Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DDC929082BD11EEB923D4394AD9E6FC.roa
File: 4DDC929082BD11EEB923D4394AD9E6FC.roa (raw, json)
Hash identifier: U5vne+YEvLs4J7ZTIv60hixAqWR6ZFqv/4whl07bhhU=
Subject key identifier: C1:5A:2E:FE:6A:7C:71:89:4B:33:BE:16:22:C4:62:E0:79:04:62:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DDC929082BD11EEB923D4394AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:13:26 +0000
ROA not before: Tue 14 Nov 2023 07:13:23 +0000
ROA not after: Tue 12 Nov 2024 07:13:23 +0000
asID: 397630
IP address blocks: 154.202.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20470 (0x4ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 07:13:23 2023 GMT
Not After : Nov 12 07:13:23 2024 GMT
Subject: CN=65531e16-a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:92:1d:cf:1d:9c:02:22:e9:8b:be:96:71:ae:
f4:b0:20:25:a9:af:f0:7b:05:cf:a4:82:8d:ad:6c:
b1:da:ba:d5:a5:70:cd:db:03:9a:a1:55:8c:30:82:
91:7f:32:c9:91:83:cd:76:54:4b:e6:b8:56:94:70:
bf:56:1e:6e:f1:d2:95:7a:94:96:4f:62:8a:79:8b:
0e:a6:a0:e5:2a:77:91:fb:4d:59:53:83:d6:4b:90:
24:79:b4:81:7d:e0:c0:93:cb:e5:c8:77:14:86:52:
72:a0:b7:5c:8f:ab:06:19:ab:f2:57:60:c9:21:2a:
70:79:be:35:d4:27:5c:64:85:f9:21:42:8b:80:2e:
59:f3:ae:76:bb:14:d0:7f:3b:5f:25:0a:7a:3d:5f:
e9:5f:d1:5a:64:fc:db:1f:5f:6f:da:d5:d6:50:59:
1f:a7:fc:44:67:4d:fb:30:2f:7a:8e:21:01:bf:d6:
f2:df:ea:4c:bf:89:80:50:c4:72:87:b9:bb:88:da:
ab:52:ef:91:1b:fd:af:99:e7:8a:50:70:09:4a:6d:
09:3a:22:c5:5c:eb:d0:7b:5f:7b:d5:7d:17:84:ba:
7a:16:9c:4c:8f:0b:bf:89:4f:d7:9d:7d:0d:34:02:
2c:cd:1c:56:79:11:ac:35:43:39:e5:e4:ad:5b:1e:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:2E:FE:6A:7C:71:89:4B:33:BE:16:22:C4:62:E0:79:04:62:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DDC929082BD11EEB923D4394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:72:51:4a:2f:1b:d7:59:64:c7:ca:b7:9f:a2:9c:99:0a:d1:
56:10:11:cf:06:86:3c:79:84:b3:0e:ba:1b:3e:1c:0d:13:12:
8f:52:9f:a7:b1:70:69:e8:1b:24:2c:65:62:73:4d:34:da:e3:
34:aa:f6:f0:67:9e:c3:f8:f1:66:3c:9a:78:fb:13:4c:cd:f2:
50:29:0d:ae:98:48:47:34:42:85:10:18:5d:67:1d:b8:7a:73:
54:1b:9b:07:86:7c:a6:fc:85:db:00:0c:ac:9f:b9:cd:8c:8a:
57:ad:6b:4b:49:67:97:e8:7b:65:42:18:01:2c:73:f3:c2:3f:
be:2e:43:0b:20:fc:e6:53:d5:7f:75:48:6f:6f:df:4c:22:86:
87:53:6c:86:03:d0:eb:46:ce:1a:4e:c1:67:3e:33:f4:47:86:
ae:01:a6:43:ff:63:58:58:75:d7:3f:b8:f0:0b:90:e5:11:d1:
59:df:b7:be:1d:24:e5:97:68:71:3b:8a:df:a9:49:2a:10:ec:
88:46:54:e2:8c:7b:80:46:85:19:d8:73:5a:d4:87:19:6c:9b:
46:d2:37:03:3f:39:41:a0:e2:6d:94:e4:9d:ad:31:8c:e7:68:
1a:b5:13:46:eb:12:09:73:61:4c:56:17:fd:7c:58:95:36:00:
cc:d9:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org