Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4AC1D64E76511EEA30CB3B7775412E6.roa
File: E4AC1D64E76511EEA30CB3B7775412E6.roa (raw, json)
Hash identifier: DL83lzuNrpHMALju6FPt593fJ9eXhuUkh/unWdX717k=
Subject key identifier: 67:E7:6A:CB:28:7D:57:87:73:C8:B9:7F:D5:BA:C7:F5:FD:BE:3B:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A513
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4AC1D64E76511EEA30CB3B7775412E6.roa
Signing time: Thu 21 Mar 2024 09:32:11 +0000
ROA not before: Thu 21 Mar 2024 09:32:07 +0000
ROA not after: Tue 23 Apr 2024 09:32:07 +0000
asID: 44559
IP address blocks: 154.208.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42259 (0xa513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 09:32:07 2024 GMT
Not After : Apr 23 09:32:07 2024 GMT
Subject: CN=65fbfe9b-4ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0a:4f:4e:b4:37:8a:d9:eb:7b:00:14:5a:c0:
00:50:37:0d:2f:40:7f:09:51:89:bd:3a:c4:c4:4d:
1c:39:8a:d3:ee:2d:eb:75:79:d9:ff:9e:b5:4f:fb:
cb:4a:26:c8:86:dd:e2:dd:fe:cf:01:5e:6e:40:ec:
04:41:5f:49:ac:20:77:95:9d:b0:da:64:f2:f9:c4:
11:65:ee:1e:1d:60:7e:6c:af:c5:72:ca:64:e8:03:
ed:a2:01:d9:f4:f1:84:0b:de:f8:30:53:1b:0b:58:
32:e3:1b:a0:d0:ba:13:00:fe:94:7c:38:44:0a:55:
20:4c:b8:a3:96:a0:6a:a2:b6:20:b7:e1:05:a4:f0:
5c:63:3f:f7:ca:28:61:5e:6e:d8:f3:b6:ae:3f:7e:
32:b8:21:da:e2:b5:d8:96:92:c0:87:d9:71:6b:9f:
6c:4b:51:ad:37:80:c4:34:d9:54:c1:90:bc:1a:5e:
83:39:ae:fc:85:77:30:aa:80:ed:0c:68:f2:7a:bc:
45:6f:83:8f:29:c5:01:ab:69:3f:09:31:cb:7f:73:
08:bc:17:11:20:d6:46:b5:52:a0:1f:c3:fe:33:2a:
64:52:33:4b:32:d5:af:df:af:1d:a6:92:5f:41:57:
5e:4c:ab:a2:9d:2d:98:df:f6:25:52:35:35:24:7c:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:6A:CB:28:7D:57:87:73:C8:B9:7F:D5:BA:C7:F5:FD:BE:3B:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4AC1D64E76511EEA30CB3B7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:46:74:15:de:83:e3:e2:a7:59:da:f2:30:63:3a:43:5e:f1:
25:ec:41:88:76:07:c7:f4:dc:9f:61:ae:34:d1:16:96:17:50:
e6:07:60:60:23:e0:8e:76:f7:00:e9:09:ce:bc:ef:56:08:51:
69:f4:41:9d:68:1d:c5:ff:99:8b:a5:eb:64:30:ba:83:50:26:
a8:69:43:40:36:c3:03:13:24:87:2e:71:47:5a:41:d8:03:49:
19:1e:ff:a4:2b:ae:2a:20:d9:6c:c9:2b:a7:7b:c6:32:8f:73:
89:14:c7:51:a4:ab:29:d7:ab:cb:35:b7:86:f2:0d:28:de:37:
87:bb:32:c9:0d:a2:7a:64:4d:9c:e9:8e:ec:5b:d1:82:b5:7c:
7d:ef:8e:43:3b:44:4b:68:be:5c:ee:db:d6:6f:6d:e9:0b:19:
e1:bc:c8:f9:19:ce:9c:6d:13:b5:bf:db:73:c5:06:a1:b9:29:
30:1d:57:00:ed:13:70:66:31:8d:40:0e:af:af:e0:75:73:fc:
34:7a:2b:ad:d0:05:0a:c3:79:8d:66:72:d3:ed:2c:26:3e:59:
2a:1d:cf:c9:96:03:03:f2:09:1e:89:1a:7a:16:95:0f:c9:11:
d0:23:ed:3c:46:f3:44:25:cc:5e:7d:0b:5f:45:91:87:f9:c6:
cf:68:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org