Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B4BB5CF72D11EE876207F8007001B1.roa
File: C3B4BB5CF72D11EE876207F8007001B1.roa (raw, json)
Hash identifier: FzxWBNQlUsqPiPeueevTenSpquZ220Ig7eMgU2KeJN8=
Subject key identifier: 94:A9:20:86:7E:E0:FD:A6:1D:F1:9A:90:CB:1E:FD:71:DD:22:1F:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AAE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B4BB5CF72D11EE876207F8007001B1.roa
Signing time: Wed 10 Apr 2024 11:30:42 +0000
ROA not before: Wed 10 Apr 2024 11:30:39 +0000
ROA not after: Fri 20 Dec 2024 11:30:39 +0000
asID: 132813
IP address blocks: 154.211.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43748 (0xaae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 10 11:30:39 2024 GMT
Not After : Dec 20 11:30:39 2024 GMT
Subject: CN=66167862-bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:68:b8:d4:f9:37:39:11:95:e5:25:50:fd:
a7:91:14:ce:b0:98:8f:38:c6:1b:04:b2:36:5a:5e:
db:24:95:81:ac:48:d4:08:26:fe:86:0c:c4:1c:9d:
7f:0b:2a:cf:4e:f4:d0:b0:77:b9:52:a5:dc:34:63:
eb:05:e6:2f:33:dd:16:6a:3f:87:53:55:3a:44:19:
67:a0:ce:99:a8:fa:ff:50:04:78:f4:05:25:ad:7c:
a7:38:68:71:39:b2:0e:9c:12:b3:5a:8b:84:15:ce:
f7:57:48:1f:c1:8c:40:6c:83:70:dc:2e:bf:35:16:
c7:e5:c9:5f:b1:61:67:94:a5:9c:3e:2b:1a:74:dd:
ef:df:52:ca:56:77:9b:e1:5f:a0:43:a5:3b:2e:af:
0e:df:49:3f:27:5c:0c:70:dd:18:a7:95:51:ac:f1:
e7:85:6a:b2:96:05:5c:bb:7c:93:a3:75:64:be:21:
a9:a2:84:c1:e7:3e:45:c6:55:66:45:69:72:de:40:
56:b8:69:00:3c:d6:84:93:31:9f:18:7e:b4:24:19:
66:da:44:2a:8f:93:73:db:32:b9:23:95:45:68:1b:
e5:3a:18:40:83:97:4c:b0:9c:b0:f4:9b:0f:3b:ae:
33:1b:d3:2a:0d:4b:e4:a4:de:a2:a2:a9:88:e8:54:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:20:86:7E:E0:FD:A6:1D:F1:9A:90:CB:1E:FD:71:DD:22:1F:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3B4BB5CF72D11EE876207F8007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4c:81:9f:ae:81:a4:5c:5a:37:40:0f:e0:f9:cb:8e:03:47:
e9:ee:d3:35:bd:80:bb:07:6c:f9:d3:31:6e:73:3b:2d:df:75:
b3:9b:ed:1e:f1:0c:a2:89:ec:2f:e8:ee:d6:0d:f8:80:4e:7f:
9b:5f:97:8f:d5:7a:11:99:12:43:7b:b4:9b:6c:02:28:2e:dd:
b9:b4:1e:5b:0a:67:d7:7d:cf:dc:0c:fd:31:b1:5c:f1:2f:d5:
8e:4e:73:5c:64:4b:71:d1:9c:99:1e:73:fd:25:f1:a7:70:10:
fb:ad:0a:fb:c4:b9:83:a7:cb:42:27:e1:de:ba:ca:5b:67:dc:
62:03:96:fe:bf:69:fb:8d:f3:d5:84:28:20:21:27:23:99:63:
1c:6a:93:16:ec:44:6a:80:1d:40:72:2d:7a:b8:1e:39:ab:f8:
90:78:d4:4f:96:cf:42:ae:91:89:74:ae:81:0a:ba:3d:5c:e6:
4e:77:19:8b:25:67:6c:88:47:59:e6:2b:f3:9c:b0:e8:46:ba:
31:f6:70:29:f1:8a:6b:37:d6:e8:b6:72:12:57:6a:46:9c:fe:
eb:68:6d:b4:d5:f8:24:a6:25:a9:5d:95:0f:97:22:e3:c6:58:
3c:7b:78:28:83:a1:67:5f:08:e1:07:80:79:94:8c:b1:dc:bd:
ee:3d:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:37 2024 by rpki-client on console-fra.rpki-client.org