Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618523C0F17111EEB843CA5C775412E6.roa
File: 618523C0F17111EEB843CA5C775412E6.roa (raw, json)
Hash identifier: cA3Y5YKvYv/z2zeHRCs09wgORolauAJB30XNOboTnp0=
Subject key identifier: 9E:20:2E:07:AC:6D:B7:9A:0F:00:B8:A6:8A:49:91:5E:A7:9F:05:89
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A926
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618523C0F17111EEB843CA5C775412E6.roa
Signing time: Wed 03 Apr 2024 04:19:37 +0000
ROA not before: Wed 03 Apr 2024 04:19:33 +0000
ROA not after: Sun 05 May 2024 04:19:33 +0000
asID: 213323
IP address blocks: 154.197.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43302 (0xa926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 04:19:33 2024 GMT
Not After : May 5 04:19:33 2024 GMT
Subject: CN=660cd8d8-aae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:58:4b:5f:28:cd:3a:e7:d2:a3:18:db:a8:
2b:d6:ef:99:3b:f0:6b:1f:8b:8b:e5:bd:48:01:53:
17:7e:d6:02:b0:8f:d3:5d:29:27:6d:39:32:ac:34:
16:a9:1c:83:41:75:c9:93:e7:70:26:17:f3:ad:3d:
53:1e:79:04:87:ea:8c:95:ba:87:f0:c5:26:fa:b8:
22:0b:45:0c:e3:c1:e7:1c:e7:48:b9:53:3c:cc:a1:
33:76:32:d0:a6:54:ed:11:41:75:79:19:c4:57:4d:
cb:50:52:22:4f:24:48:b6:c4:6e:85:4e:6a:0a:18:
2a:59:21:33:21:4e:08:26:8f:d9:c7:1a:b6:fa:d8:
f4:53:85:e5:83:29:3b:c1:0b:9f:03:5d:33:af:25:
e0:ba:de:5e:b5:ad:eb:a0:bb:40:26:de:d4:1c:95:
fa:48:f2:03:78:78:ad:b1:f5:dc:86:18:26:1a:a3:
42:10:6d:28:fd:3a:12:98:8e:50:e7:ea:49:b3:b9:
aa:e9:1a:6e:cf:b1:27:f0:05:9e:6e:11:f7:dd:0b:
ef:60:5e:f7:5d:b0:a0:6f:9a:2a:e2:f5:54:40:5a:
d6:c2:a3:e9:8a:dd:9f:f4:67:76:3f:8d:fd:17:ac:
3f:4f:c3:e7:ae:e1:47:35:92:c2:50:75:5e:f6:56:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:2E:07:AC:6D:B7:9A:0F:00:B8:A6:8A:49:91:5E:A7:9F:05:89
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/618523C0F17111EEB843CA5C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.71.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ac:47:d9:72:54:bf:56:c0:ca:01:89:f2:e3:6b:55:8e:cd:
bc:e2:10:bd:79:bb:3a:3d:49:d5:d9:4d:0a:30:20:3e:dc:ec:
c9:5b:1a:58:0c:7a:40:b9:fc:43:60:28:ec:fa:15:97:5f:0d:
3d:df:76:9a:d6:63:14:41:c9:d6:3b:1b:11:98:e9:29:a3:0c:
25:31:6e:5f:23:32:2d:12:73:3b:46:34:b4:01:be:26:c7:15:
6f:78:d0:88:db:9d:02:79:79:aa:e0:a2:73:cd:71:07:ad:a0:
79:a2:34:97:c5:f6:99:f0:8e:88:d4:63:ae:91:42:cd:3b:87:
19:96:a3:31:3f:fd:50:a8:94:10:76:74:42:81:f3:b8:1b:8c:
b2:4c:f9:1a:2a:a8:1f:7f:e0:92:a4:b3:e9:75:70:48:77:bd:
6f:41:d2:a8:69:3f:bc:c1:e2:61:8b:a6:fc:24:7c:2c:6b:5e:
e3:46:6a:5c:ad:d4:29:4c:a1:bc:54:fa:73:52:6d:32:c7:6b:
0c:99:68:13:4d:59:d3:f2:91:da:15:2c:23:d0:f5:82:48:d1:
25:64:37:bb:3a:1b:ed:db:f5:82:42:bf:5f:16:96:2c:60:74:
23:bf:23:5c:2f:a3:88:c6:37:91:c8:91:b8:f4:5b:9c:74:cf:
6b:7b:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:10 2024 by rpki-client on console-ams.rpki-client.org