Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9FB302F00711EE9DB86BC4775412E6.roa
File: 4F9FB302F00711EE9DB86BC4775412E6.roa (raw, json)
Hash identifier: feLUfnYElvJgjdZahF5YbUQImvq1itdbchQm2eji888=
Subject key identifier: 10:18:67:61:2F:51:17:AB:3F:4B:82:4F:7D:AD:99:45:61:EF:A6:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A816
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9FB302F00711EE9DB86BC4775412E6.roa
Signing time: Mon 01 Apr 2024 09:07:49 +0000
ROA not before: Mon 01 Apr 2024 09:07:45 +0000
ROA not after: Sat 11 May 2024 09:07:45 +0000
asID: 138915
IP address blocks: 154.203.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43030 (0xa816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:07:45 2024 GMT
Not After : May 11 09:07:45 2024 GMT
Subject: CN=660a7965-4173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:1a:9c:cf:2e:1d:e9:c6:b5:bf:ec:ac:04:
95:a3:14:90:98:a8:ae:1f:c1:93:d1:9e:0c:d0:12:
21:a7:5e:e0:38:ea:f9:c7:6c:0d:87:13:50:bb:31:
80:53:0f:30:b9:00:17:de:b5:94:f6:6c:e3:a9:9d:
e5:37:a4:b0:37:3d:32:28:2c:3a:90:a7:a3:68:ec:
10:d9:58:9e:19:64:29:1f:05:f9:7e:30:cb:fc:d8:
fc:aa:33:22:09:90:92:4a:52:99:b6:9c:7d:01:06:
a3:84:14:b2:c7:e9:88:d2:7d:d8:06:9a:29:27:62:
96:d1:a8:0a:84:14:2e:d1:d9:cc:87:be:b9:56:c5:
e7:8d:76:ee:62:c6:fa:84:4d:c3:ed:99:fb:a9:69:
62:1d:21:97:88:6d:91:cf:31:a0:69:e5:62:a1:db:
7c:84:9a:03:80:54:47:96:e6:9a:b1:8e:52:52:c4:
bd:eb:8e:87:d7:8e:00:46:55:38:d5:2a:d1:5b:5a:
05:5f:af:bb:7b:57:f0:18:fb:6a:ec:c8:ef:95:c7:
c8:74:c1:7f:66:8e:50:4b:45:13:29:42:0a:aa:d3:
16:15:33:53:0c:87:44:5d:64:b1:6f:de:84:87:7d:
65:25:42:0d:1f:c3:0f:43:7e:db:cd:ea:47:c8:b3:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:67:61:2F:51:17:AB:3F:4B:82:4F:7D:AD:99:45:61:EF:A6:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F9FB302F00711EE9DB86BC4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/23
Signature Algorithm: sha256WithRSAEncryption
52:16:9d:77:81:7a:29:22:e4:5d:ee:d0:2e:0f:42:3c:da:0b:
ab:4c:3d:b4:6a:5f:d9:f4:1f:3f:46:00:c7:ea:a8:95:4b:ca:
21:9e:0a:cd:49:30:a6:74:fb:c2:6f:d1:fd:53:64:a5:d9:09:
ac:be:e6:88:6c:ee:43:da:45:de:2e:c9:b1:e7:bb:05:37:f6:
f7:c7:d1:58:13:b1:1c:5a:fb:e6:53:f5:9b:83:a9:b1:76:f5:
63:0a:6f:ef:21:45:13:5a:3a:50:b2:e5:75:bb:4b:49:75:da:
3b:7e:12:95:f9:64:41:6e:6a:f6:aa:48:f3:7d:ee:02:d9:bd:
b3:ac:dc:bd:b3:ad:b3:5b:12:14:fb:a9:84:5e:92:c9:fc:48:
10:75:4f:ca:01:d9:8f:d5:cd:21:d5:3f:f2:36:45:b1:42:ae:
2f:cd:46:dc:43:7e:09:cf:bf:05:fc:23:6b:94:8e:2b:8a:af:
f1:07:42:6d:28:da:d3:ef:74:67:1a:40:73:d2:32:f1:4d:08:
8e:71:e3:f5:2b:d2:fc:2a:9f:2a:73:35:96:17:db:d6:0a:be:
c6:3e:24:fa:01:c0:21:46:93:8a:db:96:3d:fa:6f:ac:4b:4a:
9f:18:bc:96:f9:2e:f2:09:2d:02:fd:a4:bb:bc:1e:84:20:f3:
62:02:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org