Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9A2AF2FD5011EE80585203017001B1.roa
File: 8C9A2AF2FD5011EE80585203017001B1.roa (raw, json)
Hash identifier: Y8W4jezQpVLHwXoGuArGLq+74VyleTbxIfhEdzY6jhY=
Subject key identifier: 13:F4:A0:1D:2D:93:3E:02:10:B7:D6:78:8F:FE:8B:26:39:CE:8B:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE2D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9A2AF2FD5011EE80585203017001B1.roa
Signing time: Thu 18 Apr 2024 06:54:49 +0000
ROA not before: Thu 18 Apr 2024 06:54:46 +0000
ROA not after: Fri 26 Apr 2024 06:54:46 +0000
asID: 39600
IP address blocks: 154.206.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 06:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44589 (0xae2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 06:54:46 2024 GMT
Not After : Apr 26 06:54:46 2024 GMT
Subject: CN=6620c3b9-ad9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:51:37:6e:a1:c0:4c:f2:4e:f0:73:71:d8:
39:10:ba:2e:bc:2a:36:69:3d:04:9b:b4:36:b7:18:
ac:3d:0a:20:33:d0:e2:58:a9:68:b4:51:07:15:60:
ea:cb:78:14:7e:24:f0:16:57:df:97:7e:54:0e:e3:
41:a6:4b:c7:72:ff:90:39:43:9e:c5:78:08:4c:76:
f6:b1:7c:01:3d:07:b9:5b:06:90:44:88:57:db:c5:
c1:01:d0:c1:42:e6:2e:6a:54:03:0a:a5:d5:87:e4:
98:2a:7b:d1:68:8d:a5:29:66:d2:a0:43:de:e9:61:
c2:7b:70:98:07:8d:42:68:da:b4:ec:17:e1:4d:1a:
99:da:4b:07:ad:e6:b1:9c:6a:8a:6d:fd:5b:db:ce:
3c:21:ea:58:c6:6c:ad:a4:9f:3f:f2:ff:f2:72:53:
e9:2e:56:bc:07:bf:0e:6a:26:3d:e9:30:55:5e:6f:
8e:2a:11:81:00:9d:87:17:f4:36:88:a2:83:e6:27:
6c:e7:cb:c2:f8:22:4d:8a:02:5d:fa:2f:0d:20:71:
85:60:a3:09:de:40:4b:93:65:9b:92:4a:fb:9a:fd:
ce:17:2b:da:df:e3:9b:71:b6:87:71:22:97:14:73:
bf:78:08:de:8e:f4:f7:fd:98:17:33:08:ff:7b:9a:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F4:A0:1D:2D:93:3E:02:10:B7:D6:78:8F:FE:8B:26:39:CE:8B:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8C9A2AF2FD5011EE80585203017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.120.0/21
Signature Algorithm: sha256WithRSAEncryption
14:ed:32:cc:36:cd:ba:ff:cf:df:72:be:31:fb:70:4f:ec:79:
1e:e2:85:85:15:06:f0:4f:c8:01:3a:cc:e5:c9:ee:3d:57:05:
52:59:ea:82:d5:83:a3:e4:c5:8b:6b:8d:bb:01:f9:72:f5:26:
6b:c8:f9:19:67:7d:7e:eb:60:25:81:bd:89:a1:1a:36:58:45:
28:72:41:79:90:5a:15:87:32:71:39:ad:89:d5:f3:e8:c0:9e:
19:e2:11:74:5a:a7:6a:cd:f3:08:99:04:1c:fd:61:75:79:e2:
fd:ca:03:21:0a:3d:4f:3a:92:40:ee:36:0d:39:fd:c8:51:ec:
1c:96:c7:0a:fb:66:66:c7:3f:23:09:28:f5:05:2f:d5:c0:ec:
4b:d9:d3:40:4e:14:a1:e2:fd:ae:b9:e1:46:34:a1:67:c4:f0:
37:c8:7a:01:c8:d1:75:73:5f:44:4a:fb:50:d9:1b:7e:29:8a:
87:17:25:e9:7e:ae:9c:bd:62:b6:82:5c:02:ab:38:4f:65:1e:
09:b1:bf:fc:7f:1e:46:70:3b:df:0a:3d:3c:77:78:e1:33:53:
c0:60:2b:65:8d:12:96:ce:77:dd:42:48:c6:1f:94:62:50:06:
41:29:b4:7d:4f:87:f6:c6:16:76:b7:ec:2d:c9:f0:ed:a8:da:
e8:a6:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:37 2024 by rpki-client on console-fra.rpki-client.org