Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28EB8D1E047D11EF8BFC876E017001B1.roa
File: 28EB8D1E047D11EF8BFC876E017001B1.roa (raw, json)
Hash identifier: zqcWCXFdhP0bDhxyBmjiV2L+QPZZzzoelTQTQOxWW8g=
Subject key identifier: DB:68:37:E8:AA:67:D3:6A:09:91:80:C7:27:47:8F:AF:48:93:42:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B1B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28EB8D1E047D11EF8BFC876E017001B1.roa
Signing time: Sat 27 Apr 2024 10:01:48 +0000
ROA not before: Sat 27 Apr 2024 10:01:44 +0000
ROA not after: Wed 29 May 2024 10:01:44 +0000
asID: 55410
IP address blocks: 154.221.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45493 (0xb1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 27 10:01:44 2024 GMT
Not After : May 29 10:01:44 2024 GMT
Subject: CN=662ccd0b-ed6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:91:01:18:1c:17:a9:09:31:7e:a2:b0:8e:
4d:e9:b1:57:a7:70:df:64:dc:b6:23:2e:6e:d1:02:
3f:90:f9:9d:6e:de:07:60:67:73:c0:bf:f1:24:85:
ca:48:00:11:e3:3b:a5:18:69:3a:de:91:7a:5a:66:
04:8d:80:9c:3a:62:1b:8e:c4:c1:0c:8d:ed:e7:66:
26:59:e2:71:5e:87:a1:1a:6f:55:0a:d2:9b:bc:fb:
75:e2:aa:c2:d0:a7:b9:ff:37:7b:fb:4a:d5:ad:0c:
60:c2:cc:83:0d:b8:71:3e:3e:0b:65:55:65:90:66:
94:71:91:31:43:82:de:bc:f9:b4:8c:a3:8f:ce:03:
de:f4:0c:56:e7:9a:32:68:5d:5d:31:cc:d7:46:d1:
69:23:0b:17:1b:f6:cd:bd:2c:c1:97:e0:ba:46:68:
a5:75:43:d3:10:cf:47:5b:15:f1:b3:2a:78:b9:dd:
93:e8:7c:1e:09:e3:be:d1:96:08:a8:d9:76:be:9b:
14:fb:a3:37:11:70:25:8e:62:36:49:47:ec:ea:c7:
4a:b2:e0:51:08:97:8a:68:c3:c5:cd:63:fe:9f:d2:
5f:22:b9:fe:41:f8:a9:5e:5f:59:08:f1:67:9e:e3:
e2:ff:fa:c7:30:8e:75:97:b6:65:eb:8c:ed:f4:43:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:37:E8:AA:67:D3:6A:09:91:80:C7:27:47:8F:AF:48:93:42:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28EB8D1E047D11EF8BFC876E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.48.0/23
Signature Algorithm: sha256WithRSAEncryption
15:eb:fd:bf:0a:4d:b3:63:c1:54:dd:fe:9b:af:1b:c0:c5:f8:
53:e2:0c:6e:36:2b:ee:4c:55:eb:95:f7:a0:fc:93:b1:8b:2d:
10:6e:1f:6c:06:f5:72:fe:f1:ca:40:94:45:a2:d6:96:7b:34:
76:b9:dc:25:2a:25:ed:36:3a:1e:b2:82:71:1a:97:a7:d5:76:
18:9d:3d:c5:29:1e:e0:af:98:d1:60:37:e9:f8:60:f0:9f:8f:
03:3f:90:79:67:07:95:57:c1:c5:80:b7:46:37:22:8d:ab:dc:
f5:93:05:e3:de:d1:fc:98:ec:c4:99:c5:a8:7c:45:97:27:03:
69:c2:dd:ff:c6:b6:cc:3b:17:82:4e:cc:25:a0:fc:43:fb:f6:
a5:ba:c1:a1:9e:9b:25:fa:aa:82:38:38:99:d4:d9:b1:25:4b:
64:bb:37:2a:6b:a4:5b:bc:9f:64:bc:ab:07:7b:60:11:d1:bc:
1d:b2:2b:7e:4c:04:4d:22:c2:6d:e4:40:47:cb:62:d2:9c:7d:
bd:26:3c:4d:d5:d3:ed:37:f1:17:fb:69:fd:1c:19:82:bf:f0:
5c:b1:e2:f4:b4:ab:c9:75:46:67:c5:d3:1c:06:e7:6d:70:3f:
1f:4e:c2:97:77:f7:8b:60:e9:e8:4b:9f:5c:e3:e0:d9:df:e9:
61:75:e6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:18:12 2024 by rpki-client on console-fra.rpki-client.org