Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C410E6E74411EEB1EBD9B5775412E6.roa
File: B4C410E6E74411EEB1EBD9B5775412E6.roa (raw, json)
Hash identifier: jHd6JZS92gkgICCX+uru/AyrhLZy09Uh5U9PnraaRLo=
Subject key identifier: 36:17:81:BB:BD:76:08:FD:1A:A9:D3:CC:37:BF:71:70:05:3B:4E:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C410E6E74411EEB1EBD9B5775412E6.roa
Signing time: Thu 21 Mar 2024 05:34:37 +0000
ROA not before: Thu 21 Mar 2024 05:34:34 +0000
ROA not after: Tue 23 Apr 2024 05:34:34 +0000
asID: 44559
IP address blocks: 154.220.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41978 (0xa3fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:34:34 2024 GMT
Not After : Apr 23 05:34:34 2024 GMT
Subject: CN=65fbc6ed-bbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:ce:0d:72:a9:9e:94:dd:8d:63:3c:77:a4:
12:d2:51:d1:c5:ef:cf:9e:5f:5b:0d:84:1d:7d:70:
14:36:fa:d1:e7:9a:21:bb:d7:39:d1:dc:46:23:a9:
1d:9c:53:6f:17:17:d9:3d:ae:80:f2:5b:2d:03:a8:
ac:ed:d5:0b:5b:52:24:bf:37:b0:60:33:1e:9a:be:
c2:24:a9:b4:5b:f8:65:0c:1e:19:25:b0:c3:f7:aa:
7f:53:6c:09:a0:03:f3:90:3b:e7:7b:7e:23:d6:92:
a9:62:58:f9:fb:00:13:e9:f6:64:04:a3:4a:73:8f:
7b:5f:00:b2:88:3e:f4:3f:d5:03:28:55:93:c5:7a:
11:2b:28:d6:35:c1:16:a6:10:4d:80:98:8a:bf:1a:
cc:63:b6:ce:2e:dd:9a:fc:bc:0d:a7:f8:88:a5:f7:
3d:75:28:9a:e8:f1:fd:63:81:c6:9e:e8:37:78:f3:
b3:60:d2:82:27:09:a1:8a:fc:ad:45:19:1c:b0:35:
7f:4d:0f:c5:41:b0:a3:8d:55:b2:20:63:19:8b:57:
51:60:25:71:95:a7:27:83:e0:b0:00:6f:c6:b0:5a:
aa:9d:0d:60:aa:bd:1f:24:3b:22:ac:e8:4d:5c:4e:
6e:d8:e3:8e:ee:0e:fc:5c:a2:ef:dc:35:3c:75:7c:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:17:81:BB:BD:76:08:FD:1A:A9:D3:CC:37:BF:71:70:05:3B:4E:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4C410E6E74411EEB1EBD9B5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:14:98:a0:ae:53:0f:43:a7:30:b2:ef:65:f0:c2:eb:1c:df:
2c:9e:f6:d1:69:dc:2e:8e:11:7f:94:92:29:37:06:7f:50:6d:
dd:55:66:c6:45:2d:4a:63:7a:b8:e3:e9:69:10:6e:ed:36:f6:
50:21:a5:6f:84:f8:fb:b0:77:ac:2c:44:89:e8:0a:18:e0:cd:
5f:5b:96:d8:22:03:ae:7b:26:ce:88:ad:97:d2:ea:f0:fc:a7:
76:09:5c:7c:96:f9:80:3d:d2:90:8c:95:ef:8a:6f:dd:f2:1a:
2b:93:58:6d:b4:63:5f:6b:ba:12:cf:65:09:aa:8f:45:33:67:
3c:fd:06:71:11:a1:ff:ef:6e:3b:c1:64:00:2c:d1:4a:63:16:
17:9c:22:99:24:b9:15:3a:f2:64:f7:a3:a4:13:5d:42:00:80:
10:cd:71:3f:80:e7:a6:fe:b9:0a:2f:cb:6a:45:f3:da:30:d5:
f6:95:6d:d8:af:53:c3:71:a4:55:a0:cf:64:ab:3c:c0:7e:d0:
44:c2:9a:4a:c5:cd:32:c5:0e:a7:49:ef:4c:68:ae:13:ed:c6:
d9:b4:e2:99:be:58:af:aa:c8:fd:98:d9:35:6d:fd:d6:97:05:
91:e4:47:b5:44:f0:0b:5d:7d:07:4a:a1:9e:19:f3:db:25:8a:
1c:6c:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org