Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7016860E74411EEB19F4EB6775412E6.roa
File: E7016860E74411EEB19F4EB6775412E6.roa (raw, json)
Hash identifier: MQUC3saPxEdg91A4ju6KhLxGs8a6blkCh7gtXi1VXHc=
Subject key identifier: F3:10:90:F3:01:1E:EA:0C:2C:B6:6A:9B:09:7D:05:D5:DE:08:97:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A3FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7016860E74411EEB19F4EB6775412E6.roa
Signing time: Thu 21 Mar 2024 05:36:01 +0000
ROA not before: Thu 21 Mar 2024 05:35:58 +0000
ROA not after: Tue 23 Apr 2024 05:35:58 +0000
asID: 44559
IP address blocks: 154.220.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41980 (0xa3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 05:35:58 2024 GMT
Not After : Apr 23 05:35:58 2024 GMT
Subject: CN=65fbc741-3401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:05:cb:31:2a:84:bc:4a:b6:16:d4:6c:9b:
a9:66:b7:29:79:64:0b:2f:79:81:a7:92:98:14:e9:
b7:2a:c5:c3:f6:f0:49:54:92:c9:5c:ac:f3:fb:73:
1a:46:16:83:cb:09:cf:45:7e:a3:1e:f9:35:68:cc:
ff:21:00:df:2c:ea:bd:11:1f:fa:ac:68:0d:35:1e:
2b:56:4d:9d:f4:a1:5e:1e:ad:75:f6:b8:07:c4:0c:
02:fd:8a:97:c1:d4:9a:0c:96:8d:c0:7c:42:22:21:
78:6a:10:61:40:f0:94:a4:80:c7:a4:0e:e8:7a:57:
46:63:5a:66:4a:c9:09:7e:ea:51:cd:c8:8e:ce:90:
f6:f4:85:54:c1:a6:9d:6e:2b:92:f0:d0:7d:02:7c:
81:2b:71:44:0d:f8:bf:fa:fa:1d:bc:4e:6e:ff:31:
df:22:a1:e7:9d:98:33:53:8f:5a:7f:86:ff:a3:fb:
c4:6c:84:5b:02:5b:e7:40:97:b2:4a:74:8a:82:39:
00:f0:4e:bd:3f:65:73:28:2b:fd:cb:21:86:90:b2:
9d:42:51:f7:e5:e2:8a:29:68:33:47:b5:d6:c7:06:
19:ac:69:4a:7c:e6:e8:15:10:5d:92:32:68:db:37:
c6:72:78:b8:b6:5f:ba:5c:98:18:a4:02:92:b3:3c:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:90:F3:01:1E:EA:0C:2C:B6:6A:9B:09:7D:05:D5:DE:08:97:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7016860E74411EEB19F4EB6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.187.0/24
Signature Algorithm: sha256WithRSAEncryption
be:2e:22:42:26:97:09:16:cc:f5:2d:5c:cf:40:fb:c7:eb:d8:
03:51:5e:38:1b:3d:fc:b3:f6:c6:aa:fc:80:77:c2:75:76:bc:
c6:1e:b6:97:db:ca:f0:b4:7c:25:f0:8d:fe:91:21:cb:bb:bf:
9f:b3:df:dd:92:44:8a:8b:e0:15:89:dd:a2:d1:1b:15:04:47:
63:69:f4:5a:13:ef:27:3d:83:27:26:ad:ad:dd:d5:76:a7:b9:
ec:54:76:6c:b0:1d:a1:10:f9:83:37:ec:cf:f1:c2:ed:bf:67:
32:58:1f:90:e5:2d:72:66:cb:17:a6:e5:58:b1:53:a4:e2:8d:
e9:ae:08:3d:76:e4:b5:41:f1:0c:ee:14:22:51:71:b2:b7:12:
f4:90:0c:4d:a1:45:59:98:8e:3c:c8:97:f1:aa:eb:17:be:c3:
71:26:75:fb:e1:f5:fb:91:0c:bb:25:da:29:7f:b3:55:75:39:
32:3d:23:0d:31:c3:c9:fe:af:0f:fc:e2:c3:4f:60:5c:41:dd:
08:f7:38:a9:39:25:25:d1:db:b4:3b:4d:29:85:97:3f:cf:72:
98:5d:aa:b0:e9:92:1a:9a:19:7b:c7:4f:60:09:4a:2f:6f:12:
21:73:9a:71:35:46:a8:5f:26:aa:d9:cd:d5:6f:b2:38:2e:f8:
c6:50:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org