Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD441486EDB711EE861BECB0775412E6.roa
File: BD441486EDB711EE861BECB0775412E6.roa (raw, json)
Hash identifier: /SUAP6j4bPE1b6eZYtGUHZD1ya/emJ7dQECvZ/n+zEk=
Subject key identifier: 11:18:E9:F3:D4:7B:05:1B:6E:BE:5A:79:74:03:A2:08:2C:D9:FE:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A72F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD441486EDB711EE861BECB0775412E6.roa
Signing time: Fri 29 Mar 2024 10:33:11 +0000
ROA not before: Fri 29 Mar 2024 10:33:07 +0000
ROA not after: Sat 04 May 2024 10:33:07 +0000
asID: 14315
IP address blocks: 154.196.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42799 (0xa72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:33:07 2024 GMT
Not After : May 4 10:33:07 2024 GMT
Subject: CN=660698e6-bc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:df:a7:13:a7:bf:fb:5e:df:ca:b7:d4:51:
47:14:89:5e:46:58:9a:5c:c3:55:1f:82:3b:4b:76:
ed:7d:03:f9:4a:31:38:42:97:d1:a4:2d:ab:3e:8f:
ef:ce:22:a8:dc:56:bb:77:f7:54:b2:31:2f:39:bb:
e5:30:f7:d5:ca:6d:90:6c:f6:2c:31:64:cc:aa:ff:
f4:91:93:bf:96:2c:87:31:25:2a:c3:20:e9:d7:b2:
d6:b6:13:53:54:5c:57:d7:8f:16:1b:f0:15:37:74:
85:65:da:e4:e7:ff:68:3b:9b:34:e5:e0:8d:3c:2b:
e1:ad:76:55:c5:d7:d3:5c:e3:7d:43:92:b3:9a:32:
b7:f0:23:f6:82:d5:3e:52:63:28:3c:9e:76:e8:2c:
99:cc:c2:1b:17:c4:ca:95:e5:d4:2f:96:d1:fe:7b:
f9:20:88:26:6c:b4:d7:84:79:4e:90:b6:2d:11:39:
ff:3d:de:9d:27:80:44:72:7f:a3:ca:5e:39:c0:6a:
1b:f1:74:b8:3d:a9:3e:75:47:b9:33:c7:a1:6a:db:
25:3f:63:c4:51:5f:4f:0e:52:ad:b8:5f:5d:6f:d7:
50:67:e5:a4:96:ae:e0:31:2e:22:27:02:f7:27:86:
11:db:61:d2:1b:97:c2:12:a0:95:e3:e2:12:6a:6a:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:18:E9:F3:D4:7B:05:1B:6E:BE:5A:79:74:03:A2:08:2C:D9:FE:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BD441486EDB711EE861BECB0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
32:76:7a:bb:cb:06:48:30:05:fc:e6:aa:a1:85:c9:b3:fb:1c:
03:31:c7:5e:b7:76:dc:7c:ca:f7:9a:dc:00:bc:f0:92:64:1c:
ff:cc:ce:4e:53:55:bf:bf:47:69:81:c3:3a:82:26:1b:fb:02:
26:d6:99:42:ea:86:74:70:cf:ea:03:83:ac:5c:6f:1f:3f:37:
cc:3a:99:a6:33:13:4a:72:0b:03:03:ae:70:50:a9:89:dd:4f:
14:0c:bd:ab:6d:a6:7e:49:c1:7f:6a:62:02:03:57:2e:a1:61:
dd:db:af:88:c2:f8:ec:fb:2b:8e:b8:75:ec:90:5b:9f:54:ce:
48:6e:73:4e:01:ba:fd:4a:6c:79:f0:f6:c3:7b:0f:03:29:59:
f9:9c:17:ce:3a:8b:bc:11:65:5f:42:68:23:61:55:f5:32:27:
8f:d0:66:14:42:80:63:a3:79:b9:23:3a:1f:3c:37:a3:f5:a4:
ce:dd:ea:56:6d:4a:2e:d4:1e:9e:40:ad:86:cb:49:e4:61:b9:
d7:d3:16:2e:66:03:60:0d:e5:20:0c:b5:f1:3a:c1:96:06:e5:
ea:43:0b:c8:df:ff:76:17:9c:d6:19:50:43:10:83:83:35:d2:
a9:50:57:08:e9:6d:f4:6e:37:82:65:2a:5a:a5:ba:7b:c5:58:
52:78:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:19 2024 by rpki-client on console-ams.rpki-client.org