Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F2A74AE78311EE89B5C59F775412E6.roa
File: 51F2A74AE78311EE89B5C59F775412E6.roa (raw, json)
Hash identifier: T+OkqdSg0Hy/210ykjkGWSGbPDVU3WPKGt4kkDxM5uo=
Subject key identifier: CD:F4:18:87:38:87:00:3C:D5:18:DB:15:3A:9C:8E:5E:B8:40:DD:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A589
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F2A74AE78311EE89B5C59F775412E6.roa
Signing time: Thu 21 Mar 2024 13:02:50 +0000
ROA not before: Thu 21 Mar 2024 13:02:46 +0000
ROA not after: Tue 23 Apr 2024 13:02:46 +0000
asID: 44559
IP address blocks: 154.210.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42377 (0xa589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:02:46 2024 GMT
Not After : Apr 23 13:02:46 2024 GMT
Subject: CN=65fc2ffa-3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:2d:a7:bd:4c:8d:bc:c1:05:21:79:2c:11:
33:4c:4c:d2:b8:16:44:d6:77:26:68:2a:4f:7b:b5:
1f:c4:eb:fb:8e:ad:39:50:04:ec:d9:e0:55:e5:e9:
cf:7d:58:a6:7b:8e:f8:95:bc:95:d0:45:9d:15:fe:
3b:d0:56:cb:09:c3:3c:c3:5b:c2:9a:9e:85:28:ff:
b4:ce:c8:2f:a7:8f:fe:13:49:b8:bb:41:3a:2c:40:
93:8c:3f:25:e4:15:5c:33:65:cc:fa:03:c6:3d:7b:
65:f2:e5:2d:f7:ac:46:82:6e:e1:5d:25:7c:dc:81:
be:b6:40:98:48:e1:79:20:a7:c9:84:77:4c:2d:f9:
03:3d:fc:c4:6a:2a:d1:83:2f:d0:44:44:cb:77:06:
69:ea:e5:97:a6:01:2c:22:af:e7:58:ee:e5:00:43:
06:a3:d9:ec:28:17:b8:ad:04:24:45:d0:9a:2f:e6:
b1:f2:54:b5:df:73:ec:bf:b7:cd:76:20:b5:91:ce:
7e:f9:95:53:d2:16:ec:da:8c:77:f2:33:00:db:92:
85:b0:1f:c4:2e:94:46:4f:ca:bb:21:b8:bf:7a:cb:
1f:d1:0f:01:93:c1:9a:e1:f2:b3:9e:df:dd:e6:ab:
5a:2c:f4:55:79:2f:eb:2b:6f:93:75:47:51:89:87:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F4:18:87:38:87:00:3C:D5:18:DB:15:3A:9C:8E:5E:B8:40:DD:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/51F2A74AE78311EE89B5C59F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5c:5c:0e:09:03:cf:e5:36:3e:ac:2d:c5:79:22:89:61:d7:
ab:d3:22:3d:06:36:3f:4b:e2:70:b1:6d:6b:ba:df:b0:c8:29:
da:42:f6:87:b4:56:19:2c:09:2a:85:48:4c:dd:76:58:48:7f:
2b:30:6c:18:d9:b0:9d:9f:26:a5:80:0f:7b:57:cc:23:5e:af:
19:55:e7:25:5d:24:bd:e7:ca:6b:0c:d5:35:91:e9:c9:59:31:
a6:e7:1c:38:8d:c4:34:be:4f:9d:30:72:59:e9:9f:4b:4d:fb:
aa:3f:17:39:da:8a:76:7f:50:3b:2e:d3:4b:c7:a5:a9:c5:8f:
c7:e9:40:bb:06:00:43:b7:6b:e2:fe:0b:b3:21:94:41:ae:f8:
0f:ca:04:85:6a:9f:21:5f:d9:f2:64:74:2e:d0:ef:88:1a:60:
04:45:d8:49:39:c6:4c:da:86:28:6f:78:88:37:1b:cd:30:9d:
42:4d:f3:78:75:e3:7f:6e:27:fc:e6:99:b2:ca:bf:e4:cf:0a:
e4:d2:a7:34:95:95:0d:ad:b2:50:bd:0f:f6:dc:8d:ff:d3:b8:
5a:fc:1d:4b:81:0e:88:40:e0:24:6f:12:27:cc:29:83:ae:45:
9f:63:10:2a:4a:79:e5:71:5c:45:57:cc:f3:af:86:67:d1:ea:
38:16:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:18 2024 by rpki-client on console-fra.rpki-client.org