Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3A6DE0B10511EEBA5ED868775412E6.roa
File: 9E3A6DE0B10511EEBA5ED868775412E6.roa (raw, json)
Hash identifier: QxjSgszGNqs5XN6cGogJGRHpCEqiUf9OX+vidgM07TM=
Subject key identifier: A8:11:08:83:94:91:11:72:90:7B:B7:98:8A:D5:CC:34:B4:86:38:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3A6DE0B10511EEBA5ED868775412E6.roa
Signing time: Fri 12 Jan 2024 04:46:58 +0000
ROA not before: Fri 12 Jan 2024 04:46:55 +0000
ROA not after: Fri 13 Dec 2024 04:46:55 +0000
asID: 140227
IP address blocks: 154.205.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29881 (0x74b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:46:55 2024 GMT
Not After : Dec 13 04:46:55 2024 GMT
Subject: CN=65a0c442-0f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:33:ab:4f:d7:eb:bb:34:1c:f0:6d:28:d0:
c4:42:18:de:1f:6b:3c:6a:c2:3b:40:8a:62:1b:7a:
0a:76:b0:5e:38:58:a5:55:8d:c5:fc:70:31:8a:47:
c3:b8:5b:60:46:fb:b4:7c:a0:ac:af:fd:1a:8d:e7:
a7:5a:70:4b:f8:cd:88:30:e7:79:0b:23:95:8e:9d:
ec:0b:79:06:bc:6d:84:26:a6:49:29:cd:c8:bc:6b:
ac:7a:fd:1b:c5:a4:2a:81:6b:db:92:47:1a:18:f6:
09:8f:71:27:cb:a6:5a:dc:a2:3e:a1:6b:bf:e1:10:
4b:a5:ef:4d:cb:ba:6f:a6:54:a3:44:56:ad:45:bf:
3b:0d:76:5e:01:12:c8:ee:98:b1:4e:b6:79:e1:f9:
54:83:5a:eb:99:71:dd:72:ea:1f:1e:4e:d7:55:f9:
86:74:0d:12:3f:82:ec:62:b2:57:13:aa:9d:c3:dd:
f2:e1:a6:fb:73:ef:ad:43:db:44:1c:a2:c7:4c:bb:
b9:8c:44:2b:88:af:45:3d:03:a4:da:09:26:63:0b:
b6:97:b9:35:e4:c0:22:92:f0:1b:cf:c5:3c:99:b1:
48:80:ef:34:8c:2f:2f:e8:74:81:74:b4:f3:91:59:
cf:fb:d7:62:2a:6c:b2:bc:ba:c9:08:6d:81:2e:c0:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:08:83:94:91:11:72:90:7B:B7:98:8A:D5:CC:34:B4:86:38:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3A6DE0B10511EEBA5ED868775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.197.0/24
Signature Algorithm: sha256WithRSAEncryption
40:db:95:14:a8:ab:9f:87:ca:45:5a:a4:66:ee:b2:6f:bd:d0:
fc:11:7f:f7:4c:b0:1b:eb:15:23:62:92:3a:0c:cc:a0:09:a1:
09:3a:4f:51:7f:1f:a8:66:67:97:d0:18:38:9b:be:23:c1:36:
62:09:f1:93:af:b3:16:13:ca:65:3c:c8:b8:af:c5:f5:37:31:
4e:56:08:d9:d2:51:a7:98:55:63:19:88:81:94:81:07:0d:e5:
ba:3f:0e:33:e6:18:b7:a1:77:65:59:44:d9:a3:2f:1c:75:f8:
fc:50:ae:d3:2e:cd:3b:43:e8:ba:d7:08:d5:c6:40:f3:c4:25:
45:7a:45:01:70:e9:61:da:ae:d5:05:41:58:e4:f2:ad:2a:bc:
eb:eb:7e:0f:00:30:a6:2d:ca:f0:f9:58:ca:b9:2c:6e:44:9f:
0b:8f:dc:a1:9c:a7:f1:49:aa:04:59:9d:bd:13:be:9f:f9:9e:
c5:c3:dc:f4:1c:b1:a0:95:d6:1b:fb:22:cd:a4:47:8e:76:59:
72:83:fd:90:8f:ab:fb:93:69:83:fc:6c:f4:2d:e4:d9:25:98:
01:f7:18:5e:2f:bd:03:60:4b:3e:a1:de:6f:82:63:ed:d3:ba:
cf:4b:4b:2e:c3:71:38:f8:c4:9d:f8:e6:6d:19:a6:f8:f8:e7:
46:d9:58:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:16 2024 by rpki-client on console-ams.rpki-client.org