Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5059B8E4F111EEB96C1FAC775412E6.roa
File: 9F5059B8E4F111EEB96C1FAC775412E6.roa (raw, json)
Hash identifier: q04lI46JlhR4oFcloOHwRHf3/6E0hrWydESX5MEsR1E=
Subject key identifier: 69:78:7F:D1:58:A8:AF:58:13:56:72:44:4A:05:A6:BF:A0:73:BA:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A29B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5059B8E4F111EEB96C1FAC775412E6.roa
Signing time: Mon 18 Mar 2024 06:34:51 +0000
ROA not before: Mon 18 Mar 2024 06:34:47 +0000
ROA not after: Sat 20 Apr 2024 06:34:47 +0000
asID: 39600
IP address blocks: 154.91.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41627 (0xa29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 18 06:34:47 2024 GMT
Not After : Apr 20 06:34:47 2024 GMT
Subject: CN=65f7e08b-ecc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:9c:ce:df:13:40:a2:b9:42:ed:a1:79:85:
d4:10:96:f1:bd:fd:92:dc:85:7b:cf:3e:43:d1:4e:
75:39:f1:a4:66:76:b2:bb:45:d2:4c:49:40:4b:c1:
6c:dc:28:43:d1:6c:fc:22:67:9c:ba:2b:98:85:24:
f4:b4:85:8b:57:04:df:66:1e:1e:3f:66:ed:d2:e9:
04:db:44:49:d4:c2:e4:24:b8:c0:03:c2:40:8c:fb:
ed:dc:71:84:a6:db:59:37:1d:c5:2e:92:84:74:ac:
91:ab:d1:ae:4b:e7:f5:5f:6a:cf:32:18:a9:52:d8:
f7:75:a7:ca:09:48:cc:bd:06:3a:e5:f9:84:ab:9b:
bb:78:dd:3c:bf:82:b0:ab:44:5a:13:3f:97:6e:d1:
93:eb:ee:8c:f2:ee:a0:b7:a5:f3:b4:8e:62:36:8e:
6e:f7:99:00:a5:de:de:ff:7e:34:82:8d:e4:a7:27:
d3:25:06:a4:5e:51:01:57:ae:d4:4f:9f:c2:87:6c:
ca:f7:16:fb:f2:67:2c:17:3a:6a:2d:da:97:18:4a:
70:c3:8b:1d:b5:a7:40:b4:08:d1:0c:38:a4:d4:bc:
a3:67:ee:0f:2a:64:7a:52:f0:47:96:49:1c:62:c7:
ff:57:d8:78:4a:f2:f7:06:8e:25:e9:6e:84:79:33:
9f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:7F:D1:58:A8:AF:58:13:56:72:44:4A:05:A6:BF:A0:73:BA:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F5059B8E4F111EEB96C1FAC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.152.0/21
Signature Algorithm: sha256WithRSAEncryption
97:99:9c:0f:3d:1a:6f:e5:39:6b:19:18:6e:b0:a3:9a:2a:41:
d5:2a:a6:6d:c5:31:01:8c:37:82:59:09:17:56:4c:f4:d0:c9:
dc:40:68:e7:6e:6e:ce:eb:0f:f2:a4:14:8e:7a:0d:44:45:b4:
a4:c1:98:05:19:0e:90:40:4e:81:cf:02:6c:39:ed:89:bd:58:
15:e9:40:40:88:f2:8f:c8:df:5d:26:4f:e4:f9:78:fd:5e:35:
43:60:74:9f:ad:ff:97:38:85:d0:71:b8:04:3a:dd:e5:b9:ec:
45:ab:f7:87:64:19:c0:d2:4f:b4:ed:10:07:64:19:15:a0:1e:
0f:0b:c3:c6:0f:2d:e1:55:7a:e4:b6:01:a3:70:29:31:3a:f0:
86:54:04:ca:c9:43:cc:cc:ea:ff:07:cc:ff:e6:96:3f:6f:e2:
b8:a0:d6:06:db:be:ac:5e:23:da:ff:a5:62:9e:12:b5:64:f8:
2c:be:e3:03:75:d6:b6:fe:c9:8c:bb:d9:23:a8:c9:fe:ea:91:
8b:68:08:20:b7:00:cc:f2:e4:f0:b8:07:04:a8:79:33:41:23:
75:3b:95:5f:08:4e:dd:bc:09:63:62:b3:ca:bc:14:5d:45:35:
14:b4:d5:69:26:35:3b:1f:93:1a:a5:fe:3f:f3:64:aa:81:4c:
a2:c7:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:31 2024 by rpki-client on console-fra.rpki-client.org