Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2293490E76611EEA421BBBF775412E6.roa
File: E2293490E76611EEA421BBBF775412E6.roa (raw, json)
Hash identifier: SuqVNMrKKsL5vIbK0ASzvNHHdUfl59M6yWXPMIHNFDM=
Subject key identifier: E5:0A:B9:EC:33:BB:B5:74:57:8D:81:76:14:96:9E:AD:9D:8F:3E:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A51D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2293490E76611EEA421BBBF775412E6.roa
Signing time: Thu 21 Mar 2024 09:39:16 +0000
ROA not before: Thu 21 Mar 2024 09:39:13 +0000
ROA not after: Tue 23 Apr 2024 09:39:13 +0000
asID: 44559
IP address blocks: 154.208.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42269 (0xa51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:39:13 2024 GMT
Not After : Apr 23 09:39:13 2024 GMT
Subject: CN=65fc0044-1390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:76:91:62:f3:85:3f:35:40:71:4f:60:0e:
01:5a:43:48:d8:31:01:bd:41:79:9b:35:f5:de:3e:
3b:e0:92:49:90:cc:76:c4:a0:f4:96:74:e5:cc:72:
c3:58:9d:3b:ba:d3:13:77:d4:0b:15:91:7e:b6:01:
6c:13:8f:bb:e4:94:52:bd:cb:6b:24:0d:c8:af:15:
ad:0f:d7:48:5f:e5:ca:20:49:cf:22:47:7f:72:6f:
80:33:a8:80:43:17:8b:26:ca:80:93:5c:b6:50:d6:
3a:8a:1c:3c:ed:e4:75:8e:96:d9:df:43:19:9f:bc:
ef:61:f0:9a:8a:fa:0a:0c:b8:e8:11:15:75:a7:2e:
f3:a5:b3:3e:dc:6f:87:11:99:de:bc:a5:ee:a3:df:
9f:2b:9d:21:c9:27:91:1b:6d:84:b1:eb:ff:35:ed:
36:f2:07:a2:20:58:46:c9:b8:0e:54:fa:ce:cf:dd:
33:66:19:ac:09:4e:20:f1:a2:1b:71:93:6c:c5:26:
b8:e2:38:31:ec:45:ad:e6:83:af:63:d9:fb:73:2b:
a9:76:79:2b:fb:88:df:a5:03:c3:09:21:3a:66:15:
25:fd:cd:12:32:f4:f7:de:2b:14:f6:ac:18:af:23:
44:ad:90:1f:c8:4b:5f:08:04:fb:6c:1e:27:53:9d:
94:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:B9:EC:33:BB:B5:74:57:8D:81:76:14:96:9E:AD:9D:8F:3E:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2293490E76611EEA421BBBF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c4:3f:36:11:aa:9f:f7:ad:c7:95:cd:3b:96:92:b0:f9:0f:
40:36:b6:88:3a:d1:b7:a9:d5:8b:18:7a:85:e3:ad:7f:43:e9:
55:29:98:5c:30:eb:4a:f0:cc:0f:f0:d9:21:23:b9:b7:4e:1b:
2b:d0:e1:87:92:8f:49:85:cf:44:62:ee:06:5b:c6:0e:3e:89:
02:1f:71:09:d5:e7:f2:50:19:d4:82:1e:2c:bc:1a:7e:ef:94:
b3:58:33:d4:f4:8a:aa:2b:fb:bc:1e:82:21:cb:2e:b0:8c:f4:
b6:8d:95:70:24:89:ca:be:5c:05:52:ca:9f:8d:03:ba:a4:bc:
fc:83:8a:f1:3d:96:b5:a2:e4:b5:1e:70:4e:cd:e7:ff:b2:4c:
15:12:7d:7a:0a:9e:08:f0:73:a1:2e:96:53:20:a3:6a:80:2d:
29:79:20:6c:38:a4:cf:b4:20:8d:1c:2f:e4:45:77:c9:8c:7b:
f3:ba:59:86:24:b3:ca:11:04:c3:06:f1:21:41:7e:ca:93:c8:
d0:31:a3:85:1a:54:75:7f:4f:44:27:a5:0c:93:fd:0d:ef:67:
44:47:8b:3b:17:c3:9a:66:53:b3:a4:58:3c:2e:23:10:80:64:
aa:be:8e:cb:82:d6:21:a0:9a:8a:76:90:81:c3:5a:fc:dd:95:
27:aa:83:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org