Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D532D684F7C811EEBA8C4D6C017001B1.roa
File: D532D684F7C811EEBA8C4D6C017001B1.roa (raw, json)
Hash identifier: DGm7L4Ik73grWt0x7Dt8oBk9KU+/m04g7WW66eEVXMg=
Subject key identifier: A0:D2:97:41:22:AB:47:F4:9E:1B:F7:46:C9:D7:54:88:00:21:0D:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AB53
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D532D684F7C811EEBA8C4D6C017001B1.roa
Signing time: Thu 11 Apr 2024 06:00:44 +0000
ROA not before: Thu 11 Apr 2024 06:00:40 +0000
ROA not after: Sat 20 Apr 2024 06:00:40 +0000
asID: 133180
IP address blocks: 154.194.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43859 (0xab53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 11 06:00:40 2024 GMT
Not After : Apr 20 06:00:40 2024 GMT
Subject: CN=66177c8c-704f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:e3:bf:d5:3c:20:bd:fb:7d:70:e0:8a:6c:
8c:ba:35:bf:ba:1d:0c:3c:4a:cb:61:f4:f8:74:2e:
9f:ce:2b:39:5e:19:60:c4:2f:a8:32:2b:d4:8e:7d:
89:f1:60:9a:97:46:b0:aa:a8:e7:44:58:dc:d3:fe:
73:c4:5c:1c:8e:c2:79:43:a8:0a:c3:3c:0c:6a:44:
1e:c4:a3:bc:d6:2c:b1:60:8e:ce:05:27:d4:1e:99:
0b:c4:7d:94:0c:ba:09:1c:ec:2a:26:4b:e2:1a:4e:
ca:5a:c8:7b:fb:ac:25:52:26:4f:48:f0:16:0c:34:
cd:0e:df:13:c9:5d:4c:e9:fb:01:98:12:fb:d1:f8:
e1:2f:e7:c1:d8:a6:74:c7:36:b8:86:94:98:ab:b1:
c8:05:bf:2e:4e:8f:8a:eb:35:c9:0a:b2:21:bd:dd:
73:91:9e:1c:39:cc:20:17:dd:68:6e:09:05:da:77:
51:98:f4:6b:bb:54:51:2b:43:d1:e3:d1:40:e3:72:
77:bc:75:f1:06:4f:3d:df:23:dc:41:10:8f:35:8d:
3d:51:b5:52:20:be:a5:e1:58:64:fc:f7:d6:5f:04:
17:68:d2:20:f9:db:eb:bd:fc:1f:01:70:30:39:b5:
31:52:92:55:4a:a3:a1:f6:e0:36:4a:b6:3e:f3:7b:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D2:97:41:22:AB:47:F4:9E:1B:F7:46:C9:D7:54:88:00:21:0D:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D532D684F7C811EEBA8C4D6C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
47:60:68:7a:7a:2f:07:a0:c9:d2:f1:04:5b:08:b2:d4:ab:a3:
50:36:1f:e4:36:39:d3:b1:ae:70:55:d7:81:e6:76:d9:e3:14:
4d:95:10:b5:9a:a6:6e:52:5b:20:34:67:38:02:6e:59:09:af:
10:12:74:cf:d1:3c:eb:2a:31:14:f7:d7:22:a8:3a:84:25:3c:
d4:36:56:a5:d7:5e:0d:f4:10:39:0d:0e:55:32:51:59:14:8a:
51:3c:3c:b4:61:2d:1e:75:d4:a4:f5:74:03:cc:0c:d2:fc:f1:
f7:a8:82:6d:31:c5:ba:12:84:22:42:05:e4:66:d3:15:1c:d5:
ff:3f:63:ed:13:28:b8:24:54:0c:ca:17:8c:ed:ed:e8:94:44:
81:81:1b:ac:09:dc:0b:d2:da:f9:ce:aa:ca:67:22:58:fe:e6:
fc:38:46:d1:40:1f:d1:ab:4b:4e:5e:31:98:72:30:cd:13:0d:
74:ff:5a:ed:f6:d6:43:11:86:d8:59:14:af:59:99:4b:b9:d3:
50:db:fe:7d:25:72:2c:90:81:e0:9a:65:7f:7d:12:ce:d0:bf:
6d:54:b0:67:d7:a5:0c:ad:d4:96:5a:f0:b9:7c:5e:84:2c:2b:
1e:64:ca:c7:9e:21:84:ca:73:84:63:fb:9c:52:ca:51:42:37:
8d:14:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:19 2024 by rpki-client on console-ams.rpki-client.org