Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA7A8D36E74111EE8168B89E775412E6.roa
File: DA7A8D36E74111EE8168B89E775412E6.roa (raw, json)
Hash identifier: mvDiKBvyYnDh1D+5S6j3CaGT4BYfVFhOaisVKzc6heU=
Subject key identifier: FC:D1:EC:96:7A:DB:B3:AD:46:12:20:B7:C2:02:66:D5:A4:20:2A:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA7A8D36E74111EE8168B89E775412E6.roa
Signing time: Thu 21 Mar 2024 05:14:12 +0000
ROA not before: Thu 21 Mar 2024 05:14:09 +0000
ROA not after: Tue 23 Apr 2024 05:14:09 +0000
asID: 44559
IP address blocks: 154.221.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41950 (0xa3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:14:09 2024 GMT
Not After : Apr 23 05:14:09 2024 GMT
Subject: CN=65fbc224-dfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:31:c2:8e:2f:33:9b:d1:43:ec:10:9b:fd:
6b:0d:19:f7:38:7c:a1:aa:f6:86:d9:a1:e0:be:57:
46:0f:09:d1:8d:eb:14:fc:07:6d:2c:64:95:06:eb:
b7:b7:a5:c5:0c:5b:7e:80:58:7c:8e:88:db:f7:3e:
0c:1c:d9:82:04:93:2f:5b:e5:ce:bf:d3:36:17:ae:
5a:49:99:93:28:21:c5:41:a6:8c:c7:ab:26:81:03:
ae:34:27:ae:d2:3a:f1:6a:e4:ed:1a:27:ea:85:59:
0b:5d:e8:3d:f7:f1:af:1e:12:ae:5b:3f:49:0e:f5:
29:81:ba:99:0e:c9:71:73:6a:1b:31:bc:40:4d:a6:
41:d0:16:5a:32:dd:f4:8b:bb:5c:2f:d9:96:7c:c5:
68:f2:37:8a:5a:9a:79:f4:ee:14:bc:38:15:c9:a5:
e2:6f:a4:14:bb:e3:e7:8c:7c:49:08:11:8c:36:21:
7d:99:1f:44:f2:2d:b6:b1:85:15:27:69:ca:cc:7b:
62:a9:9c:64:6e:7d:7f:bc:6d:68:68:88:0f:f0:03:
d2:f2:5c:d1:8b:11:33:91:e6:6a:0c:6a:8e:a2:ba:
2d:94:44:5f:be:5e:80:23:8f:0b:71:a3:ce:61:82:
22:6f:bf:3f:5e:35:69:11:d7:e5:c4:0e:b1:80:f2:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:EC:96:7A:DB:B3:AD:46:12:20:B7:C2:02:66:D5:A4:20:2A:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA7A8D36E74111EE8168B89E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.202.0/24
Signature Algorithm: sha256WithRSAEncryption
be:05:e1:34:b9:24:82:5c:13:9f:8a:1f:cf:41:c3:cb:70:7a:
93:75:a9:2f:ed:88:31:bb:8a:98:13:4e:dd:da:3c:a3:76:a5:
73:9f:36:82:05:19:72:11:88:fe:40:88:17:d3:42:57:6a:6f:
25:b5:7b:da:6f:5b:e6:a0:67:be:26:6f:04:d1:3d:2f:e3:81:
a9:6a:c5:ad:ca:4f:44:b6:67:fc:8d:f3:a3:fd:35:11:b9:33:
c8:64:97:25:f3:4b:d8:56:4f:10:95:3e:b1:0a:c1:e9:4b:64:
89:26:42:8c:c5:17:d9:fd:30:59:bd:08:47:25:13:6f:a4:af:
14:b0:11:61:d0:17:20:dd:b2:7d:f9:ab:b3:d4:58:ac:72:6f:
a8:1f:59:0c:c8:e7:52:19:81:46:ae:00:be:c0:a1:2d:d3:6f:
0b:db:f9:cb:11:f9:32:59:b5:fc:04:95:b4:79:24:f4:b8:13:
53:db:89:2d:e1:f3:ee:73:bb:5b:5a:d0:f7:fc:94:55:b9:5d:
2b:25:c7:df:66:26:ec:4d:6b:17:ef:56:84:46:fc:75:df:a7:
9a:fa:95:0c:40:ae:ca:24:23:6c:aa:e3:2c:a1:a2:42:1b:61:
a1:ed:22:16:27:0e:f0:f7:4c:e3:f4:78:a7:60:94:49:7b:4e:
55:4f:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org