Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90AEA8A2B34511EEB52A526D775412E6.roa
File: 90AEA8A2B34511EEB52A526D775412E6.roa (raw, json)
Hash identifier: K72ijiLGNoT26I1QhlkeW6KSJ0ruPFW/y8m48BsWt9M=
Subject key identifier: 4E:A4:EF:F3:76:33:92:CB:E5:6A:63:27:CF:94:7D:5B:9C:C1:89:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 752E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90AEA8A2B34511EEB52A526D775412E6.roa
Signing time: Mon 15 Jan 2024 01:29:46 +0000
ROA not before: Mon 15 Jan 2024 01:29:42 +0000
ROA not after: Fri 13 Dec 2024 01:29:42 +0000
asID: 8796
IP address blocks: 154.205.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29998 (0x752e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:29:42 2024 GMT
Not After : Dec 13 01:29:42 2024 GMT
Subject: CN=65a48a8a-aee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:6e:cf:2c:a3:2d:ca:1a:6d:5a:a0:05:30:
3f:a7:e3:eb:d1:e6:6c:db:4e:17:71:02:5d:66:ff:
72:09:1e:b4:7b:1a:f1:c4:be:95:f7:2f:b5:d9:07:
f9:57:be:45:ed:44:d8:91:a7:34:db:8a:61:1a:7c:
e8:6d:b6:14:c2:f6:16:ba:c9:f3:09:c1:f7:cd:f5:
7d:d4:dc:f2:f0:58:d9:08:06:6d:3b:d9:eb:40:38:
3f:90:00:c4:62:8f:cf:bc:9a:e9:8a:75:2b:57:3a:
cb:d7:ea:f0:4c:d1:e6:44:bb:c3:73:a1:25:fd:86:
60:86:be:b5:1c:a2:a3:bc:3e:3b:a3:af:9d:57:05:
d0:9f:18:ac:30:ce:ea:9a:e5:2c:74:4a:82:af:e3:
a3:1f:36:3b:d6:40:2e:d2:01:91:6e:bc:71:d4:3c:
ad:3e:e8:75:74:19:a4:73:73:98:7c:8a:5a:1e:81:
f4:f1:d2:83:2c:20:d0:58:82:3c:83:9b:90:5b:d2:
7f:5d:61:66:72:56:ab:0b:1a:35:17:47:0b:71:36:
b8:56:70:4f:69:8c:44:e8:a1:16:1f:f9:33:35:3c:
e4:ee:82:97:45:40:c5:be:5b:c9:fc:2d:7f:4a:ca:
fa:0a:bc:1c:13:09:61:f3:ff:4a:5a:eb:ba:7f:d7:
88:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:EF:F3:76:33:92:CB:E5:6A:63:27:CF:94:7D:5B:9C:C1:89:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90AEA8A2B34511EEB52A526D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:aa:cb:ad:93:61:1b:1e:05:fa:23:c1:d1:91:f2:1a:ed:8a:
c8:27:f6:c4:c5:76:15:31:d2:4d:58:20:82:62:f1:89:68:71:
0e:be:bb:d5:42:4d:25:cb:dd:fb:be:1f:05:9e:84:a1:63:40:
f9:7f:bf:40:b5:48:a5:ed:66:0c:98:d0:72:ad:b8:87:17:02:
e6:67:38:27:1f:0c:5d:fc:bc:cc:83:0d:34:0c:66:28:c1:ca:
77:40:62:fa:88:af:4c:49:e5:3d:da:06:7f:40:3a:9d:9b:00:
90:f0:39:70:c3:f6:42:8d:46:8c:17:7f:73:75:f0:78:68:1f:
a0:ee:92:73:94:27:4f:b3:64:55:15:fe:53:62:5c:6e:6e:76:
eb:11:6b:db:1e:51:4a:42:d8:bc:1f:9a:4a:d0:4a:cd:16:0b:
99:fa:64:a0:09:ac:e5:10:c5:e8:cd:00:17:88:cb:90:51:2f:
dd:47:79:ba:24:9a:81:26:ab:81:9d:ea:c4:11:f8:77:5a:bc:
a4:2c:c8:1c:bd:15:93:2e:b0:73:70:dc:c8:36:df:ad:ea:81:
b3:06:d9:8f:66:71:86:49:03:68:e9:b2:ba:8b:49:84:ab:c9:
96:1e:98:77:48:9f:da:f8:e3:0c:a6:c1:f2:60:ec:11:bc:83:
c1:db:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org