c9:c8:03:f2:e1:3d:3d:
49:90:d5:91:91:3c:2f:2d:0f:de:32:fc:49:f9:7b:d1:cc:e5:
67:b7:ca:d2:ff:8c:8d:af:49:e3:71:4f:1a:32:47:af:6a:64:
19:7d:c9:fd:51:01:fb:b5:40:5a:31:78:76:7c:bb:7c:02:18:
18:c8:4b:aa:86:f7:50:b4:fb:44:0e:56:82:4c:19:8a:c7:65:
73:9c:74:ab:75:ba:f0:d8:de:7f:d3:a6:7a:0a:54:c6:c1:42:
fb:0e:b2:d5:c7:45:dd:7b:9a:cd:9c:5a:db:bc:ca:5d:d2:94:
a0:b7:68:ba:38:2b:29:46:7f:33:03:ee:4b:e1:43:d8:e9:6d:
aa:fb:cb:a5:4b:54:ec:83:81:64:b6:66:b0:ad:63:42:32:1b:
14:27:3b:a7:1c:4b:32:6c:23:38:26:2e:c2:61:a1:ac:b8:9f:
ee:41:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org