Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCEE448AE73D11EEAF82A97F775412E6.roa
File: DCEE448AE73D11EEAF82A97F775412E6.roa (raw, json)
Hash identifier: /8Q6WfoDfQF8umD0g/k/ZGGDPCR6nzHkQsyp5VjEnbM=
Subject key identifier: F0:B0:34:FB:D9:23:E3:D3:44:8A:92:65:70:A4:57:CC:7F:22:7B:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCEE448AE73D11EEAF82A97F775412E6.roa
Signing time: Thu 21 Mar 2024 04:45:38 +0000
ROA not before: Thu 21 Mar 2024 04:45:35 +0000
ROA not after: Tue 23 Apr 2024 04:45:35 +0000
asID: 44559
IP address blocks: 154.221.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41910 (0xa3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 04:45:35 2024 GMT
Not After : Apr 23 04:45:35 2024 GMT
Subject: CN=65fbbb72-afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:9f:76:e0:5d:f5:b9:ef:44:f7:df:e1:85:
f7:66:63:0b:d7:5d:03:ea:fe:e7:a5:6c:ab:6f:af:
20:60:c8:3a:2f:51:e7:20:bf:1a:a9:3f:66:94:a1:
9a:d7:70:9c:8c:8f:db:7a:be:94:29:db:d2:3f:43:
71:bb:60:11:be:68:6e:b4:df:41:61:e2:83:2a:68:
a0:a5:65:30:6f:bf:b1:d7:f0:02:fd:8e:50:4f:24:
85:0f:40:5f:e7:62:0a:60:5c:4a:e8:cf:b1:eb:40:
1e:99:67:44:d1:9a:14:4e:1d:65:39:d1:2e:e5:bd:
fb:88:ba:7d:b9:6c:3c:76:62:41:7d:9d:d1:e9:70:
ef:d4:4f:43:34:84:a2:9e:ed:d1:fd:a2:36:ca:d9:
dc:e2:03:78:db:f8:f3:6d:f4:a2:8d:c7:ca:f9:85:
40:f1:71:d7:69:d5:65:2a:07:2c:1b:08:06:ce:ae:
31:f8:26:12:2d:a8:f7:1c:e5:f2:ef:a4:87:ec:38:
6b:a9:3b:23:9a:43:2e:42:11:71:a7:76:ef:92:79:
62:13:8e:2e:f7:f1:aa:c0:9e:46:3f:11:e4:4c:f6:
0b:e6:a3:0a:04:02:fc:22:36:c9:cf:9b:2e:69:17:
f2:15:bb:5e:33:99:8a:a8:ab:e7:75:f2:65:65:b7:
d0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B0:34:FB:D9:23:E3:D3:44:8A:92:65:70:A4:57:CC:7F:22:7B:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCEE448AE73D11EEAF82A97F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.222.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f5:7e:74:55:37:30:75:20:89:ac:59:ae:27:ab:e8:f4:d3:
8f:ca:4e:e8:8e:02:cc:0b:d1:0a:b4:58:73:4e:cd:43:40:85:
81:d4:89:98:49:b2:1c:7b:a2:6a:df:d2:b7:6f:5d:ee:8e:aa:
57:4c:ad:0a:5a:27:5c:3f:52:2f:34:14:88:3f:8c:08:32:55:
28:00:7c:a9:f9:7c:0a:42:03:0c:f3:b8:5f:c0:c4:27:73:93:
ff:5f:bf:73:69:b9:18:69:aa:67:04:92:6c:92:cb:1f:65:c2:
72:04:22:58:7b:4d:1a:5b:0c:7b:7f:fd:31:ce:21:6e:3b:39:
75:c7:08:c5:6b:28:ea:a9:34:31:93:06:17:81:6a:8a:2b:9b:
82:17:cf:f4:fc:d8:a9:b4:50:a4:76:ec:78:39:29:b1:8c:b7:
c1:2d:6b:4e:93:eb:fb:d3:98:5e:66:23:c5:46:0d:02:af:76:
30:c4:5d:8f:28:f0:dd:1b:8f:07:97:4f:8f:9e:b9:24:65:7a:
2c:cb:b3:ba:0d:64:36:7f:57:ab:09:ab:1c:3c:c1:6a:21:1c:
de:ff:c6:c6:bf:4f:f5:e2:6d:07:2b:e8:72:56:a4:a9:23:88:
28:09:a2:28:cb:71:59:63:e5:ba:88:36:42:00:c0:40:31:af:
8e:56:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org