Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C6C57AAF01311EE9302CCA1775412E6.roa
File: 5C6C57AAF01311EE9302CCA1775412E6.roa (raw, json)
Hash identifier: tC7ksQrgy25RrfNacWd3o2wA8HCg3Av0eqfCYSLZ+xg=
Subject key identifier: 1D:76:FA:9E:47:88:C0:34:25:A0:D1:22:B7:3F:8D:38:F5:1B:8A:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C6C57AAF01311EE9302CCA1775412E6.roa
Signing time: Mon 01 Apr 2024 10:34:04 +0000
ROA not before: Mon 01 Apr 2024 10:34:01 +0000
ROA not after: Sat 11 May 2024 10:34:01 +0000
asID: 63139
IP address blocks: 154.203.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43172 (0xa8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:34:01 2024 GMT
Not After : May 11 10:34:01 2024 GMT
Subject: CN=660a8d9c-5a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:aa:00:22:72:eb:2a:b6:2b:3b:5a:b4:a6:
c4:a7:a2:70:bd:5f:c8:0f:4f:2c:54:33:df:77:f6:
2e:6a:25:53:3a:62:e8:2e:60:d8:c2:48:93:36:6e:
d5:fb:92:5f:1f:c7:7d:7f:b5:e1:b8:7b:25:a3:85:
ff:7c:11:3d:8e:90:90:de:8e:01:5b:95:2e:50:38:
76:79:1b:49:6a:d8:18:da:e0:8c:71:cf:a4:06:68:
51:e2:32:92:bf:21:37:b7:45:3c:b5:5e:18:60:d6:
07:55:76:ba:c3:6a:f0:7c:90:01:1e:71:73:d6:09:
f6:32:f2:24:8f:eb:ca:15:6b:d9:30:32:2d:ba:cf:
32:90:4e:cd:2a:cc:a0:28:d8:92:56:85:da:96:20:
43:98:9e:a3:f7:ff:ed:32:b8:36:17:05:53:3f:9d:
64:13:86:cf:51:94:c3:cc:a1:7c:35:7a:6e:f5:ab:
1a:65:89:b5:49:07:dc:bb:01:94:d0:f9:c1:f5:2a:
6b:a5:9f:7e:90:9d:ad:6a:9a:bb:b9:0b:7f:63:25:
02:87:e0:04:bb:2d:bd:97:30:54:76:75:d2:74:7e:
42:1e:33:fa:21:00:c8:f5:55:28:4c:fc:1f:3c:c4:
f2:8b:d3:87:82:54:87:97:a0:3f:94:ad:d9:b7:3c:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:FA:9E:47:88:C0:34:25:A0:D1:22:B7:3F:8D:38:F5:1B:8A:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C6C57AAF01311EE9302CCA1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.186.0/24
Signature Algorithm: sha256WithRSAEncryption
79:08:0f:f2:c4:5e:ed:ed:35:d5:26:a1:3a:41:ed:fa:3c:86:
41:85:c7:73:f3:e8:e5:f2:07:01:af:89:01:38:f5:26:fe:75:
fb:f4:9f:5a:7f:ca:d4:04:af:f6:0a:8b:21:ca:cb:f4:5b:77:
8a:4e:ca:c9:3b:7a:d1:3e:6c:02:a3:98:3d:e7:07:a3:df:e1:
52:29:ac:b1:fe:05:46:49:c7:a8:b8:d1:4c:72:89:a5:6a:aa:
d2:df:0f:77:d3:a1:3a:db:6d:c4:50:d7:73:1f:98:e2:b5:94:
1f:56:c9:dc:06:2a:38:48:b6:74:60:19:71:6d:29:70:c2:51:
55:5b:8d:cd:0d:1d:9b:eb:b5:58:88:9d:c4:db:24:c7:5c:1b:
6d:5d:b8:e7:ee:76:c9:a3:9e:28:2c:fb:6b:93:b5:ee:b6:29:
55:b1:ff:2c:3d:5b:d7:28:37:91:c8:dc:37:b7:bf:12:5d:2f:
52:79:1f:9d:41:aa:0c:43:d6:5f:7d:cd:65:ef:2b:2c:f3:4c:
aa:f9:15:c7:c1:d4:74:8e:ff:c5:fd:45:56:ff:14:25:6d:1f:
a1:fa:7e:3f:06:ee:c1:3f:0a:02:dd:75:63:5c:65:36:35:61:
f7:d0:b9:f3:b2:7a:7a:1d:b2:a1:1e:32:19:15:bc:d8:7b:72:
00:80:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org