Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9E35876FD3311EE9B0A1117017001B1.roa
File: F9E35876FD3311EE9B0A1117017001B1.roa (raw, json)
Hash identifier: B0u8jVTCqhisJ1GDWL3W2QYkNd2BXao8c02E8JyA6rI=
Subject key identifier: AD:78:B6:3D:0F:13:03:E8:00:6C:DB:89:23:34:05:D5:30:5C:F3:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ADFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9E35876FD3311EE9B0A1117017001B1.roa
Signing time: Thu 18 Apr 2024 03:30:17 +0000
ROA not before: Thu 18 Apr 2024 03:30:13 +0000
ROA not after: Sun 19 May 2024 03:30:13 +0000
asID: 29802
IP address blocks: 154.203.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44543 (0xadff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 03:30:13 2024 GMT
Not After : May 19 03:30:13 2024 GMT
Subject: CN=662093c9-c6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:7e:01:a1:d8:bf:00:3d:9d:30:33:7f:40:
44:ef:0a:f3:b8:68:c9:cb:7c:eb:e3:c6:d3:73:fa:
9e:74:6d:cf:b1:13:cb:1f:89:6a:77:b3:39:ac:ad:
72:64:f5:f1:ad:73:85:2f:cd:df:14:b7:9a:4a:6e:
66:7d:a8:bf:83:78:d5:8f:a8:39:80:a4:09:f8:be:
65:02:a0:92:74:e8:f5:69:ee:13:f7:cd:8d:fa:57:
d7:c9:aa:7a:33:1c:55:60:fd:65:10:71:56:07:b7:
9e:e5:6a:b6:37:71:d4:d4:6f:d5:b1:c4:a6:23:8e:
18:43:b0:04:52:c6:82:95:43:d4:8e:3d:9e:b3:81:
c5:5f:6e:62:4c:fe:dd:78:0e:92:07:2e:51:71:58:
a8:1c:57:ac:e8:3b:6e:bd:60:3e:a8:cb:b8:3a:dc:
a5:a5:00:6d:7b:b1:2b:cc:a3:06:7f:bb:42:b5:1e:
bf:5d:8f:9d:31:5c:b2:32:64:99:27:87:5e:7a:e4:
a1:13:a5:7d:c9:cc:f5:a1:45:80:76:16:98:ce:85:
29:88:65:9a:b6:66:10:8b:eb:22:96:19:76:9e:94:
d7:d2:5f:49:a5:c0:bf:a6:47:ab:34:d8:c1:e8:e4:
97:09:e2:95:65:3d:77:f0:42:3a:82:18:73:55:3c:
d5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:78:B6:3D:0F:13:03:E8:00:6C:DB:89:23:34:05:D5:30:5C:F3:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9E35876FD3311EE9B0A1117017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:7c:49:91:f9:74:94:9e:91:6e:17:9d:b7:d2:16:41:ba:f0:
cb:a7:df:f1:3e:23:2c:f0:fa:7b:91:8c:43:7c:f5:a7:67:f2:
35:20:bd:cb:81:8f:c2:9b:0e:7a:36:ef:a6:0a:3a:64:f7:07:
7b:66:bb:02:04:c8:9f:e2:01:79:c4:05:b6:68:21:a3:6c:ee:
0e:68:59:33:e8:67:0c:ec:2b:8b:aa:0c:28:87:fd:90:3d:cb:
73:db:f4:50:70:b5:3b:b8:50:1e:11:ff:d1:57:2b:77:a1:0a:
77:b4:ed:9a:7a:49:d6:f7:a3:2d:32:e4:8b:1b:07:9f:9f:2e:
29:b9:d5:30:f5:7d:81:91:18:f4:37:4b:38:a6:e2:21:26:6a:
8a:fa:30:cc:46:f4:c4:f5:72:33:1b:98:87:a6:7f:76:03:89:
f7:e1:3e:06:fd:b7:5d:c9:22:e9:69:34:12:bb:b4:c5:90:02:
97:ce:aa:be:07:cc:53:0a:47:2a:75:17:47:7d:12:f1:54:9e:
1a:75:da:fa:e7:10:8d:73:68:0c:e9:bf:04:12:e1:a0:06:46:
87:8f:74:ea:de:cb:6b:99:61:3d:db:92:1c:cb:ea:60:3d:89:
c6:2f:18:c3:d7:9e:99:a5:05:84:6e:80:29:07:53:35:0d:36:
08:e1:0e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:08 2024 by rpki-client on console-fra.rpki-client.org