Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04AB73EE28A11EE99332CAD775412E6.roa
File: D04AB73EE28A11EE99332CAD775412E6.roa (raw, json)
Hash identifier: YyUn1BCNg19jPBb88PZzesy9NvSxouVkLdzkAo+b2C4=
Subject key identifier: 08:25:9A:1F:21:D8:08:89:65:9B:E4:10:70:7D:51:DD:FA:50:71:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A17B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04AB73EE28A11EE99332CAD775412E6.roa
Signing time: Fri 15 Mar 2024 05:13:52 +0000
ROA not before: Fri 15 Mar 2024 05:13:49 +0000
ROA not after: Fri 20 Sep 2024 05:13:49 +0000
asID: 2914
IP address blocks: 154.214.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41339 (0xa17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 15 05:13:49 2024 GMT
Not After : Sep 20 05:13:49 2024 GMT
Subject: CN=65f3d910-a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:80:fd:75:21:2e:b5:9f:29:d7:b5:5a:3d:
2f:66:3a:21:52:6a:f7:4a:31:53:d5:ed:05:f5:9a:
be:a4:22:6a:f4:b2:63:10:c3:33:10:78:29:7c:a5:
8c:82:d3:19:20:6a:49:77:07:b5:a1:20:fa:0f:45:
a8:da:ef:3b:e5:e2:49:02:25:b3:e9:9a:d9:3f:5e:
9f:9d:f0:1e:3a:1c:db:b4:3a:b8:a7:98:0d:2a:5b:
cc:ed:83:dd:23:59:4e:4b:e4:6b:be:3a:43:67:22:
b1:bd:55:2f:f0:b0:86:db:8a:b0:d8:fa:8f:93:2b:
4b:94:2c:a0:49:12:9c:80:33:9d:e9:2f:93:12:98:
9f:23:af:04:a1:1d:ec:72:d5:0c:76:1a:88:42:4f:
de:58:78:cd:88:9b:89:35:37:3d:71:bb:f4:90:97:
6f:6e:7e:6c:a0:5c:43:c6:a0:c0:c2:94:9f:1e:39:
62:eb:4f:6a:ea:99:91:a5:a8:64:27:68:9f:a2:14:
d9:85:52:29:14:91:b6:d3:70:14:43:87:c5:a4:d5:
e6:85:60:fd:be:a5:dc:22:47:53:f3:72:a4:28:1a:
00:7d:64:6b:79:a1:d9:c1:a1:52:e9:16:c5:3a:0a:
eb:09:87:f8:fc:d0:d9:a9:a8:d6:b0:27:97:ff:61:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:25:9A:1F:21:D8:08:89:65:9B:E4:10:70:7D:51:DD:FA:50:71:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D04AB73EE28A11EE99332CAD775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.220.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9e:55:4f:ea:4e:54:2b:c5:41:c8:58:db:2a:b9:7d:ce:aa:
fa:e7:79:d5:4a:3a:aa:2b:09:6f:b3:8b:36:6b:5d:c3:3f:01:
59:e8:44:a3:7d:7d:c8:12:31:bc:56:fd:f7:a8:f2:1e:46:8a:
61:04:c3:4d:e6:fb:b9:31:8c:7f:9a:c8:51:4a:bb:35:e7:59:
da:fe:53:22:29:c4:de:c6:f4:b1:29:5f:b2:15:98:c8:33:07:
d7:8a:09:9f:a1:61:02:11:ef:90:43:5e:22:7b:71:98:06:df:
9e:12:ef:64:b4:59:26:3f:40:fc:78:11:00:cc:2a:73:48:1a:
65:07:4b:2e:5d:52:3b:86:4b:24:65:ff:91:24:4a:49:a8:38:
23:20:bf:2c:be:30:70:1f:85:ea:a9:53:04:be:75:8f:95:36:
81:c1:b5:d6:64:ab:80:4a:67:d1:b1:5e:06:0c:e7:76:0e:12:
44:0a:ad:d0:a7:a1:0b:38:ca:36:24:28:14:48:71:a2:ae:b6:
53:4f:fe:e0:8a:59:65:12:f7:47:bd:0f:b8:89:be:54:fa:1f:
f3:c1:fe:3d:0f:20:ee:64:ae:b9:f2:12:e2:2a:3c:95:79:df:
ed:a4:f0:1b:8f:d7:83:f4:a5:e2:4d:88:31:3e:88:3c:b7:01:
6b:de:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org