Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC0A8700FD5011EE97712704017001B1.roa
File: BC0A8700FD5011EE97712704017001B1.roa (raw, json)
Hash identifier: B0rkYjBDAFhup2BlCiFOZFMZLOXb3ol658ep/5CEIOA=
Subject key identifier: E8:9B:E7:6B:4C:0A:A8:E0:A7:FF:F4:2A:0B:02:87:B4:09:7A:36:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC0A8700FD5011EE97712704017001B1.roa
Signing time: Thu 18 Apr 2024 06:56:09 +0000
ROA not before: Thu 18 Apr 2024 06:56:05 +0000
ROA not after: Fri 26 Apr 2024 06:56:05 +0000
asID: 39600
IP address blocks: 154.207.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 06:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44591 (0xae2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 06:56:05 2024 GMT
Not After : Apr 26 06:56:05 2024 GMT
Subject: CN=6620c409-d4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:3d:08:65:6c:cb:f2:e7:50:e9:00:79:0c:
2d:c0:9e:f1:e2:66:3e:80:dc:e9:22:40:13:5a:3d:
b0:e4:a2:f9:21:f5:87:4d:d5:2b:19:0e:bc:18:1b:
41:ad:91:d0:03:78:e7:c3:3e:20:8d:e9:bf:f6:04:
5c:05:ac:98:92:ee:f2:c5:98:65:1e:f6:d1:b4:67:
45:5d:1d:14:8a:5e:be:76:0b:c2:8b:1c:f7:08:4a:
5e:01:07:1b:81:8b:56:25:60:a9:e5:de:bc:36:4d:
1c:d7:18:d0:06:92:38:0e:d8:0b:e1:bb:1a:f1:b9:
09:d7:43:b2:3f:6b:c1:e5:72:f3:01:3c:1b:27:5e:
42:1a:3f:47:88:78:e5:83:3c:91:8f:bc:78:cf:3e:
d8:4c:a4:c4:80:a1:be:59:1a:91:75:92:b0:a7:e5:
3e:ed:ad:a9:71:b9:8a:c9:c2:1b:1e:cc:32:dc:51:
09:a3:7f:b3:aa:41:2b:bb:1c:e2:c0:61:ce:cc:4e:
bb:29:72:bd:43:28:ca:14:d7:ca:86:ac:fd:d3:a3:
1d:63:63:45:19:d2:11:ef:cc:7f:35:5f:21:92:35:
34:53:30:46:de:f5:c4:94:eb:9a:9e:1d:94:d0:75:
b9:89:60:e4:57:14:f8:09:0d:9d:a2:e0:84:ed:08:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:E7:6B:4C:0A:A8:E0:A7:FF:F4:2A:0B:02:87:B4:09:7A:36:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC0A8700FD5011EE97712704017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.208.0/21
Signature Algorithm: sha256WithRSAEncryption
42:29:39:a9:ac:f8:44:d8:82:5c:1d:c5:11:a7:10:da:43:56:
4b:42:c0:3c:1b:6a:1d:9e:d6:eb:ee:6a:5c:59:96:c8:8e:d2:
65:9d:a1:fc:04:e8:a8:c5:99:17:25:b5:0e:d1:f6:5a:60:17:
e1:b0:b1:da:12:b9:81:df:78:6b:45:29:41:bd:b7:a5:10:8b:
84:94:4e:44:03:87:b2:03:6c:1b:e2:db:24:d2:c3:64:5c:3b:
e0:a7:af:11:93:aa:7b:88:41:bf:e2:f2:f8:9b:cf:27:5b:0b:
08:e8:1a:4e:a1:11:69:e1:f9:41:aa:5e:db:c0:74:66:31:7f:
b1:03:74:c5:e7:80:98:cf:60:8a:19:ce:b1:47:fc:ba:3a:7f:
07:22:df:6e:e1:7f:b3:4b:e0:e1:fc:df:27:1f:6a:ff:a9:2a:
26:4c:5a:f2:38:6f:20:03:ce:b9:91:54:18:3e:d3:cc:bd:8f:
ff:15:1d:01:e3:61:9f:0a:e7:89:b0:2e:a6:d7:05:01:69:ca:
8a:16:80:3d:bf:70:af:8f:16:95:b3:3f:f8:74:98:0d:76:08:
da:30:85:26:c2:f1:c4:fa:c1:d6:37:bf:f7:71:ac:ec:60:1f:
51:1c:e5:4a:44:8b:85:d0:a7:c8:43:12:64:06:8d:c5:08:4b:
8b:05:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:51 2024 by rpki-client on console-ams.rpki-client.org