Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C57A44AAF57711EEB65B9C5F775412E6.roa
File: C57A44AAF57711EEB65B9C5F775412E6.roa (raw, json)
Hash identifier: gRpEJ8e0l3lzTpQC5b7Gvucpb5cEp06p6wKlPdfbtcM=
Subject key identifier: 1E:EF:AE:C7:53:0B:C2:1C:B0:DB:A4:11:5C:C5:B0:16:A2:6B:3B:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AA51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C57A44AAF57711EEB65B9C5F775412E6.roa
Signing time: Mon 08 Apr 2024 07:15:26 +0000
ROA not before: Mon 08 Apr 2024 07:15:22 +0000
ROA not after: Mon 13 May 2024 07:15:22 +0000
asID: 138915
IP address blocks: 154.206.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43601 (0xaa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 8 07:15:22 2024 GMT
Not After : May 13 07:15:22 2024 GMT
Subject: CN=6613998e-878a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:e9:22:94:cb:4d:f0:8c:77:06:f8:51:a8:
5b:28:c2:e2:7c:46:3c:8b:aa:c6:8d:e3:5c:20:0d:
d1:84:34:d2:c5:c6:c2:2b:ad:92:1f:bb:fe:1f:83:
4a:0c:73:b1:3b:3e:33:e1:fe:31:90:cd:ca:48:10:
b0:63:95:2c:2d:f7:85:39:d6:58:c6:81:e7:1d:de:
d6:93:bd:97:5a:24:41:49:02:a6:5c:d7:bf:8f:02:
df:33:cd:05:be:fd:5d:6c:23:9c:17:6c:e8:6b:56:
b3:32:c1:5a:a8:3d:f8:98:63:4b:36:fe:39:34:7f:
af:61:8e:07:14:f2:d6:34:52:c5:2f:4f:dc:e5:c6:
ab:e9:47:2b:63:ea:a4:6d:04:f1:e2:eb:b0:eb:24:
68:05:b0:7d:c8:25:05:68:0a:94:1b:e8:64:67:de:
bb:ab:29:8e:48:5d:64:1d:b2:61:b7:11:72:b0:4f:
d9:c2:d3:ea:26:86:3f:25:b5:d0:b9:dc:8e:b6:77:
6b:8e:a7:03:63:84:6b:38:5d:cb:78:50:f1:6c:b5:
81:1f:09:fe:bd:ba:0b:4c:78:9a:10:c1:b8:c6:93:
5e:7d:c0:4f:20:6b:b3:47:88:0f:24:2b:1c:c0:e4:
0e:07:4f:2f:45:30:8a:82:d0:93:52:48:a0:40:26:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:AE:C7:53:0B:C2:1C:B0:DB:A4:11:5C:C5:B0:16:A2:6B:3B:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C57A44AAF57711EEB65B9C5F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.90.0/23
Signature Algorithm: sha256WithRSAEncryption
74:97:95:39:9f:82:75:5f:4b:ac:64:34:a8:29:e2:9c:d0:02:
f4:fe:ec:2c:76:62:00:31:bd:37:b5:53:1a:86:5a:fc:bf:80:
07:eb:1a:75:d2:d5:8b:27:d9:b8:a5:38:35:f6:13:5e:67:66:
80:f1:f7:4a:28:2a:eb:dc:3f:89:0f:cb:3e:96:87:31:6f:24:
3d:9e:15:63:54:7f:83:96:72:2f:c0:43:f3:88:06:d7:11:c5:
e4:cf:a6:06:e5:5e:19:4d:41:8e:9a:24:a6:95:c9:3a:15:01:
e9:b8:28:d7:46:32:f4:d8:c8:e5:eb:53:a2:e3:7c:a7:0d:55:
43:a9:7e:64:26:c2:35:1c:c5:13:fa:2d:b3:14:61:d7:55:ba:
bd:af:16:c1:80:40:88:98:45:8a:a3:c1:ac:12:f6:22:63:5d:
fa:64:1d:9d:19:8a:0c:94:19:30:2c:b1:d4:b9:9b:d3:7d:ca:
d1:13:68:14:78:8a:d4:7d:e6:f9:f2:5f:e6:34:f3:32:b2:ac:
29:4c:42:5b:db:f2:85:63:41:d6:ee:78:17:c8:38:73:c8:33:
aa:72:62:be:ff:18:c2:df:96:52:3a:2a:31:0c:85:5a:6d:19:
dd:0b:d9:ea:a5:f4:02:6b:03:44:cb:ed:05:0c:48:ab:7c:ba:
7b:d0:38:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org