Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8849D629D4A11EE906ECF35D25BE465.roa
File: F8849D629D4A11EE906ECF35D25BE465.roa (raw, json)
Hash identifier: 4M0bPxRs8SJzDUqPCsbgo/ZcmyG31GQPLypkJJ227rg=
Subject key identifier: 64:BD:ED:D1:2C:1A:3E:8C:7F:59:FD:D3:9E:FC:5C:22:0F:DF:C6:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 61ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8849D629D4A11EE906ECF35D25BE465.roa
Signing time: Mon 18 Dec 2023 02:13:02 +0000
ROA not before: Mon 18 Dec 2023 02:12:58 +0000
ROA not after: Wed 18 Dec 2024 02:12:58 +0000
asID: 201411
IP address blocks: 154.202.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25069 (0x61ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 18 02:12:58 2023 GMT
Not After : Dec 18 02:12:58 2024 GMT
Subject: CN=657faaae-36d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:73:f9:d9:13:bc:68:06:b2:b2:6f:6a:ae:
9f:8e:a1:0d:28:af:e0:9e:54:13:11:2d:b6:08:c8:
c5:fe:5c:3e:bc:74:3c:df:b6:de:84:39:8b:b4:d1:
14:0c:2d:e8:be:f3:cc:8d:55:41:a0:22:9f:d9:8d:
b3:c3:32:89:6f:6b:27:b3:ee:0b:6d:d1:df:f4:29:
2d:bc:bf:72:c2:97:01:a8:05:26:fd:b7:cd:27:4d:
35:f4:0a:ed:32:83:04:53:6c:df:92:d4:84:8d:04:
e7:10:5c:26:1d:58:28:33:46:e0:c6:db:67:4f:8e:
7c:6f:ce:47:4e:79:9e:e2:2f:82:52:ba:0f:b9:a5:
3a:03:88:f9:fe:f4:de:7d:96:94:3a:52:6f:8d:9a:
50:6b:c9:88:59:87:c1:59:ea:fc:04:fb:75:92:b6:
ea:2e:df:53:6c:e7:95:2f:9e:b9:80:65:66:c2:7c:
ce:47:0c:90:55:89:a3:0f:be:18:e5:1c:47:52:50:
fe:bd:2f:ce:cc:7a:b0:34:69:97:fb:98:a2:8b:88:
d0:ed:94:38:ce:c4:a3:bd:71:96:d4:b6:b2:3f:54:
0b:5b:98:70:8b:5b:01:ca:fe:b2:47:80:da:6d:af:
a1:fc:f3:87:03:93:76:a0:9e:b0:c9:1d:42:9c:cf:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:ED:D1:2C:1A:3E:8C:7F:59:FD:D3:9E:FC:5C:22:0F:DF:C6:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8849D629D4A11EE906ECF35D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:3a:01:ef:c2:84:f5:e7:ee:de:be:60:f8:67:54:a3:aa:47:
19:40:f5:53:04:1a:21:9c:81:54:04:ad:8e:c2:7b:7c:35:be:
1b:d2:2f:ca:7c:27:db:c1:18:3c:25:0f:e4:cc:1f:96:d8:99:
2d:fd:41:03:a0:60:5e:18:62:e6:05:6d:b3:a3:67:5f:e6:ba:
6d:04:d9:3d:18:0e:bf:b5:c3:40:0d:99:db:f8:b8:84:30:33:
77:79:79:12:3d:c7:0b:2f:85:c7:d5:68:23:e2:86:f3:0e:c0:
4b:4b:89:59:65:26:93:d7:40:f7:69:31:36:e7:13:29:1a:87:
a7:2e:de:66:25:ed:19:01:45:d7:3c:6a:31:fd:03:e0:3b:03:
73:fd:a5:d1:55:76:93:82:c0:3c:8b:6c:06:4f:10:79:24:58:
a5:53:54:3a:54:11:fe:d6:c8:fb:4d:21:2d:dd:3b:47:42:96:
69:3a:b2:3f:2d:7d:99:b4:1f:7a:9f:4a:c8:3b:01:f1:65:ef:
d3:11:dc:a2:c0:72:2f:06:65:99:8f:51:0c:27:fa:5d:6b:07:
41:d8:1e:61:8d:6d:4f:70:aa:04:42:68:8b:b1:88:a7:16:25:
87:7a:12:56:57:0b:53:13:2e:87:79:f1:5e:07:15:29:17:67:
a8:f8:9e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org