Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBC1F3B8E74C11EEBCF47D75775412E6.roa
File: DBC1F3B8E74C11EEBCF47D75775412E6.roa (raw, json)
Hash identifier: Dk+mHi6/ImNo6L78/vf40Zq5VZdiqHKnpNZg+1HfdTQ=
Subject key identifier: 9A:F0:16:B2:FD:09:55:4B:05:CA:F9:A8:BF:51:72:05:1E:CB:E9:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A447
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBC1F3B8E74C11EEBCF47D75775412E6.roa
Signing time: Thu 21 Mar 2024 06:32:59 +0000
ROA not before: Thu 21 Mar 2024 06:32:55 +0000
ROA not after: Tue 23 Apr 2024 06:32:55 +0000
asID: 44559
IP address blocks: 154.220.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42055 (0xa447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:32:55 2024 GMT
Not After : Apr 23 06:32:55 2024 GMT
Subject: CN=65fbd49a-8c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:bf:22:84:67:34:85:77:a3:9a:76:70:78:
2b:d0:ad:8b:dc:06:4d:15:88:18:2e:86:ef:25:86:
6f:d0:f5:43:56:9e:f7:3c:1d:4f:50:cb:4e:62:a8:
c7:e0:27:35:83:e7:ce:88:6a:47:f0:27:50:45:9a:
e1:cb:51:cc:7d:6f:74:5a:1f:3c:10:a4:17:64:4b:
a0:9d:4b:2d:36:8f:21:4e:0b:76:6c:2d:a1:5e:75:
d0:0a:c3:12:aa:a5:c5:d9:e1:c8:61:4c:65:cb:48:
d4:a9:e9:a3:31:91:f2:6e:83:2e:4e:c8:4f:da:2a:
80:9e:2e:5a:05:57:ce:c3:21:86:69:d1:db:8b:24:
6b:b4:6c:c0:e0:23:95:97:a4:d7:85:1c:96:64:81:
b1:68:58:81:a2:65:60:fa:68:96:6d:6d:b8:90:06:
a4:c4:cb:bf:1d:f1:00:c5:e0:a2:46:8d:40:e4:0e:
05:05:c6:f6:fd:df:6d:91:40:0d:f9:31:c6:8a:f8:
83:04:f3:a1:43:b8:9c:d6:42:9f:8b:4e:73:f8:71:
5a:76:15:d6:f5:f1:c9:6e:62:d8:f8:94:3b:6e:f1:
24:80:1e:e1:d2:da:b6:f8:96:84:38:c6:fc:d0:7e:
73:ca:9f:31:15:c4:79:c4:10:57:2e:f3:79:ef:b7:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F0:16:B2:FD:09:55:4B:05:CA:F9:A8:BF:51:72:05:1E:CB:E9:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBC1F3B8E74C11EEBCF47D75775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.149.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9c:04:2c:5b:a3:9f:82:1e:ab:e0:e8:c3:54:d9:46:6b:46:
d2:a3:aa:3d:02:e3:21:29:b4:bd:a1:02:0f:c5:10:94:f4:93:
05:9b:ec:0b:95:3b:af:6d:00:9f:64:7c:32:13:ce:8c:74:19:
8e:99:90:2d:e6:81:20:69:ee:5a:09:a8:9b:de:9a:5c:60:a6:
83:10:58:57:bd:c3:e1:9f:b7:9d:03:77:18:b4:2f:dd:0b:a7:
2a:7a:c7:b6:57:6d:e3:6a:c1:39:51:6b:8c:f8:7e:6e:b9:31:
d6:10:0d:5b:d6:64:d6:f0:c5:39:8a:86:f5:b0:cb:be:f2:ac:
45:ef:c2:9e:69:11:70:e1:01:06:6c:c9:89:1b:f1:d1:22:7c:
f2:56:b4:0b:de:02:cc:0b:06:c2:ce:6d:99:fc:a5:30:0a:74:
8b:44:4d:17:7a:6a:1c:94:ba:11:4a:dd:e4:1f:07:19:21:1b:
44:f1:2f:a0:80:f0:a1:27:42:e3:8e:ac:89:fa:cb:15:a9:f4:
9a:10:17:fd:d9:a5:83:1c:90:77:70:97:08:97:cd:8f:af:da:
7c:27:d6:a2:76:18:3f:99:d8:14:bd:9c:3a:a9:c6:e8:3a:2b:
c7:9a:91:85:16:1e:4a:05:07:7a:db:6e:6c:8a:9f:9f:2b:71:
81:e9:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org