Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42542AFAF011EEB4376B26017001B1.roa
File: BD42542AFAF011EEB4376B26017001B1.roa (raw, json)
Hash identifier: 7woQEfYXIKGlZ4zKqkRESPHByRl3NiXAVq2CFMB0y0g=
Subject key identifier: B8:6A:0E:0B:7F:87:72:C9:5A:64:6D:96:F5:9E:12:EE:34:8D:66:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42542AFAF011EEB4376B26017001B1.roa
Signing time: Mon 15 Apr 2024 06:23:57 +0000
ROA not before: Mon 15 Apr 2024 06:23:54 +0000
ROA not after: Thu 30 May 2024 06:23:54 +0000
asID: 63139
IP address blocks: 154.94.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44232 (0xacc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:23:54 2024 GMT
Not After : May 30 06:23:54 2024 GMT
Subject: CN=661cc7fd-5d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:88:17:48:52:1e:9e:30:75:8f:af:92:cd:
e6:03:31:5c:0d:55:06:37:ff:76:07:58:e1:8d:c8:
99:c1:9c:80:28:aa:60:6d:51:51:74:9b:c5:db:95:
c9:f6:29:b5:f3:fd:28:23:03:0f:19:02:24:64:94:
b8:c8:03:83:d0:1c:d9:7d:6b:af:f0:df:a4:e4:bb:
9c:5a:36:56:dd:2e:9d:7d:ed:65:72:e5:9c:3c:ac:
3f:47:df:4a:ab:9b:80:6b:40:38:c9:0b:9b:74:be:
3c:b0:0f:85:73:fd:93:db:26:22:be:5a:fc:5c:12:
55:c8:08:b7:06:52:f7:1d:f1:16:9b:48:d9:9f:5c:
04:57:b0:32:26:f9:a3:38:39:15:67:b4:9b:cd:00:
b2:d3:67:12:ec:c0:9a:e5:7d:4f:59:d4:9b:4d:77:
45:1b:ee:70:1f:aa:9c:94:0d:48:b7:0e:18:7f:33:
4a:15:8f:89:b6:04:45:36:73:20:fb:4f:37:48:b2:
fc:38:e8:08:d1:be:33:db:58:48:87:d8:f5:69:59:
18:6f:f8:fa:d1:29:89:74:ce:dc:95:3b:1e:35:32:
c3:ab:db:83:c4:29:25:96:ad:22:04:e2:73:01:31:
03:12:ef:f0:10:46:3e:e6:c0:46:40:8e:53:ff:1c:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:0E:0B:7F:87:72:C9:5A:64:6D:96:F5:9E:12:EE:34:8D:66:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD42542AFAF011EEB4376B26017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d6:71:6f:18:93:04:d3:36:b2:bd:37:9c:65:6b:89:0d:7d:
fc:92:25:c9:e1:e5:ba:a1:00:9e:98:5b:77:a5:2d:d1:22:39:
c7:91:92:e1:ac:f9:72:cf:7d:10:48:d4:ea:ca:1c:62:56:51:
a2:f5:f6:8a:b2:4d:6c:fa:0d:32:ee:65:21:6a:d9:27:57:ce:
63:aa:35:62:07:67:e7:22:69:e9:e3:3b:58:13:f9:f7:96:18:
1a:71:25:74:a6:5c:fb:20:35:0d:4a:aa:a7:29:2f:5c:e6:18:
f9:84:72:70:00:06:d6:4b:b1:93:8b:dd:2e:5f:c2:59:1f:79:
d5:e7:9d:03:18:02:3f:8e:a0:0f:bd:c6:27:e1:c7:a8:ff:52:
27:e9:6a:1c:c5:0c:b7:a9:6a:a4:d0:24:12:1a:3d:78:72:d2:
2a:80:f1:3e:72:86:90:57:9a:3a:46:90:9e:3f:16:c4:f0:d7:
91:cb:94:8a:40:c2:d4:39:0d:3d:b4:c4:d5:58:cb:18:b6:c5:
2b:f1:5e:81:c9:b4:6f:7e:a9:1c:0f:3c:18:1c:9c:e8:24:e3:
75:c7:47:aa:a3:0c:d6:17:f9:19:92:d1:ca:2e:cc:74:ef:3e:
de:97:41:49:09:0e:6d:91:ff:79:38:5c:c8:6f:fd:18:c6:1d:
1f:8c:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org