Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D63C352E73911EEBFA2D35C775412E6.roa
File: 4D63C352E73911EEBFA2D35C775412E6.roa (raw, json)
Hash identifier: z5wIE77Si91+vRQ6MpNubLu4C45Ms0/a4O7IBq/Ai5I=
Subject key identifier: F7:BE:19:3A:C9:DE:66:98:B2:74:53:24:FA:3C:14:CD:19:2C:35:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A388
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D63C352E73911EEBFA2D35C775412E6.roa
Signing time: Thu 21 Mar 2024 04:12:59 +0000
ROA not before: Thu 21 Mar 2024 04:12:56 +0000
ROA not after: Tue 23 Apr 2024 04:12:56 +0000
asID: 44559
IP address blocks: 154.221.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41864 (0xa388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:12:56 2024 GMT
Not After : Apr 23 04:12:56 2024 GMT
Subject: CN=65fbb3cb-8991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:82:71:cc:e3:a7:97:17:93:b4:b7:a1:69:
7d:56:d0:10:45:27:5d:1b:26:0d:82:16:f4:6c:d1:
a3:83:19:60:7b:2f:6a:af:d4:9c:f3:c7:63:e9:68:
90:31:b7:0f:1f:43:09:e2:86:79:22:34:fb:7b:2d:
ce:b1:04:d3:19:04:e2:34:9c:82:de:81:13:af:66:
fd:79:59:09:f4:6f:80:53:fa:21:c4:0d:5f:c5:b9:
04:9f:24:98:04:18:6d:1f:a1:f0:dc:83:4d:af:51:
58:90:bf:3c:78:a2:a8:bf:77:3a:6b:95:e9:01:eb:
4b:55:cd:44:4c:60:98:48:c7:26:db:b7:16:56:3d:
17:1c:73:42:fb:cc:dd:5b:b1:8b:ef:46:01:64:24:
9c:29:bf:15:46:2f:29:ef:b9:e4:37:a5:19:a0:17:
30:34:6d:8e:29:44:44:98:0e:e9:86:17:5a:ed:0d:
86:aa:d3:ed:ed:49:4f:aa:ce:0b:df:fc:cb:5c:54:
52:da:8d:63:87:08:db:c5:ff:66:f8:0c:68:4b:75:
ef:1f:c7:65:d6:b9:30:c8:9b:f7:df:1e:35:de:43:
39:c5:08:71:db:be:7d:37:46:e2:21:45:ab:92:62:
b4:9a:6e:dc:91:71:ad:31:de:68:3f:b8:6e:b3:94:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BE:19:3A:C9:DE:66:98:B2:74:53:24:FA:3C:14:CD:19:2C:35:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D63C352E73911EEBFA2D35C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.245.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f3:c5:e7:cc:0c:5a:fc:60:2a:36:f6:7c:a2:64:7e:4d:7f:
76:78:3f:10:18:82:0b:f1:80:d6:08:50:71:64:9f:2e:72:07:
22:4d:3b:1b:8e:32:8a:e2:8b:7e:09:2c:8a:d2:e5:75:8c:77:
19:e4:78:ef:d0:bd:61:f8:b5:ac:d4:2a:b5:5f:01:f4:8f:eb:
18:46:d0:2c:40:c6:63:b3:c0:79:f8:12:83:6b:f9:85:ab:50:
43:9d:fe:fd:3c:8f:09:8a:f0:59:35:16:5f:83:70:61:a8:44:
e6:8b:9c:8e:4d:01:b7:42:88:00:8c:63:c0:bc:75:1f:4a:f9:
c2:95:4f:ea:ef:4e:52:13:31:42:96:28:f7:04:64:93:33:e7:
7a:fd:06:7e:a1:7d:11:90:ae:fa:c8:b4:ba:66:51:00:1c:34:
ef:b2:2d:7b:97:2d:df:f0:16:4d:a4:97:f1:3f:d4:e5:3d:88:
ac:7e:b1:2e:15:74:97:a5:3a:67:ae:e1:17:17:19:b4:5a:c7:
e5:1d:60:7a:03:fa:99:ce:5b:9d:36:59:1e:e2:40:d0:fb:ae:
d2:46:5d:72:d6:ac:07:9b:5f:13:ce:02:fa:bf:95:9a:da:dc:
b5:89:06:d4:7a:6e:7a:78:d1:17:f2:ec:b6:07:29:1a:55:93:
02:3f:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:17 2024 by rpki-client on console-fra.rpki-client.org