Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD16CC7E7EB911EEA1E2FB5D4AD9E6FC.roa
File: FD16CC7E7EB911EEA1E2FB5D4AD9E6FC.roa (raw, json)
Hash identifier: oNDxWEE5RbixeeM+rjLiYXhafJbwYZQUPFMpe0Tljco=
Subject key identifier: 18:64:02:8D:3E:96:17:B2:09:FD:36:C3:D9:23:56:4D:38:61:93:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4DC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD16CC7E7EB911EEA1E2FB5D4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:39:38 +0000
ROA not before: Thu 09 Nov 2023 04:39:34 +0000
ROA not after: Thu 08 Aug 2024 04:39:34 +0000
asID: 133861
IP address blocks: 154.197.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19909 (0x4dc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 9 04:39:34 2023 GMT
Not After : Aug 8 04:39:34 2024 GMT
Subject: CN=654c6289-d407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:bb:ef:b6:c3:08:f1:e1:da:fb:9f:63:8e:
e1:a1:22:79:e1:cd:42:67:1e:70:d7:01:a1:b9:0e:
ff:78:23:66:73:0c:f5:9a:fc:c9:44:b7:12:cf:0a:
96:97:18:03:0b:5a:09:8a:af:9d:88:35:44:7c:7c:
08:cd:06:58:8b:37:73:3c:cd:77:fd:68:a5:39:52:
5e:ce:e6:d4:ea:68:d2:4f:c7:ea:68:3f:a1:18:b9:
b7:1c:41:16:28:97:e0:a1:70:47:17:26:3f:e1:92:
c1:fb:0f:14:e4:bc:ce:e6:e5:16:6d:26:ce:ed:15:
15:ef:40:9d:5a:8a:59:ef:64:4c:dd:00:85:28:14:
79:53:bb:d0:2c:8b:69:d9:5b:52:f0:e5:cf:22:e7:
4b:7b:7e:04:18:76:8a:3e:48:bd:1c:4e:74:8a:fa:
44:1a:4f:b3:d8:c7:98:a0:06:aa:60:36:fa:8e:14:
36:79:f0:43:b9:e1:df:4e:9b:38:72:27:19:0e:83:
d6:9b:6a:58:ea:c1:fe:6c:dd:58:aa:c8:c9:b5:9d:
d8:6e:d4:17:a8:ff:d9:ef:bd:f4:30:74:f0:ad:36:
82:47:74:d6:43:5b:ca:dd:c6:64:b6:66:7c:ec:e3:
15:cf:79:be:f0:b1:a6:68:89:83:f3:0c:7c:56:76:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:02:8D:3E:96:17:B2:09:FD:36:C3:D9:23:56:4D:38:61:93:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD16CC7E7EB911EEA1E2FB5D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.49.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:b5:47:00:17:20:73:d6:8b:67:80:ae:3d:c3:9d:f8:ac:67:
6d:f7:4c:10:af:0c:a1:7a:16:96:90:bb:55:ca:66:dc:d5:c6:
53:a5:17:8c:3b:f9:f0:0a:0d:14:af:a9:4e:e6:2e:55:16:a3:
19:78:44:0c:b7:c8:6c:a5:15:b9:55:7f:d5:9d:e2:0a:ca:0f:
94:37:27:43:09:fd:e2:78:a5:6a:93:43:02:35:41:f5:48:19:
5a:62:f8:f6:1e:55:6a:f1:cf:b9:b0:62:72:47:e5:4d:e1:b0:
e8:78:b4:78:06:d9:f7:db:2c:2a:0e:ce:ae:d0:f6:2d:1f:c1:
33:3d:4d:4b:89:8f:a5:7f:75:d0:de:2b:f3:37:da:df:d5:e9:
3f:b7:8d:be:a0:63:8d:2b:fc:10:b2:58:a2:33:57:28:f3:b2:
6c:ca:42:9d:48:d1:df:04:8c:e4:3f:78:95:8a:a2:6b:53:3a:
23:0b:13:af:e3:f5:1e:49:fa:8b:bf:4e:40:d6:a9:aa:c7:1a:
a5:0a:3f:d8:e1:58:0c:a7:32:8a:1d:d3:86:08:03:2e:36:f4:
fb:ab:8d:56:75:de:5b:49:37:a6:f9:34:3f:a5:0f:7b:8d:99:
77:4f:48:35:d3:1f:c3:ab:86:55:7e:ff:4c:ca:30:fb:aa:3b:
5d:96:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:43 2024 by rpki-client on console-fra.rpki-client.org