Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DB2212EB2A11EEB1DBD6BD775412E6.roa
File: 53DB2212EB2A11EEB1DBD6BD775412E6.roa (raw, json)
Hash identifier: akHwf+Z0HH1yyQxZTTha1S24xOTdfKC6k02pT2Y8FiM=
Subject key identifier: E8:AC:0E:F8:91:E2:9B:32:21:0D:D2:BC:0A:95:B8:23:CE:C3:F9:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A688
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DB2212EB2A11EEB1DBD6BD775412E6.roa
Signing time: Tue 26 Mar 2024 04:35:52 +0000
ROA not before: Tue 26 Mar 2024 04:35:49 +0000
ROA not after: Sun 28 Apr 2024 04:35:49 +0000
asID: 149440
IP address blocks: 154.91.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 05:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42632 (0xa688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 26 04:35:49 2024 GMT
Not After : Apr 28 04:35:49 2024 GMT
Subject: CN=660250a8-7040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:c1:fa:d0:8e:91:1f:6a:11:ad:75:e3:36:
8e:24:6a:a1:36:82:65:dc:42:38:5f:bc:ab:64:8d:
ee:a5:79:df:e9:ef:d8:0e:63:25:40:d3:dd:92:40:
58:a4:30:b2:6d:77:f0:dc:5d:66:80:53:ed:86:fa:
37:26:7e:4a:5a:79:4e:f8:67:e3:e9:bb:3f:a3:8b:
28:92:bb:6d:37:a3:f0:2a:4a:9d:af:fd:93:7d:d7:
40:b0:11:8d:a8:e7:f6:6a:c8:39:d7:de:c2:b7:bd:
cf:1f:8d:a9:27:69:53:22:6d:6c:ea:61:1a:00:79:
b8:e9:4d:53:34:ff:6d:5a:f2:23:73:70:4e:3e:4e:
d1:63:03:85:89:5e:23:08:18:57:d7:00:16:c6:c7:
ec:ea:16:76:7d:06:6c:82:78:23:d9:e1:61:92:1f:
76:d7:31:cc:01:37:29:ef:f2:ed:b0:0d:f7:06:44:
cc:95:36:1d:62:60:42:1a:6b:fa:c3:44:1a:95:b9:
2a:2c:dd:17:23:4b:c7:79:e0:82:57:a1:87:00:97:
19:77:e3:be:e0:30:f6:97:d7:61:2e:ae:16:39:26:
d0:08:bf:f2:bf:73:37:9e:13:80:db:8e:4e:c1:23:
68:36:a7:89:b6:a2:e3:fe:ae:7e:ae:2d:31:43:ad:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:0E:F8:91:E2:9B:32:21:0D:D2:BC:0A:95:B8:23:CE:C3:F9:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53DB2212EB2A11EEB1DBD6BD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bd:15:30:8c:98:02:b5:95:58:71:00:c1:7c:d4:d5:1e:f6:
f7:40:41:44:f9:26:a5:35:eb:21:c8:30:db:65:1b:67:ff:1d:
d5:19:f8:b1:a1:5e:b3:f7:c1:04:c4:1e:38:fb:3f:30:bf:2c:
44:26:0d:67:a4:0b:43:6d:25:0d:15:f6:79:9c:18:9f:aa:39:
d3:d8:5c:58:eb:4b:83:6b:13:db:6c:57:73:35:ba:87:50:cc:
4b:29:f1:db:1d:eb:86:08:9d:39:c6:7a:f4:56:cf:4d:40:86:
6b:4d:02:45:c5:45:76:e1:5d:22:c7:1f:91:ae:c6:74:63:45:
23:16:ea:8a:c0:e2:e3:94:2e:3e:c1:f5:90:a3:d3:4b:31:42:
ca:66:45:f4:bd:6c:80:dd:d1:c7:a4:b9:fa:9d:19:f2:10:9f:
f2:b8:9f:f8:f5:11:ae:42:62:c3:db:f0:a5:df:2e:0b:d5:af:
9e:bc:7b:ab:6f:1b:ca:0c:62:71:28:14:ab:a2:a9:6f:65:e7:
1c:27:8e:fe:ca:61:2e:fc:40:a4:d6:51:76:98:13:7b:3a:4b:
42:9c:26:52:53:0d:0e:eb:60:ec:2c:b4:9c:9d:a7:bb:98:da:
0d:9e:e8:93:02:2f:8d:bc:e5:91:29:af:86:32:30:58:ae:0f:
48:31:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:31 2024 by rpki-client on console-fra.rpki-client.org