Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E1065CE74C11EEB126D772775412E6.roa
File: 74E1065CE74C11EEB126D772775412E6.roa (raw, json)
Hash identifier: O73mxsPMaNAfaaFw0X2g8XKgrd4QoViCsz8s7Ry/Vdw=
Subject key identifier: 12:0E:F1:87:84:3A:04:ED:99:10:98:A8:37:6A:37:B6:FE:DA:DF:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A443
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E1065CE74C11EEB126D772775412E6.roa
Signing time: Thu 21 Mar 2024 06:30:06 +0000
ROA not before: Thu 21 Mar 2024 06:30:03 +0000
ROA not after: Tue 23 Apr 2024 06:30:03 +0000
asID: 44559
IP address blocks: 154.220.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42051 (0xa443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:30:03 2024 GMT
Not After : Apr 23 06:30:03 2024 GMT
Subject: CN=65fbd3ee-54e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:32:c8:be:96:a2:9b:c3:d1:95:23:a0:1e:
16:86:e9:18:db:a1:f8:b8:81:00:fb:5b:45:2d:77:
1d:61:b8:00:75:55:63:ea:94:c0:24:4c:a4:ce:12:
97:90:0c:d8:75:f7:43:9d:1d:42:d2:db:8c:69:a9:
de:ef:41:b6:3e:2d:31:5a:f5:0b:09:1a:a6:74:33:
a6:80:a4:35:d3:17:b9:12:47:b6:66:d6:0f:30:4e:
84:ec:17:4e:b1:fa:de:ad:1a:22:78:89:f1:3a:cc:
ea:2a:44:23:86:a3:81:84:d6:38:01:09:df:9e:67:
2f:17:6f:2a:ad:82:9c:53:cc:83:90:dc:a1:1d:38:
13:26:b6:68:8a:ee:5b:22:56:00:50:29:47:13:e0:
6c:19:9c:f8:9d:be:c6:b7:e4:20:02:2c:e2:76:97:
39:8e:5b:ff:f6:87:6e:c2:6b:7e:a4:7d:b0:97:88:
43:ea:45:d4:a5:ea:39:23:83:da:c0:1d:db:e9:ca:
4a:45:51:f4:2d:93:af:32:b3:72:c7:17:bb:33:c9:
0b:6d:3b:4b:af:97:89:09:de:48:c0:62:a4:99:a0:
a5:df:9a:d7:60:5b:bf:a2:49:63:28:81:07:3b:7f:
f5:66:50:1c:33:b6:10:4d:86:6a:e5:58:86:c2:9c:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:F1:87:84:3A:04:ED:99:10:98:A8:37:6A:37:B6:FE:DA:DF:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74E1065CE74C11EEB126D772775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.151.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:65:3d:e3:b5:20:d2:58:26:1a:a0:95:71:f5:15:94:a6:e6:
3b:08:4d:08:10:fa:1d:96:d1:e3:4e:e0:f4:43:6b:e1:3b:96:
8f:86:3b:a2:fe:5a:44:ee:24:cc:dc:d0:38:22:f7:56:a4:84:
25:bd:9f:55:bd:0f:7f:6a:84:ac:65:79:6e:ef:6c:11:12:77:
75:de:90:c9:98:ec:bc:a9:ec:eb:5a:e8:80:5e:45:87:21:1e:
0e:f7:fa:d5:76:e4:55:28:0d:80:27:f3:e3:d1:06:96:84:4e:
c3:2f:a9:9d:0d:26:a9:5b:fa:3f:ff:a3:f3:89:a9:aa:44:e2:
b3:2b:ee:1e:ff:fe:cd:35:53:fb:99:ac:15:c9:77:0d:3c:d7:
00:92:e5:fa:90:5b:6a:89:cb:5d:19:2a:d7:cb:b8:02:82:bc:
14:d7:f0:fe:70:32:49:1b:0a:99:2d:da:ed:32:43:0d:46:21:
44:d9:05:df:a6:c1:38:68:0e:71:46:2f:db:45:9b:af:ee:43:
7a:97:9b:76:e5:03:25:dd:ac:ae:4e:40:ca:4d:e2:85:94:22:
54:34:56:b1:35:7c:0b:ad:53:46:d6:30:1b:f3:bf:81:a3:e4:
43:9b:77:1f:c8:ec:89:be:64:d9:fe:fa:32:d4:2f:34:cd:1e:
a8:4a:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:23 2024 by rpki-client on console-ams.rpki-client.org