Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1C9840F91611ED83562E164AD9E6FC.roa
File: AC1C9840F91611ED83562E164AD9E6FC.roa (raw, json)
Hash identifier: HntzxwSJhIIiVyUo45DXtCx1ELqeYbMyUWWnYKq49H8=
Subject key identifier: 77:D6:A8:81:41:AE:F1:C0:D1:C6:EE:84:A3:3E:C4:5A:0C:85:62:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2632
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1C9840F91611ED83562E164AD9E6FC.roa
Signing time: Tue 23 May 2023 03:05:29 +0000
ROA not before: Tue 23 May 2023 03:05:26 +0000
ROA not after: Wed 15 May 2024 03:05:26 +0000
asID: 399674
IP address blocks: 154.94.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9778 (0x2632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 03:05:26 2023 GMT
Not After : May 15 03:05:26 2024 GMT
Subject: CN=646c2d79-eaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:59:0a:8c:05:fc:2e:fc:76:2a:40:6b:7a:39:
cd:6e:82:02:7e:10:ac:6c:a8:e0:df:6b:56:a0:05:
64:19:30:a9:f9:c9:d7:ab:88:1c:06:91:c4:3f:36:
b4:af:ce:6d:3c:b6:4e:f1:82:73:1c:d0:47:96:42:
b4:ee:5f:7e:a6:11:ad:5a:20:b5:d7:50:41:a1:fd:
cd:e5:3f:d1:9e:91:ea:22:91:06:b9:68:02:ea:4d:
b2:d7:24:9d:ae:1c:dc:b5:ca:46:3b:f8:c2:4c:a2:
73:bf:b4:98:5e:62:46:2a:5d:96:b2:54:64:40:9b:
0b:d4:ce:44:97:68:45:6b:f5:62:67:aa:60:bc:73:
7f:ed:97:1c:ef:4b:0d:92:0d:84:b1:5b:4e:00:ef:
db:36:33:3e:fd:22:e4:a3:20:55:41:7d:38:4d:96:
e3:1b:7b:62:db:03:f8:56:7f:32:d8:c8:3b:c8:03:
42:93:82:f9:19:5a:92:91:4c:38:68:38:5d:58:72:
55:6a:ab:36:e6:a9:a0:7d:25:1f:6f:90:38:b9:e3:
a8:7e:c9:bc:ca:e0:5b:28:47:75:19:a7:9e:2f:90:
63:b3:dd:c9:d5:af:0d:58:3c:1e:35:09:b0:29:d8:
92:b7:a8:b1:95:02:4c:38:f2:d3:13:d4:b0:7e:6e:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D6:A8:81:41:AE:F1:C0:D1:C6:EE:84:A3:3E:C4:5A:0C:85:62:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1C9840F91611ED83562E164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.168.0/21
Signature Algorithm: sha256WithRSAEncryption
54:d8:3a:10:bc:ef:72:93:bf:d0:2a:33:29:b5:91:67:2a:2a:
0a:b3:84:2c:80:d4:01:2d:85:cb:12:d3:a0:8d:0a:21:0e:94:
5e:59:ac:47:3a:e3:a2:6c:91:7d:71:72:a4:b1:e3:0a:ba:3f:
d8:5d:72:c7:9b:6e:ac:dc:97:c5:37:b1:36:43:45:b2:35:34:
22:39:20:c1:f3:e6:7c:3f:e6:dc:6b:d3:7e:86:d2:54:3c:29:
11:90:99:35:1b:de:95:00:ca:7f:4c:95:92:dd:02:be:ea:21:
6b:88:d7:6c:b5:8d:1b:59:e5:9d:ff:c8:83:2d:b8:43:9e:d6:
78:19:bd:24:fd:b5:ea:d3:9f:3a:3e:fa:21:3c:f2:78:0d:a9:
5d:f5:b9:76:55:5a:29:b6:07:ca:7e:85:89:c0:63:fe:71:3f:
c8:f4:1a:53:a9:ae:cc:a6:d8:fc:e1:03:e8:10:c3:c2:b9:0f:
99:87:ae:69:6d:5e:42:0c:08:b3:08:5f:fe:05:27:2e:d4:25:
31:b4:fc:46:58:9c:b0:a3:8e:5f:68:5e:d4:23:31:66:bb:16:
24:18:8d:f1:6e:d5:69:8a:c3:3b:f1:6a:ef:5e:3f:f5:91:97:
36:68:71:4f:85:1c:18:db:0d:76:2d:3c:e3:cd:d2:b1:3d:c2:
39:5d:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:18 2024 by rpki-client on console-ams.rpki-client.org