Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A7EC4CECAB11EEA3920B85775412E6.roa
File: 91A7EC4CECAB11EEA3920B85775412E6.roa (raw, json)
Hash identifier: w8PLqObIyVpiqCBw5JjFwxt8QtXEaBKaZTfXANXt474=
Subject key identifier: 6E:08:10:06:24:A8:8A:81:C3:85:C2:35:90:B0:50:C7:55:69:4D:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A6D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A7EC4CECAB11EEA3920B85775412E6.roa
Signing time: Thu 28 Mar 2024 02:33:32 +0000
ROA not before: Thu 28 Mar 2024 02:33:29 +0000
ROA not after: Sat 22 Feb 2025 02:33:29 +0000
asID: 45669
IP address blocks: 154.91.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42712 (0xa6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 02:33:29 2024 GMT
Not After : Feb 22 02:33:29 2025 GMT
Subject: CN=6604d6fc-0a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:af:6c:71:8c:2e:6b:9b:21:ee:ca:d9:1b:
28:32:ca:59:08:c5:35:57:87:fd:54:6d:0a:41:0d:
c1:36:7d:91:9e:02:a5:4a:8e:eb:01:45:d4:f1:2d:
e6:f2:b8:cc:8b:03:34:03:13:26:80:fb:82:7e:0b:
e1:b8:1d:cd:34:66:56:ec:b1:60:aa:61:57:0c:f8:
99:ab:3d:81:82:da:b3:a8:fa:75:b9:d2:d3:3c:63:
cf:e8:d8:ab:84:76:3f:e5:0f:67:38:16:22:b2:42:
15:38:99:d6:9a:11:7e:32:b8:8f:4e:db:68:cf:36:
ee:5e:df:74:fd:10:cb:e6:8c:e0:72:87:38:50:ed:
c7:3e:03:c1:08:57:b5:1f:4f:5a:59:dc:93:51:5a:
44:0a:51:83:62:ea:38:7f:44:4c:ce:13:ff:46:f5:
f2:2f:63:43:f9:a6:63:e9:dc:77:27:57:d3:b9:61:
56:4f:2c:1c:37:2f:c2:a9:d8:c7:bc:bb:b5:6b:03:
60:12:bf:74:af:02:1f:11:12:a4:52:dd:74:9f:ef:
e8:33:4b:6a:43:79:f6:12:1b:64:47:d8:d7:c0:31:
6d:2a:3d:be:24:9d:48:49:3b:aa:94:06:2f:d9:0d:
fc:b7:a8:f8:44:c8:7d:03:9c:4a:d0:3b:2a:89:79:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:08:10:06:24:A8:8A:81:C3:85:C2:35:90:B0:50:C7:55:69:4D:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91A7EC4CECAB11EEA3920B85775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.164.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:d8:c4:d5:a0:8b:ec:3d:dd:17:4b:76:6c:84:cf:94:9a:da:
05:b3:d8:a0:57:3c:40:b0:00:d0:cf:38:aa:d2:31:06:5d:89:
dd:9b:6f:da:65:d5:e4:93:61:e8:4e:05:8c:81:10:b6:90:a4:
da:8e:3f:b2:21:b8:bb:7f:23:ff:58:28:08:4e:f3:ba:c6:8a:
cb:25:2c:9c:4b:7f:71:ae:f3:a1:53:6f:b2:e1:49:2a:7e:a6:
2e:e6:b6:e5:ea:04:81:da:a4:00:d9:cc:c0:9a:3e:4e:6f:e8:
22:b1:3c:63:c4:c4:90:c9:9a:27:5d:55:5c:af:2a:ae:89:4d:
6e:59:69:2b:8e:99:74:5a:19:43:59:8f:d2:73:e2:5b:71:af:
78:6c:b3:e2:8e:73:32:b3:a6:b8:91:60:99:69:30:1e:56:90:
f0:9b:91:08:3b:13:70:35:6b:39:16:97:06:a6:5a:8b:08:58:
c0:76:1c:a5:81:aa:57:3e:7a:9d:6f:0c:4d:16:2e:fa:d9:b8:
96:cf:32:af:db:45:8f:02:3f:42:3e:6c:35:ef:41:21:6b:26:
de:e5:93:9a:dd:94:b1:4b:87:be:ec:f1:eb:08:74:f8:0b:23:
62:d0:6d:1c:35:fc:df:42:47:3e:a5:81:93:f8:37:8e:c5:4e:
04:62:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:15 2024 by rpki-client on console-ams.rpki-client.org