Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AFDA280038211EF8AC63E04017001B1.roa
File: 9AFDA280038211EF8AC63E04017001B1.roa (raw, json)
Hash identifier: cNCk0wnf56OKdrzPeVS9br+KqL+bHK6uDgu7OVyiB6E=
Subject key identifier: EE:3A:29:CC:52:AA:1C:93:CC:BD:70:66:6C:B2:E8:AD:05:91:B0:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B15E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AFDA280038211EF8AC63E04017001B1.roa
Signing time: Fri 26 Apr 2024 04:08:15 +0000
ROA not before: Fri 26 Apr 2024 04:08:12 +0000
ROA not after: Tue 03 Sep 2024 04:08:12 +0000
asID: 138195
IP address blocks: 154.210.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45406 (0xb15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 04:08:12 2024 GMT
Not After : Sep 3 04:08:12 2024 GMT
Subject: CN=662b28af-4d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:d7:6f:b3:1e:49:d5:3c:a4:f9:71:ae:82:
f1:1b:49:8e:6e:66:b4:54:41:5a:16:5a:6e:e1:b1:
4f:71:98:88:2e:e5:73:3b:1f:59:68:56:6a:4e:95:
17:3b:6e:cc:33:1c:9b:e9:0b:45:eb:f7:01:a7:b9:
36:cf:4b:f1:0e:04:90:01:4f:4c:87:c9:77:4b:d1:
a6:de:87:f1:59:a9:ad:49:9a:d1:19:37:3a:45:ce:
ca:35:99:e4:0a:7d:f3:a1:95:e2:ce:1a:5c:87:78:
e9:6a:6e:a2:95:e9:58:7e:89:3a:40:91:df:c6:ad:
a4:18:70:66:3b:38:6a:16:68:1e:37:46:61:1e:66:
09:aa:fa:8e:fa:f7:6e:5b:2f:64:22:7a:c0:56:56:
0d:87:c7:29:1d:6a:8b:31:48:97:df:d9:a2:f7:7f:
63:30:1f:b2:e3:63:e4:58:26:b9:65:f5:a6:c0:89:
ef:5c:72:59:cf:6e:dd:e5:c6:18:79:06:13:93:17:
27:a9:ff:40:13:c7:33:66:c5:6d:59:38:50:9e:6f:
81:98:3d:56:b5:6b:b0:ae:cd:2d:ae:38:e1:08:ef:
04:b8:73:ae:78:69:2f:0f:fa:65:e0:80:9f:81:ed:
15:e6:76:a7:12:75:08:9a:67:a3:17:ec:b9:02:c6:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:29:CC:52:AA:1C:93:CC:BD:70:66:6C:B2:E8:AD:05:91:B0:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AFDA280038211EF8AC63E04017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:10:d2:70:b4:a2:07:96:20:60:73:b0:86:7b:e8:a3:31:8c:
50:05:3d:dc:2d:43:93:71:1f:b2:89:7e:c7:c2:6d:5f:05:ed:
f5:f6:d8:08:25:f3:22:59:12:85:78:00:41:78:cd:f1:31:66:
11:99:96:9d:ce:fd:fe:cf:35:a9:79:5f:77:17:a9:2b:26:fd:
68:85:98:27:3f:69:3c:85:e5:66:14:e7:a4:0f:d1:10:aa:72:
8e:5b:86:70:04:f7:65:7a:5b:89:10:c0:7e:c2:0d:25:08:bc:
df:22:14:82:a0:88:30:3e:a4:b2:14:9f:de:6e:60:ec:1b:af:
32:28:65:df:75:6f:c8:c9:d4:c3:71:76:a8:a1:e4:8f:38:72:
d9:de:ae:ed:83:b0:3b:0c:07:6d:8d:00:4f:67:8d:69:83:15:
db:52:e5:d9:2c:64:c3:56:cd:94:76:79:c1:d5:85:56:57:0f:
20:d1:89:00:ac:0f:1e:43:ae:cd:fb:56:03:59:88:e7:e5:f0:
3c:d0:08:69:28:7e:99:b7:91:19:05:0e:85:6d:d4:d0:24:4d:
47:f5:bb:1f:7d:82:9c:2d:0c:ba:3b:a3:64:07:5b:bd:51:46:
c2:05:36:c2:fc:63:4d:8b:e6:dc:a5:84:4c:c9:d0:65:bb:d1:
29:7c:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:46:50 2024 by rpki-client on console-ams.rpki-client.org