Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E192AC86E74911EEA00FFB5D775412E6.roa
File: E192AC86E74911EEA00FFB5D775412E6.roa (raw, json)
Hash identifier: vKWowxtG7TXSUGzISxutijsHNzKWUw3eB+PjXHeq560=
Subject key identifier: F8:25:7F:D2:78:D6:B2:62:04:64:85:46:10:05:A6:1B:0F:30:4B:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A429
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E192AC86E74911EEA00FFB5D775412E6.roa
Signing time: Thu 21 Mar 2024 06:11:40 +0000
ROA not before: Thu 21 Mar 2024 06:11:37 +0000
ROA not after: Tue 23 Apr 2024 06:11:37 +0000
asID: 44559
IP address blocks: 154.220.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42025 (0xa429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 06:11:37 2024 GMT
Not After : Apr 23 06:11:37 2024 GMT
Subject: CN=65fbcf9c-aca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:8c:76:db:54:ea:df:a2:c9:b2:10:2a:e9:
8a:f5:fc:78:06:26:4f:17:fc:a9:4a:b8:2d:84:8a:
b0:15:f9:58:70:45:e9:0b:a3:18:96:4b:6a:ca:85:
97:a9:2f:ac:8f:a2:f6:0d:18:72:ed:27:a6:6d:63:
27:12:b4:ee:2a:16:57:f8:c7:aa:c4:46:a8:ee:b0:
cb:74:f2:ee:87:99:3e:d4:03:8f:38:c6:86:37:20:
52:99:ba:d8:a2:a7:d6:5c:5e:e8:52:11:9b:d7:c1:
e5:56:00:38:d1:14:f2:59:35:4f:57:21:ee:6d:2e:
02:2d:14:ae:d2:f4:18:fd:4a:f8:17:53:ea:5e:69:
54:85:ce:36:f4:76:80:8e:0f:7e:e8:d9:d9:ed:6e:
5a:b4:8b:9b:b3:13:d7:9c:41:56:3e:6a:ac:a6:4e:
b1:a9:e7:72:9b:a2:1e:26:62:61:ca:68:ff:25:ae:
07:66:05:41:ad:5d:13:e8:f8:07:86:32:3d:0e:3c:
cb:f5:f8:42:12:bd:21:62:ab:39:27:24:2e:b5:fe:
bf:b5:02:aa:e4:ee:5f:95:fb:c3:68:ac:1d:08:e1:
05:2f:cb:1a:de:d6:b3:d7:6a:6f:a4:7f:4e:6f:b8:
d4:ba:d5:43:72:bf:38:e8:34:a0:87:ba:7a:2d:06:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:7F:D2:78:D6:B2:62:04:64:85:46:10:05:A6:1B:0F:30:4B:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E192AC86E74911EEA00FFB5D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:18:d4:85:c1:70:51:83:0c:d4:17:1b:eb:62:54:1f:42:a7:
0f:97:11:aa:16:18:ee:a3:91:8a:82:ab:ef:60:54:fd:56:65:
8d:51:40:cc:3b:a9:a6:04:d9:0c:cf:31:df:1b:1a:75:5b:68:
6d:8e:6c:7f:d1:85:c7:2e:d1:19:c9:38:19:04:83:ee:b2:a2:
ea:9c:2f:24:6b:c5:8f:5e:74:c5:d8:75:8e:8c:db:6a:16:95:
9d:68:a5:c4:f2:aa:40:02:3c:a3:05:84:30:e8:f4:16:ce:c7:
aa:ad:0b:95:4c:98:17:9a:a2:9e:d4:5b:91:56:9f:96:e1:c4:
34:ad:43:c3:ec:b5:c1:ad:e6:f8:eb:4a:ce:3d:99:e7:31:df:
86:07:88:8f:7c:3d:97:bc:1b:12:05:0e:db:82:cd:e2:84:5d:
88:66:7a:8f:f0:ad:1c:61:a7:2e:8d:b3:0a:5b:46:10:e4:99:
12:e3:54:2a:09:8b:1a:e1:8f:d2:81:01:02:7d:0f:cd:eb:2c:
92:b0:d5:5f:dd:6f:8e:d3:19:38:03:fa:cd:30:f8:52:ed:81:
80:79:a9:35:e1:99:d3:b4:68:2c:93:d2:1a:ff:d5:77:44:e7:
0b:ec:b1:b6:cc:45:b0:dc:99:f4:12:9f:68:54:d0:45:9b:fe:
6e:4d:a4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org