Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7A9D3CF00711EE8B73C0C5775412E6.roa
File: AA7A9D3CF00711EE8B73C0C5775412E6.roa (raw, json)
Hash identifier: d+rUYIfN6eKLCzahwYQsF0XeQcIA++t8o4uhEdsrRak=
Subject key identifier: C4:C3:ED:27:D9:5D:39:55:7F:2D:59:05:27:A1:97:B7:00:CB:25:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A81A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7A9D3CF00711EE8B73C0C5775412E6.roa
Signing time: Mon 01 Apr 2024 09:10:21 +0000
ROA not before: Mon 01 Apr 2024 09:10:18 +0000
ROA not after: Sat 11 May 2024 09:10:18 +0000
asID: 138915
IP address blocks: 154.203.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43034 (0xa81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:10:18 2024 GMT
Not After : May 11 09:10:18 2024 GMT
Subject: CN=660a79fd-6064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:1e:44:5e:1a:24:7a:2c:56:2e:a5:13:66:
99:f2:28:db:1b:ba:85:8f:67:c5:4c:82:dc:d5:42:
6f:2c:13:68:fd:3a:33:09:a4:fc:ae:88:9b:7a:a3:
71:c9:91:35:60:cf:43:04:b1:b7:87:ae:11:cc:35:
ae:19:b4:53:e2:fd:49:9c:d2:8a:c1:64:bc:07:08:
c4:30:0c:4d:97:a5:c7:e2:c7:50:f1:01:6e:eb:17:
cf:ac:bf:50:10:8d:fd:d3:bf:ca:f5:f6:b0:54:98:
98:9e:e7:68:c1:05:e5:25:1b:0d:20:b4:fe:11:a8:
3c:4b:7d:cc:67:74:72:2f:3f:5f:9b:49:dd:66:f3:
79:6a:a6:61:b7:ea:ae:ec:d3:f8:41:ba:2c:88:02:
50:0f:7a:71:78:1e:ab:82:be:a2:36:a2:ee:9e:15:
fc:4a:05:7d:0d:c8:d4:5e:9f:2b:59:36:d0:f9:3b:
d2:b6:a3:02:e4:05:d1:73:11:b3:53:3d:fc:b4:60:
2b:3d:1e:bf:af:ca:d7:ef:64:97:d0:b0:04:ea:1b:
39:11:df:38:0d:48:6f:04:db:b9:43:ce:91:c3:65:
1e:1d:19:cc:43:6a:42:39:d5:da:ac:48:86:4c:3d:
b3:db:72:6e:1f:13:9e:e6:11:c3:98:06:eb:56:60:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C3:ED:27:D9:5D:39:55:7F:2D:59:05:27:A1:97:B7:00:CB:25:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA7A9D3CF00711EE8B73C0C5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.147.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:33:dc:da:ea:b1:8e:43:6c:a6:b6:aa:cf:48:56:67:f5:a3:
77:1b:1f:16:89:67:6e:a8:64:a3:f4:c4:fe:a2:7a:2c:e3:65:
ea:a7:a8:db:4e:59:07:25:da:3e:ab:2e:bc:8c:cb:d0:e7:1a:
c2:b7:a2:b4:ec:2a:5a:89:23:dc:f5:9c:04:3a:e2:e2:67:9a:
be:52:c6:90:42:41:ed:01:b7:f3:a0:b0:d6:0b:48:40:63:28:
36:46:3c:51:18:6e:f8:b8:97:df:8c:40:9a:4b:e1:9d:e8:04:
b2:44:8a:dd:3c:2e:21:f5:2f:ac:f9:0b:eb:9f:e4:93:ac:c7:
f7:85:50:a7:48:83:f3:c1:c1:30:1e:70:36:ec:d7:c8:9a:36:
b6:d8:01:e3:cb:18:59:65:3b:92:9b:ed:0b:bd:94:bb:0f:8e:
63:0c:e1:27:66:45:28:11:84:bc:29:3c:a5:5c:75:c3:f2:64:
fc:8d:0d:39:ab:9c:39:6b:f9:7a:31:8c:05:1e:c8:04:bf:c8:
f7:e0:90:5f:86:ec:b4:66:ae:c4:6e:09:2c:6b:42:47:d8:68:
dc:81:17:33:46:eb:cb:94:a7:3c:9c:02:c0:66:51:1d:62:5d:
af:b8:2f:ba:e1:c9:cd:32:e4:28:13:50:8c:3c:22:07:fe:fc:
dd:86:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:34 2024 by rpki-client on console-fra.rpki-client.org