Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78620682F7C811EE8E9D246B017001B1.roa
File: 78620682F7C811EE8E9D246B017001B1.roa (raw, json)
Hash identifier: pIWDQL8Jk1NfTlJ9LxC5k+7wcN1iMJe8chVflvGmEgg=
Subject key identifier: 02:4B:A7:5F:FC:4F:2F:75:E6:60:B1:67:04:33:52:29:49:EB:6B:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78620682F7C811EE8E9D246B017001B1.roa
Signing time: Thu 11 Apr 2024 05:58:08 +0000
ROA not before: Thu 11 Apr 2024 05:58:05 +0000
ROA not after: Sat 20 Apr 2024 05:58:05 +0000
asID: 7018
IP address blocks: 154.95.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 05:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43855 (0xab4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 05:58:05 2024 GMT
Not After : Apr 20 05:58:05 2024 GMT
Subject: CN=66177bf0-3719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:17:52:cf:e2:36:0a:fb:8b:e0:1b:1a:08:
f7:d4:60:50:c0:23:e2:98:62:2c:aa:4e:51:e5:b7:
cf:c4:1f:11:b7:59:10:b0:bf:65:00:ab:df:0a:d2:
8a:f3:f6:bd:7a:a5:d2:49:b6:a0:57:ca:1b:d8:8d:
cb:3c:df:f3:12:1d:1c:cb:b3:00:28:c8:86:3f:66:
f0:e2:13:02:b8:7a:b4:c9:86:b7:e4:8e:2e:12:db:
53:01:d7:23:38:7c:8a:b8:0d:0c:74:7c:aa:ca:95:
15:6f:2f:84:a3:68:17:97:27:82:93:cb:24:e1:9a:
2c:a2:e5:67:1e:c2:25:05:57:ca:70:43:d5:79:aa:
d3:59:b3:d8:41:84:a7:dc:71:97:14:d1:fc:ff:3f:
4f:6f:34:08:8b:98:ca:06:8b:86:49:aa:67:b7:10:
68:33:d2:66:77:34:ff:d9:8d:1c:39:44:22:a4:d0:
5b:82:cf:c9:8b:bf:2d:4a:3e:cd:67:13:19:7a:a1:
d5:4f:69:be:c0:8a:aa:d5:02:2d:3e:64:56:8e:3c:
d2:92:7e:18:5e:1a:f6:23:df:0c:02:06:4c:7d:48:
26:09:82:37:3d:1f:2a:aa:a7:d9:9e:56:ef:39:d8:
87:2f:f2:e9:53:f4:31:e3:10:4e:55:4a:0e:d6:ff:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4B:A7:5F:FC:4F:2F:75:E6:60:B1:67:04:33:52:29:49:EB:6B:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78620682F7C811EE8E9D246B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:bc:ae:8f:85:cd:dc:f6:36:b1:82:f2:8d:33:ec:ba:cb:54:
c4:89:b9:f3:61:1c:da:c9:41:29:9c:72:13:84:58:d6:64:ce:
ef:57:55:7f:54:d6:55:00:90:71:d5:45:9a:6e:47:61:40:cb:
e9:cb:23:94:94:b6:b0:44:2b:6a:9b:11:f5:f5:31:99:48:99:
28:d1:6c:96:7c:47:35:10:43:c7:85:65:61:df:9b:50:f4:18:
e1:a5:b4:01:eb:79:4b:a6:42:01:29:29:ba:26:5c:cb:f7:bb:
26:33:d5:96:ed:8a:44:6e:7d:77:75:82:65:38:f6:ad:bc:d6:
08:ba:f8:ef:2f:da:e0:ed:40:69:a1:08:d7:1d:33:26:03:bd:
48:5c:15:39:8a:a7:d9:e8:79:7a:fb:f8:62:15:8f:17:7b:d6:
64:53:68:12:96:69:70:b9:92:7d:36:dc:cb:08:81:70:f2:bc:
25:0e:32:95:cc:68:a7:b1:07:f6:25:42:16:cb:9b:49:80:16:
90:8f:5c:4b:83:e4:49:54:e2:1f:7a:b6:25:02:a5:2e:24:48:
5a:d1:c9:47:56:c4:4c:db:56:65:c4:ef:61:de:2f:d0:55:21:
07:28:d8:4e:d9:cd:64:b3:76:93:3c:bc:c5:4d:47:71:ce:3f:
81:58:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:07 2024 by rpki-client on console-ams.rpki-client.org