Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B00976E75611EEA04987C1775412E6.roa
File: A1B00976E75611EEA04987C1775412E6.roa (raw, json)
Hash identifier: iys4lukfAPaAD+JkIrBocWjYhRqUZTZ7TO9yhX8Poj4=
Subject key identifier: 21:20:8F:83:D1:75:83:B0:A3:F7:DB:DB:9D:52:29:D7:FB:D2:A4:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B00976E75611EEA04987C1775412E6.roa
Signing time: Thu 21 Mar 2024 07:42:56 +0000
ROA not before: Thu 21 Mar 2024 07:42:53 +0000
ROA not after: Tue 23 Apr 2024 07:42:53 +0000
asID: 44559
IP address blocks: 154.218.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42151 (0xa4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 07:42:53 2024 GMT
Not After : Apr 23 07:42:53 2024 GMT
Subject: CN=65fbe500-e020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:fd:50:10:57:3c:0c:d5:b6:92:59:6b:87:
58:99:f5:0c:44:ab:5b:4d:26:15:ed:27:10:ff:05:
98:b0:86:1b:49:83:6d:61:10:2e:c0:9a:4a:c7:65:
7b:5d:5b:4f:c1:ec:81:91:6c:d5:51:58:49:29:47:
8f:13:3b:08:0d:4c:3e:4b:de:51:47:b2:89:84:e2:
b8:9c:6e:48:ed:e0:0a:b1:7d:94:07:06:a7:78:17:
bf:08:fb:d9:4d:d0:95:be:34:ce:28:b5:27:b2:87:
8f:df:ec:8d:8b:e6:a8:1a:69:a0:e5:a2:55:96:79:
a6:bb:42:e7:f6:b1:b2:89:99:7c:1c:01:04:34:f8:
5e:9f:d9:4a:98:f8:db:fc:ac:de:62:e6:e2:4f:0c:
46:77:a2:09:b4:41:46:9b:f1:57:2b:ff:b7:30:fc:
29:09:d5:63:5a:1e:ed:92:92:44:bb:86:50:4c:d4:
d8:49:0c:22:b9:25:69:e6:99:32:75:1f:ad:fd:c2:
06:36:96:97:57:f6:66:e7:d5:1f:48:31:0e:cf:13:
45:d8:e4:15:72:98:f5:df:7f:d4:63:96:2c:b7:82:
dd:42:eb:29:42:65:47:24:01:13:59:fd:94:30:fb:
f1:4e:44:b8:88:5a:e8:c8:06:17:5b:9b:dc:38:e9:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:8F:83:D1:75:83:B0:A3:F7:DB:DB:9D:52:29:D7:FB:D2:A4:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1B00976E75611EEA04987C1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.37.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ee:38:f4:28:1a:3c:23:2e:43:ff:b1:f3:a8:cd:c2:1b:b3:
54:c0:b3:48:e4:bf:a1:10:ac:94:1e:13:09:c2:d3:44:e0:bf:
cf:4d:0a:aa:3d:ef:cb:4d:2a:53:83:44:ea:be:a4:0e:8a:a5:
b2:42:97:a5:ab:a7:f8:22:d0:47:10:df:a9:ea:f5:ab:05:b5:
1f:82:76:e4:13:27:ba:ac:b3:c1:28:72:05:b5:05:1a:e4:ae:
03:e7:3d:f5:c6:a4:e4:f8:0b:84:4e:f3:66:b7:e8:78:26:f5:
2a:40:86:d8:58:46:18:45:bb:7c:af:2d:af:92:ff:c0:b6:38:
85:5c:28:a9:53:83:36:4d:6a:06:48:86:a8:c4:66:ca:f3:be:
7f:2b:f5:23:a0:05:bb:ac:bb:32:ac:27:2c:39:7d:ab:63:c7:
ae:48:62:f7:b1:5b:f9:8b:92:91:19:41:5a:cc:71:7a:95:08:
26:7f:7c:70:5e:06:58:b1:e6:98:d2:5f:11:14:ae:6f:31:3f:
88:89:17:7e:cd:3e:24:10:b9:00:bd:52:7e:a7:7e:02:ce:1b:
7b:93:e6:59:08:b3:a7:19:5f:dc:18:ff:0f:18:54:9a:3e:83:
a5:fd:21:c0:14:4e:c0:69:f5:ef:63:77:e4:3d:3b:f0:72:59:
e7:ca:7e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:24 2024 by rpki-client on console-ams.rpki-client.org