Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB675632E73E11EE9CB39288775412E6.roa
File: DB675632E73E11EE9CB39288775412E6.roa (raw, json)
Hash identifier: N5hgXvJVDUexglVFYMzpfzMH3Uu+yNjI9z7jX+3TGpE=
Subject key identifier: 55:46:CF:4F:39:E9:C1:2A:F4:9A:E0:BA:78:6F:94:F5:13:F7:49:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB675632E73E11EE9CB39288775412E6.roa
Signing time: Thu 21 Mar 2024 04:52:45 +0000
ROA not before: Thu 21 Mar 2024 04:52:42 +0000
ROA not after: Tue 23 Apr 2024 04:52:42 +0000
asID: 44559
IP address blocks: 154.221.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41920 (0xa3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:52:42 2024 GMT
Not After : Apr 23 04:52:42 2024 GMT
Subject: CN=65fbbd1d-ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:51:e1:20:d1:43:84:d8:36:72:67:11:f2:
a0:66:8f:fd:07:62:78:03:63:07:42:b9:03:6f:0a:
f3:5b:ec:cf:e2:29:ed:4b:f0:28:b5:ed:0b:ee:96:
f2:d3:54:20:c2:f7:80:fc:fa:47:92:eb:f0:11:43:
cf:06:c1:83:e0:af:67:b6:21:8f:c8:1b:a1:87:15:
b0:96:eb:ce:c9:6a:4c:ca:40:30:4d:d2:30:4a:77:
5b:9b:e5:b0:eb:08:67:c5:7d:3f:92:a5:68:3a:66:
d5:2d:c2:b4:f3:4c:df:b7:96:ac:bf:94:40:30:be:
5a:73:ac:56:35:e6:56:6d:53:d1:b0:44:51:78:36:
b0:51:7d:32:0f:6a:8e:11:58:34:4a:15:3d:69:9f:
d7:4b:cb:aa:95:05:80:6f:82:71:78:4a:b7:40:07:
e9:02:a2:ca:57:c3:ce:90:df:fd:d0:36:f2:fc:24:
37:4a:84:e7:18:0e:30:fd:a7:09:80:95:af:88:dd:
3c:15:f0:ee:d0:55:62:ac:35:c5:62:ad:c6:8e:e8:
30:3d:42:c5:ab:64:68:f4:ea:87:4f:f1:b4:7b:a3:
f1:06:4a:ee:3d:17:5d:1d:9a:ec:06:e5:7e:82:72:
27:3f:26:dd:08:42:a8:3c:3e:6f:7b:de:69:54:97:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:CF:4F:39:E9:C1:2A:F4:9A:E0:BA:78:6F:94:F5:13:F7:49:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB675632E73E11EE9CB39288775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.217.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4b:9e:f6:ed:8f:52:46:3b:14:ea:55:2a:14:55:a1:3b:93:
42:a4:90:d3:29:b5:6d:d4:70:55:f7:e5:0f:12:60:a6:19:18:
6d:92:34:28:b1:72:4a:7d:ff:83:aa:81:39:d1:0d:72:b7:0f:
65:ab:39:2d:9e:9a:12:0c:cc:aa:d2:9f:62:b8:20:c8:9b:78:
a0:d1:b4:26:e9:00:75:c5:5b:f0:b3:04:44:ac:b1:07:e0:57:
cf:4e:51:54:75:64:47:67:de:ce:2b:31:4f:ad:8e:a8:dd:82:
19:b3:15:2c:51:60:c4:dc:00:28:2c:1a:e0:f2:de:5a:1f:a3:
07:ce:3f:5a:47:ce:d4:4f:92:96:66:2a:a9:fe:eb:9e:98:26:
31:44:61:6b:53:6d:a1:92:17:47:ad:10:9d:94:7c:09:d9:9e:
de:5e:5f:49:b0:cb:89:9e:90:0b:71:d7:05:b9:10:62:dc:36:
7a:bc:0f:a7:2f:79:fe:e6:ac:51:c6:41:a5:d7:2d:a8:1e:95:
7a:12:44:df:6c:ab:c1:f0:f9:69:40:ae:66:af:94:99:3f:47:
1d:10:b7:2e:8e:29:c6:4d:ad:6c:0f:cf:1e:ad:53:99:c1:64:
70:56:aa:88:b3:df:be:1f:a5:37:d5:72:0b:f2:d6:ae:d2:c1:
fe:a4:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org