Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DBF8000EFF611EEB2C2D9BE775412E6.roa
File: 4DBF8000EFF611EEB2C2D9BE775412E6.roa (raw, json)
Hash identifier: dHCxo6f7nk89QOijJzBkZgofdE8JERktnYDhAHkAl9c=
Subject key identifier: FC:30:06:C2:FD:C8:F3:C1:02:60:F0:45:6B:02:04:80:C3:F2:6D:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A800
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DBF8000EFF611EEB2C2D9BE775412E6.roa
Signing time: Mon 01 Apr 2024 07:06:04 +0000
ROA not before: Mon 01 Apr 2024 07:06:00 +0000
ROA not after: Tue 07 May 2024 07:06:00 +0000
asID: 138915
IP address blocks: 154.223.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43008 (0xa800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 07:06:00 2024 GMT
Not After : May 7 07:06:00 2024 GMT
Subject: CN=660a5cdc-b70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:13:1c:59:19:b0:e8:58:fe:36:fe:e0:fa:
93:a2:58:9e:c4:af:ed:64:ae:32:86:31:21:c4:f9:
da:d6:01:e4:05:89:39:a6:02:df:3c:4e:b5:7c:de:
21:61:2d:5d:dc:40:d2:50:4c:da:47:bc:10:64:6d:
6b:7f:f6:42:fc:bd:a2:a4:f9:49:89:bc:df:b0:cd:
88:06:5d:9f:7b:84:a2:5b:55:56:e1:bf:e9:4d:56:
7d:05:88:9a:60:bd:c2:1a:1b:e3:68:15:46:69:0d:
f1:42:5a:0f:6b:09:35:92:fc:15:c5:44:6d:e6:31:
ea:20:9e:d7:e6:ea:3e:6e:fb:c1:b7:99:5a:c8:6c:
bf:9f:70:f2:a2:f1:64:99:d3:05:3d:43:d3:33:79:
95:d0:b9:df:a9:d0:8c:80:ce:57:4f:62:4b:0c:f3:
3e:04:d8:9e:4c:90:8e:5b:b3:79:82:2a:8f:df:ff:
f1:ad:d8:bc:f2:45:3a:c5:04:35:9a:7a:77:82:a2:
6e:9b:99:0e:d2:01:d5:3c:e8:49:aa:f0:6a:cb:1e:
82:a3:0a:9f:32:55:5c:f8:37:fd:25:6b:11:07:48:
d6:85:49:37:78:3e:4b:f8:ef:9d:3c:6a:c0:1f:c1:
85:1a:f2:e6:e7:71:28:09:3d:7b:6a:bd:d2:d1:1f:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:06:C2:FD:C8:F3:C1:02:60:F0:45:6B:02:04:80:C3:F2:6D:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DBF8000EFF611EEB2C2D9BE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.37.0/24
Signature Algorithm: sha256WithRSAEncryption
45:82:0e:27:5d:3d:ef:ef:f3:24:74:a0:c6:1f:8d:f4:c3:72:
5d:65:5f:aa:67:84:4b:b4:3a:3a:1f:33:56:f5:66:d9:56:3e:
58:ea:28:2a:c4:01:61:d1:70:39:8e:79:a3:a7:1b:a9:0c:f4:
b5:da:3d:61:9a:1a:01:24:12:4c:3c:cb:a0:46:99:62:5f:bf:
c6:e1:51:ac:8d:13:60:57:75:3b:78:fd:0d:f0:f0:e9:ec:09:
73:a8:c9:2a:45:8a:81:0e:0f:7a:34:c2:d3:52:ba:e6:ee:0f:
c3:ae:fe:ea:b9:e6:66:d7:5f:99:38:4a:4d:26:18:d6:07:64:
90:4f:93:fd:c9:c0:58:a6:16:a6:3b:2e:01:6b:f4:cf:f0:a9:
70:66:96:62:5c:9f:be:70:9b:81:56:25:59:79:1a:11:e7:72:
6e:41:28:c5:a9:53:0b:7a:66:ea:bd:c2:a3:a8:a2:76:8c:ca:
4e:96:78:fb:1f:b8:cc:70:d0:af:8b:ee:c7:3e:56:06:0e:0c:
5c:31:a2:9b:08:48:8a:22:40:24:da:f9:8e:f6:a8:66:0a:fd:
5d:a6:39:a9:e4:03:b4:5b:0a:ed:e8:45:c4:32:f6:1d:17:0a:
24:52:65:2b:07:e5:5e:64:77:9f:2e:aa:1e:36:7d:31:ff:16:
5b:23:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org