Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A443E30A696711EEB89D13404AD9E6FC.roa
File: A443E30A696711EEB89D13404AD9E6FC.roa (raw, json)
Hash identifier: l9BnTpsmNnhPkunDGrSqXhNwappbfKczlKA9YKLB5F8=
Subject key identifier: B8:6E:CE:25:57:74:E2:DE:96:EC:B2:74:3E:25:9E:30:56:1B:F0:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 45B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A443E30A696711EEB89D13404AD9E6FC.roa
Signing time: Fri 13 Oct 2023 01:27:15 +0000
ROA not before: Fri 13 Oct 2023 01:27:12 +0000
ROA not after: Fri 27 Sep 2024 01:27:12 +0000
asID: 201411
IP address blocks: 154.205.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17849 (0x45b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 13 01:27:12 2023 GMT
Not After : Sep 27 01:27:12 2024 GMT
Subject: CN=65289cf3-4ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:74:2a:78:c5:b2:fd:c1:13:cd:e3:8b:d0:
82:bb:c7:05:47:94:8a:31:8d:5e:b2:17:cc:61:bb:
c8:59:cd:f7:76:ad:28:c1:dc:42:12:6b:22:89:81:
63:e6:ea:80:03:9a:69:f1:a1:38:ed:ad:20:5b:85:
2c:ee:3c:62:ec:de:86:9e:28:ca:32:60:fb:8d:e9:
d6:57:e9:a0:f4:ae:7f:bd:72:eb:0c:84:8c:8b:30:
d3:46:e4:8e:a1:33:37:e1:44:03:5f:3c:46:ef:16:
08:f6:5d:53:19:ad:95:80:0b:84:80:71:66:f9:12:
32:1a:c0:a0:1f:91:94:16:da:b1:cc:f1:8c:c1:8b:
10:8d:e5:3e:b8:60:3c:39:79:1d:51:ca:e7:5e:a3:
33:d7:42:3f:0a:85:cd:b8:b9:ff:a7:1d:c4:f3:08:
5b:d1:e7:c1:4f:9e:54:e9:aa:d2:01:f9:5c:ec:25:
7e:5f:ce:99:06:69:f0:05:a5:50:b0:6e:73:9c:03:
4f:8a:1c:25:d6:67:1d:fc:11:0d:21:1a:17:d7:6b:
74:57:93:b4:01:6e:ba:94:64:50:4a:75:39:37:d7:
5c:f4:e7:86:f5:a7:cc:51:a5:e5:a5:a3:8d:65:a5:
a3:86:33:5c:b9:a6:23:bc:ae:61:52:ef:da:06:97:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6E:CE:25:57:74:E2:DE:96:EC:B2:74:3E:25:9E:30:56:1B:F0:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A443E30A696711EEB89D13404AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.190.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a3:a4:72:46:f9:89:74:3c:f7:f2:5f:68:18:e5:71:43:77:
15:14:fb:f8:dc:5e:53:00:f4:69:48:15:82:72:45:e7:9a:cf:
a6:bb:e9:19:10:5d:75:7e:07:f9:06:76:58:2f:9b:a8:6e:dc:
dc:ad:30:03:7c:64:99:aa:25:e0:a7:dd:75:06:bd:37:b3:bb:
6c:7b:c2:f1:0f:4b:7a:16:ba:3b:d2:e1:0c:a7:7b:61:65:71:
92:3b:0a:d2:66:77:13:f6:43:03:19:81:08:3c:9f:01:4f:2d:
21:c2:3a:b8:34:27:02:99:87:50:6b:83:e0:5b:c6:47:81:76:
fc:8d:b2:89:60:e9:a2:15:e9:f9:1b:11:50:1a:34:a4:0d:88:
ca:5f:ef:ec:0c:9a:8d:41:f2:ff:d0:d2:11:da:b0:32:9d:5b:
a1:f0:6e:b0:17:fa:a2:0c:2b:d0:13:88:2b:c9:16:b5:f1:48:
72:fb:7b:f0:f6:b8:2f:f1:bd:77:34:05:fc:8f:49:f1:c4:84:
49:d7:9b:55:de:ef:9b:75:90:16:6d:f9:57:a9:f3:67:c8:ee:
62:14:61:03:f2:47:7d:08:01:8e:0a:41:35:91:fb:40:6c:6b:
36:1f:e5:de:cb:58:1f:61:3c:65:1d:e5:db:a0:58:93:16:ad:
9d:b9:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org