Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF773D7CE75A11EEAD899B61775412E6.roa
File: BF773D7CE75A11EEAD899B61775412E6.roa (raw, json)
Hash identifier: x8zbuYYnZpdksDMsvA7H9uZsY2oQBPq5PumnbDG4BRw=
Subject key identifier: 9E:23:95:FE:AC:46:DD:38:82:3A:9E:BF:04:46:BA:45:5C:62:6A:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A4CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF773D7CE75A11EEAD899B61775412E6.roa
Signing time: Thu 21 Mar 2024 08:12:24 +0000
ROA not before: Thu 21 Mar 2024 08:12:21 +0000
ROA not after: Tue 23 Apr 2024 08:12:21 +0000
asID: 44559
IP address blocks: 154.211.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42191 (0xa4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 08:12:21 2024 GMT
Not After : Apr 23 08:12:21 2024 GMT
Subject: CN=65fbebe8-c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:41:a4:da:4d:41:6b:d2:ae:99:1e:f9:48:
0d:fb:5e:80:72:8a:ce:7f:8f:26:66:b9:ea:11:94:
6c:72:24:8c:a5:12:bb:37:ff:73:c8:40:88:ff:79:
12:5a:51:19:5e:a4:db:ab:ff:27:aa:74:a5:3b:00:
a7:3f:9f:3c:3c:c2:49:6c:31:db:7e:3d:38:ed:a7:
e4:e8:41:c5:23:f7:80:3a:e6:c2:26:83:04:4c:d0:
cb:fc:f3:bf:49:cb:b4:e9:95:d4:96:e2:4c:ad:bc:
e7:c1:31:96:b7:91:8c:6b:b9:7c:c1:8d:14:61:23:
38:a8:b4:47:66:b4:12:d9:69:d7:18:c1:99:fa:05:
e4:a1:7d:81:13:67:d2:51:8c:97:f0:41:2b:db:b2:
75:40:e1:fb:69:7c:f9:dd:44:0e:99:ba:39:68:9c:
ce:e2:d3:28:1b:5f:36:6f:ab:78:ce:06:4f:98:e4:
82:dc:33:06:83:97:7f:a8:af:c5:51:16:87:a9:78:
ad:0e:46:97:6f:4e:b2:04:89:b7:76:f1:54:dc:90:
c1:ba:6b:93:45:9c:66:68:0b:2f:71:c5:15:38:2c:
a4:cb:25:38:e4:bf:f6:5d:97:5c:8f:59:51:ae:cb:
d5:11:58:5e:75:1c:13:79:cf:c4:3b:ba:e2:fd:ec:
76:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:23:95:FE:AC:46:DD:38:82:3A:9E:BF:04:46:BA:45:5C:62:6A:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF773D7CE75A11EEAD899B61775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.49.0/24
Signature Algorithm: sha256WithRSAEncryption
35:00:74:b1:e9:a5:ea:a8:e5:f9:7d:26:a2:3d:f5:b9:c8:c0:
7f:6e:e7:c3:4d:da:c4:e9:15:a6:28:4d:57:9b:23:95:01:90:
32:51:5c:b2:1e:a7:60:bb:e0:35:62:68:73:ae:1e:bb:d6:b0:
70:71:b7:07:46:be:8d:c8:32:4e:48:4d:cd:60:87:36:96:20:
17:32:fa:1c:79:3d:04:0d:03:e1:9c:6f:6b:85:9e:71:c0:5f:
5e:f3:cf:d4:4c:b3:6f:9b:4a:f0:14:fc:48:93:d3:be:3c:89:
bd:16:f0:b3:dd:97:95:c8:70:18:4f:88:01:b8:09:66:e4:c4:
0f:e3:67:0e:26:ce:ca:34:24:f8:4b:ce:b6:b5:38:a9:37:a8:
8e:47:4d:4d:38:4b:c0:1e:3e:d5:84:e6:7e:78:59:dc:c0:86:
f0:d7:a5:35:78:e0:e5:a6:55:6e:52:b6:94:d8:11:05:37:f1:
22:55:e3:03:63:e1:cc:30:08:35:13:e5:20:b8:3a:d4:d0:11:
ed:24:85:27:d8:0e:ab:cc:29:18:da:d8:fc:65:4f:b3:35:c9:
22:f5:d5:82:c6:20:ea:62:a7:3d:1c:22:fd:43:28:5c:a5:38:
d5:94:5d:05:eb:48:c6:18:0f:a1:9d:b3:7e:90:88:e3:c7:5d:
f4:e9:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org