Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D290A84E73911EE8ADD345F775412E6.roa
File: 7D290A84E73911EE8ADD345F775412E6.roa (raw, json)
Hash identifier: kmnYIfo0qmbmaUJ9JJbYfALAQdP3XNJtBPEDSYXAYKA=
Subject key identifier: 16:54:4A:56:9D:D6:DC:27:E4:FC:1F:3C:FF:57:8F:61:B3:DB:84:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A38A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D290A84E73911EE8ADD345F775412E6.roa
Signing time: Thu 21 Mar 2024 04:14:19 +0000
ROA not before: Thu 21 Mar 2024 04:14:16 +0000
ROA not after: Tue 23 Apr 2024 04:14:16 +0000
asID: 44559
IP address blocks: 154.221.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41866 (0xa38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:14:16 2024 GMT
Not After : Apr 23 04:14:16 2024 GMT
Subject: CN=65fbb41b-df26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:c5:00:67:77:0b:5f:c5:2f:5c:42:0a:2d:
c0:c6:a4:56:13:3f:a0:49:74:85:b5:27:a0:6a:fe:
47:81:d9:30:be:d5:4d:98:df:1d:99:c7:2b:c3:52:
9c:01:20:95:2e:dd:84:09:11:78:59:96:8a:26:25:
aa:6e:ff:14:8c:f8:98:c2:5d:2e:9d:bb:9c:60:7d:
df:71:ca:8f:79:d2:e1:7e:bc:28:dd:f8:66:6e:01:
04:99:ed:c5:f1:cc:05:b4:ff:df:25:58:c6:8c:91:
70:3b:ff:06:2c:ac:fd:5c:69:33:6e:53:3e:4d:aa:
9d:df:8b:e2:51:bc:9b:9f:98:90:51:87:8f:c0:8c:
ef:a2:69:99:b2:d5:82:49:53:df:28:31:df:2e:f8:
f2:81:3d:45:97:e6:ab:75:8c:d6:00:53:52:31:85:
d5:c8:5c:55:71:83:2d:3a:5a:c0:5e:54:c3:f2:5b:
9b:b9:22:a8:f9:3a:1e:0a:84:6b:09:c9:d7:a3:69:
d4:62:fb:03:d6:dd:00:58:cc:7b:d6:b9:6a:3d:1b:
a0:ea:ab:39:c1:c4:2e:37:d2:15:07:d6:6e:00:2d:
0a:b3:51:cc:84:bd:56:6b:28:c9:0c:d5:50:12:27:
18:c0:b7:7b:4f:7b:50:f7:57:cd:1a:8f:43:0f:1c:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:4A:56:9D:D6:DC:27:E4:FC:1F:3C:FF:57:8F:61:B3:DB:84:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D290A84E73911EE8ADD345F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.244.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ae:7c:c6:48:c4:72:09:d2:5d:f2:3f:44:4e:83:30:d7:d3:
a7:75:0d:77:73:2b:08:86:4e:fa:7a:d3:57:5b:d8:0b:10:b9:
56:46:4a:ef:a9:22:81:8c:fa:87:a9:c9:a7:9f:4d:dd:cb:da:
ee:98:5c:32:ba:1a:cc:8c:bc:30:c2:b4:17:16:04:59:45:f3:
8f:18:a7:f8:1a:b1:f9:c7:ad:ec:c3:e7:0a:c3:d6:bd:48:93:
c5:9e:ac:70:b5:ba:34:1d:89:b2:10:bf:06:d8:60:9d:33:98:
9a:a0:9e:ce:84:91:12:fd:bd:e3:ca:38:de:46:1c:cb:61:61:
b7:ce:69:75:fc:cb:cd:bb:f7:16:e3:ae:15:2a:3e:45:36:57:
be:63:ff:5d:61:26:85:16:72:08:0a:b7:f0:bb:d3:b9:c6:67:
16:fa:e6:7d:d9:f8:96:9c:51:3d:47:4b:31:ed:f9:b2:c3:5e:
ca:88:b4:03:a8:07:9e:b7:04:96:27:1b:3e:58:31:7c:af:91:
37:ac:d6:23:f1:84:eb:ca:7b:fe:49:1e:8b:29:c6:a0:b7:cc:
19:81:ab:ef:bc:22:57:12:62:c2:ac:c5:9e:a2:47:95:8a:14:
74:e6:90:09:8c:74:f6:08:85:49:b0:9d:cb:b7:97:69:7a:63:
53:cd:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:22 2024 by rpki-client on console-fra.rpki-client.org