Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73CD2D62E75711EEBE4740C7775412E6.roa
File: 73CD2D62E75711EEBE4740C7775412E6.roa (raw, json)
Hash identifier: CYc8hxMaeh+vDpjIltWg9DMom8qrL2oK282InbM/Pi4=
Subject key identifier: 69:DB:40:91:7F:4A:7B:A8:B9:6F:D4:81:C9:C8:B4:EC:98:52:3A:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73CD2D62E75711EEBE4740C7775412E6.roa
Signing time: Thu 21 Mar 2024 07:48:49 +0000
ROA not before: Thu 21 Mar 2024 07:48:45 +0000
ROA not after: Tue 23 Apr 2024 07:48:45 +0000
asID: 44559
IP address blocks: 154.218.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42159 (0xa4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:48:45 2024 GMT
Not After : Apr 23 07:48:45 2024 GMT
Subject: CN=65fbe661-e9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:cf:8f:d8:03:6c:f5:ec:8d:18:46:41:4d:
55:df:55:5f:12:3a:0f:4d:9a:27:c6:30:c4:b5:df:
1f:86:5e:1e:a7:dc:dd:6a:16:4a:9b:b5:5a:2a:7a:
ba:bd:4d:19:37:6f:ab:10:6c:2f:1b:96:64:cb:c0:
69:53:84:52:96:34:d0:90:9a:55:40:1c:bc:80:53:
fc:46:1c:cf:5f:12:29:3e:63:17:5b:da:6b:2a:27:
c8:71:fe:a5:7d:a5:4a:02:53:d7:43:37:38:f1:8f:
c6:5e:35:87:07:71:43:9a:c8:f7:fb:66:cf:10:09:
a4:8d:15:00:95:27:b5:1c:cd:9b:dd:d1:8c:3a:27:
45:f8:bf:65:11:d5:0b:92:20:e3:dc:92:05:94:b1:
4b:49:65:d2:e8:4d:21:d3:4a:53:6b:2f:7a:5d:de:
d0:c3:c0:9e:2d:ae:88:8e:6d:aa:d3:36:da:64:88:
5d:c4:c9:d9:4c:f2:b9:64:7d:f6:e8:2a:f6:59:8e:
2d:25:e9:d1:2c:15:4d:db:9d:af:2a:01:aa:98:40:
f2:a7:ee:e1:42:89:98:fb:04:f1:ae:2c:3a:c2:09:
7b:55:42:7f:80:71:5f:22:93:04:7e:dd:74:91:68:
8b:0e:8d:f6:93:b0:d6:a0:97:93:62:0c:d0:ca:13:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DB:40:91:7F:4A:7B:A8:B9:6F:D4:81:C9:C8:B4:EC:98:52:3A:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73CD2D62E75711EEBE4740C7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.33.0/24
Signature Algorithm: sha256WithRSAEncryption
15:52:4f:a9:2e:b0:b4:08:29:b5:15:e1:7a:9a:0c:45:e8:83:
c5:e8:40:49:38:9a:da:0a:76:c8:a7:3f:73:ac:39:0d:3f:7a:
1d:61:b3:fc:f5:7d:a3:72:33:5f:6c:1c:e7:63:8b:59:5f:b8:
9a:f2:46:ec:4a:1e:7f:de:55:7a:85:26:1c:60:b8:45:72:38:
31:71:63:e9:01:2c:7d:b7:69:34:e9:47:4a:84:8b:e0:0f:a7:
31:45:14:69:5b:ee:00:af:e3:c6:3e:08:ee:50:9a:2c:9f:0b:
aa:2e:c6:f6:44:64:b7:45:c5:c4:e2:55:69:5b:e1:dd:40:e1:
66:2f:05:6a:d9:36:49:b1:77:a2:28:a4:4f:93:2c:05:bb:f7:
dd:26:e8:c3:7c:f3:d0:04:99:59:fb:9a:69:15:c7:e6:7c:bd:
60:2e:80:5e:1e:e1:3a:b6:2d:fc:ac:9c:72:8a:f6:d8:f3:d8:
6a:1d:39:9b:ba:8b:2e:44:9d:9a:fd:11:fd:68:e6:f5:b0:4b:
43:f4:ec:d6:5c:b7:fd:2c:6f:bf:7a:98:00:23:90:3d:2f:68:
60:34:fe:f3:3f:a6:07:d2:58:b4:8b:04:b8:87:26:fe:8e:32:
9f:38:52:91:a1:b8:e5:ea:f5:b3:ca:47:f9:e9:1c:8a:e6:92:
60:f4:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:20 2024 by rpki-client on console-fra.rpki-client.org