Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6D3610EE78311EE902B0FA1775412E6.roa
File: B6D3610EE78311EE902B0FA1775412E6.roa (raw, json)
Hash identifier: kWqvxfBHpkEShLWq0ncm0FuBjZ1aZ5rPTO1be7L6+rw=
Subject key identifier: 53:5E:CC:D4:C6:C8:4D:61:24:95:99:9E:4C:8D:34:1D:72:DC:31:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A58D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6D3610EE78311EE902B0FA1775412E6.roa
Signing time: Thu 21 Mar 2024 13:05:39 +0000
ROA not before: Thu 21 Mar 2024 13:05:35 +0000
ROA not after: Tue 23 Apr 2024 13:05:35 +0000
asID: 44559
IP address blocks: 154.210.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42381 (0xa58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 13:05:35 2024 GMT
Not After : Apr 23 13:05:35 2024 GMT
Subject: CN=65fc30a3-bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:dd:f1:3f:1d:e5:b2:1e:64:ca:90:b6:4b:
71:eb:2a:ac:48:5a:07:31:75:6c:16:cb:e2:f1:60:
ea:cd:68:cd:cf:e7:88:c1:73:58:a8:2c:92:bc:5a:
8c:3c:e8:11:ff:c5:9f:0a:7e:55:30:2f:f2:24:3b:
ce:bb:54:f0:36:62:4b:5f:eb:43:0e:97:dc:b1:83:
70:b0:14:30:7a:34:5c:f2:dd:3a:2c:bd:b7:73:72:
85:8c:02:21:3c:01:96:1d:24:0b:cd:6a:b0:24:9f:
16:d2:de:4e:5b:d9:3e:b6:91:df:89:49:41:82:d5:
df:31:cb:c6:27:df:91:d0:48:85:24:98:45:03:7a:
20:f2:d2:57:1b:f6:ec:3a:21:15:97:b6:eb:3f:ba:
a9:d9:21:c3:3e:77:37:14:5d:66:38:fd:91:53:a9:
96:37:18:c6:8f:06:6c:d3:d4:04:b3:34:c7:aa:6d:
b3:1b:2c:f6:8c:68:a2:24:ed:3c:1b:2b:e6:12:2f:
b4:40:e3:72:8c:ca:8f:a1:8d:30:25:99:2c:85:0d:
f9:e5:db:47:5b:dc:fc:fa:f1:df:35:a0:ce:59:29:
35:4e:df:be:3c:1c:e0:00:1e:68:91:13:7d:bd:ab:
37:44:f1:ab:76:36:a8:94:3c:9f:da:0c:17:52:f8:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:CC:D4:C6:C8:4D:61:24:95:99:9E:4C:8D:34:1D:72:DC:31:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B6D3610EE78311EE902B0FA1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.86.0/24
Signature Algorithm: sha256WithRSAEncryption
88:96:a1:bc:50:fc:a5:ef:47:56:66:c7:a3:8a:7c:d3:2e:49:
d0:b2:36:12:b8:b6:59:a1:eb:8e:72:43:eb:90:fb:08:e6:b6:
a9:2b:e4:52:50:16:47:9d:ef:07:5b:db:7a:c3:e2:8c:4b:cd:
4a:f5:31:a1:00:4d:c7:93:75:d3:96:3b:5b:b4:e9:c1:24:bc:
7c:a9:bd:eb:68:37:d7:df:0a:3a:ce:2f:39:92:16:45:46:14:
53:b9:c6:cd:70:55:19:33:9f:83:f4:3a:a1:6f:b5:c9:7f:67:
f2:fb:0a:52:c9:68:dc:94:1a:f0:b2:12:cb:02:5e:2d:7b:05:
5c:6a:43:e6:bb:63:a4:69:2f:f2:83:1b:a7:e8:47:b3:75:3b:
f2:7c:f7:b1:eb:37:4b:9c:dd:3b:c6:5a:22:b6:f7:40:27:23:
ed:61:21:c8:ad:e6:9b:28:97:70:6a:2c:c7:f0:08:5f:57:84:
50:a7:6f:3d:38:c6:2d:c1:70:22:39:7c:a1:81:55:e7:65:da:
80:0d:1e:53:db:d1:e7:0d:85:99:1f:15:5e:23:19:05:a9:f5:
8a:6a:ac:d0:19:db:bd:67:90:da:20:96:4e:68:81:5f:18:9e:
60:fe:e8:8b:8c:fb:96:07:31:1d:d0:b5:d3:94:ff:db:4e:d4:
6d:a0:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:25 2024 by rpki-client on console-ams.rpki-client.org