Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70DC47C82B711EEAFA692284AD9E6FC.roa
File: D70DC47C82B711EEAFA692284AD9E6FC.roa (raw, json)
Hash identifier: UllmUdet1ZWQ6Oi2JovvmthgnCPDMIEoe9H8DWIeur8=
Subject key identifier: 81:E3:68:0E:87:27:54:76:09:13:86:03:1E:83:A9:E2:4F:F1:ED:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70DC47C82B711EEAFA692284AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:34:20 +0000
ROA not before: Tue 14 Nov 2023 06:34:16 +0000
ROA not after: Tue 12 Nov 2024 06:34:16 +0000
asID: 397630
IP address blocks: 154.202.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20418 (0x4fc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:34:16 2023 GMT
Not After : Nov 12 06:34:16 2024 GMT
Subject: CN=655314ec-6615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:1f:63:43:8f:a5:8b:17:30:ff:70:79:bd:
f4:b9:02:1d:05:46:29:1f:b2:26:9c:73:03:ce:fb:
a8:ef:21:b8:52:aa:c1:a4:6d:53:42:f2:ea:7a:dc:
f1:5f:e9:8c:af:cc:02:e4:1a:47:47:a6:4f:62:11:
a0:5f:c0:2e:1e:dc:60:80:f2:70:a9:3f:65:d1:55:
40:1b:d8:81:16:a7:22:24:dd:7f:54:df:47:3f:78:
8a:49:62:a3:27:68:53:23:29:9a:21:5a:d8:c4:26:
9e:52:39:d7:1f:bc:a8:79:b1:68:83:e3:e3:65:29:
2b:d0:b3:a6:b4:5e:e4:1b:c8:fd:86:06:e6:1f:4d:
40:f5:30:cf:7d:f4:76:a3:a8:a5:8f:0d:83:f1:dc:
52:44:bf:fb:84:be:e8:fc:0c:8d:aa:6d:5c:17:d2:
6b:62:0b:e7:f7:40:ab:99:73:6f:79:78:00:04:a5:
96:67:d0:b7:bd:ff:0f:f8:7f:58:79:cd:93:34:03:
54:de:b6:83:b1:75:61:20:b2:a3:a6:a0:21:b3:36:
ab:f9:52:c2:e7:60:34:8a:63:57:43:3f:a3:21:44:
ce:3e:03:5a:0b:fa:b9:3c:bb:68:a3:2f:89:9e:15:
27:98:b8:f0:aa:c4:d5:db:39:02:3c:d6:58:60:d0:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E3:68:0E:87:27:54:76:09:13:86:03:1E:83:A9:E2:4F:F1:ED:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D70DC47C82B711EEAFA692284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c3:a3:91:61:1d:a1:51:f0:38:95:53:77:06:c6:21:35:c2:
24:90:71:97:04:6b:d7:84:61:35:21:a9:70:bd:53:fa:da:a7:
25:ba:e7:cb:01:1e:c0:2b:77:7a:ec:d7:de:82:c8:1a:6a:d4:
10:e8:ac:e4:4d:1d:0a:e5:d4:31:6b:63:9b:b3:0e:9d:68:bd:
68:e2:e5:64:69:57:0d:ab:d5:d6:d2:66:af:f8:f3:12:65:a4:
0d:d0:66:4f:22:17:de:12:ba:09:89:5a:f0:c4:21:bc:fe:b2:
08:35:4e:bd:2b:4a:10:5f:0e:5c:01:b7:6e:20:92:dc:dd:4f:
ef:ca:d9:a4:70:8f:a7:a2:1b:d8:0d:d4:fd:a5:d1:82:52:0f:
c0:6a:95:55:74:d6:84:23:2d:da:d7:17:c8:7c:67:8b:df:03:
5c:99:a8:e2:d7:7d:8a:1f:59:bc:9c:86:87:a0:77:ca:4c:79:
81:0c:2d:0d:1a:00:21:c4:8d:41:eb:2c:ef:57:a5:7c:d7:27:
37:a6:79:a6:02:84:e2:bf:fc:21:bd:3d:19:48:a2:61:f6:d7:
77:6e:27:94:db:f9:85:a3:e3:10:ff:3e:93:d2:ca:52:50:0b:
fb:74:76:d1:18:a8:18:55:d8:ac:3f:91:2f:f4:b0:bb:e5:a1:
4a:88:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:40 2024 by rpki-client on console-fra.rpki-client.org