Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B28AD74CF01311EEA28FE6A2775412E6.roa
File: B28AD74CF01311EEA28FE6A2775412E6.roa (raw, json)
Hash identifier: S6UbIukWdJm71WOhlUkWvf5TTcYVSPuwLGMp44wTmlU=
Subject key identifier: D6:BC:D5:1A:34:EC:EB:D9:C7:B4:4A:5A:8A:C1:D2:DB:AB:57:B7:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A8A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B28AD74CF01311EEA28FE6A2775412E6.roa
Signing time: Mon 01 Apr 2024 10:36:28 +0000
ROA not before: Mon 01 Apr 2024 10:36:25 +0000
ROA not after: Sat 11 May 2024 10:36:25 +0000
asID: 138915
IP address blocks: 154.203.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43176 (0xa8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 10:36:25 2024 GMT
Not After : May 11 10:36:25 2024 GMT
Subject: CN=660a8e2c-61fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:47:3e:96:62:df:ab:28:8b:52:0c:4c:2f:
56:44:7a:16:6c:2f:18:3d:af:d7:00:02:c6:82:37:
b7:ed:10:32:3b:dd:a0:3b:26:52:06:b8:7f:49:cc:
2e:02:6c:9c:9f:25:fb:61:e9:51:23:6d:cf:98:33:
d8:75:0f:03:d5:f4:62:cf:02:f0:bc:0f:c1:a1:fa:
c9:51:88:69:f8:ca:8f:a3:e3:29:7e:9e:d8:dc:2f:
8d:8d:ad:40:8e:b6:5e:5c:d0:f8:07:5b:8e:39:65:
01:97:84:29:ca:a2:d6:c9:80:cf:a9:0b:b7:05:59:
9d:46:5c:2c:94:98:b6:e3:21:5a:da:df:b3:51:0c:
a6:a1:86:ca:04:19:6c:50:7a:7e:62:ef:cf:5e:1d:
42:04:ea:c0:9c:89:57:f7:dd:87:59:6b:32:a7:48:
37:86:85:4b:4d:f4:45:fa:2f:d6:c9:4e:54:26:3f:
70:4c:5b:3a:5e:b4:6f:5c:bf:cc:a0:ee:ed:07:c0:
be:0d:3b:8b:24:29:4d:f1:96:0e:92:a2:60:be:9c:
9a:82:86:16:d0:6c:99:eb:8f:32:00:9a:70:01:40:
47:2a:76:45:b9:5b:ef:68:1d:91:ee:94:54:b6:77:
b0:42:86:79:fa:f8:bf:70:ec:12:c9:97:5a:6a:be:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:D5:1A:34:EC:EB:D9:C7:B4:4A:5A:8A:C1:D2:DB:AB:57:B7:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B28AD74CF01311EEA28FE6A2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:af:95:18:cd:e8:b5:b0:44:76:9e:5a:5c:4e:32:6a:32:53:
15:67:35:4c:c5:71:73:f2:1d:59:fb:e1:62:06:34:d4:18:fe:
22:f4:02:5c:be:22:a9:18:7c:5d:f4:f4:67:f4:c0:7e:59:71:
05:db:ae:fb:1f:15:6e:de:7f:59:bf:99:e6:5d:bf:5c:4e:d0:
15:01:f6:d4:f6:12:89:df:6c:e1:71:f9:9c:03:f2:68:61:dc:
ad:81:53:ab:30:8a:32:94:90:9e:21:9c:1b:61:11:1b:8b:be:
cc:0c:0a:1a:bc:99:e2:90:71:d8:2c:8f:bb:e4:cf:2c:51:b3:
cc:36:7f:b5:76:0b:c4:86:32:9f:5a:3c:c6:a0:e4:cd:ec:eb:
c1:21:3a:79:1b:35:24:d7:ba:33:e9:f0:2e:3d:35:28:ab:ec:
63:ad:91:7c:4f:1e:63:85:16:0a:6d:25:80:89:cd:a7:97:00:
9d:df:65:41:d0:f7:71:cc:50:52:36:2c:ce:39:5c:c9:16:03:
7e:4c:52:88:d7:29:33:de:61:d8:f9:71:49:45:11:6c:5d:2c:
20:38:a7:87:db:22:ee:8b:0c:81:95:85:92:9d:e3:b3:61:6f:
0c:ff:a8:b0:ac:cc:f4:f0:89:46:74:51:91:58:96:7c:3d:42:
5b:00:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:35 2024 by rpki-client on console-fra.rpki-client.org