Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB71092AE5C311EE8B065C77775412E6.roa
File: CB71092AE5C311EE8B065C77775412E6.roa (raw, json)
Hash identifier: UJfgup6yW0vrdHR8sQTZzbia4fO9/du+nCS5GCzRsW0=
Subject key identifier: 9A:86:63:8E:2B:31:76:9D:9D:A5:2C:6A:B3:31:53:8B:67:38:7B:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A300
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB71092AE5C311EE8B065C77775412E6.roa
Signing time: Tue 19 Mar 2024 07:39:19 +0000
ROA not before: Tue 19 Mar 2024 07:39:16 +0000
ROA not after: Sun 21 Apr 2024 07:39:16 +0000
asID: 23470
IP address blocks: 154.214.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 07:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41728 (0xa300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 19 07:39:16 2024 GMT
Not After : Apr 21 07:39:16 2024 GMT
Subject: CN=65f94127-5255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:e7:b0:f1:43:ba:40:d1:ba:6d:10:76:d6:
88:ae:c0:34:5e:e5:3c:c7:73:08:70:1d:dd:a6:34:
0d:6c:84:a7:2d:57:08:f9:1c:90:10:59:1d:69:c1:
4e:fd:e8:92:47:49:7b:0e:94:24:44:f7:25:c4:fd:
08:a5:73:68:f9:b0:6f:58:63:f6:d8:0e:f3:58:62:
20:04:ce:a8:aa:cb:97:8f:c5:4f:ec:cd:67:3f:60:
0f:6a:3d:e0:94:66:6e:f1:7a:9e:ee:aa:e4:f7:34:
7f:e7:e0:8e:8c:e0:ac:4d:82:42:1f:d9:a5:ff:23:
f7:e7:77:5b:d8:ea:12:8b:fd:71:d7:1e:66:a6:de:
73:3b:03:e6:f3:5a:55:d7:39:9c:33:4c:dc:7e:bc:
05:87:3d:b6:3e:58:a5:3b:b3:8e:5b:85:8c:ac:e1:
91:a2:e2:83:cc:04:45:a4:ef:da:e2:6a:1f:37:74:
3b:30:3f:f4:fe:89:97:48:36:4d:53:b1:85:81:de:
28:a4:96:90:1d:c8:1e:c3:64:9d:dc:8c:65:70:fa:
f2:9e:e1:9c:d1:37:07:dd:40:ea:43:6e:af:34:62:
00:41:11:ee:e2:b5:86:e3:de:a0:b1:e3:06:0b:1b:
6f:81:d7:6c:2f:03:1c:c5:f8:c6:67:c5:a2:20:8f:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:86:63:8E:2B:31:76:9D:9D:A5:2C:6A:B3:31:53:8B:67:38:7B:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB71092AE5C311EE8B065C77775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b0:11:57:b5:fc:6a:d0:d9:5a:c1:ad:2e:39:4e:a0:66:10:
75:db:ec:2d:72:86:6e:b3:35:76:d3:e2:2a:2b:88:90:96:d2:
b0:87:a6:61:d8:55:97:65:bc:b6:63:d0:83:69:d8:64:c3:6e:
ed:99:24:4b:6c:38:05:ee:d1:12:bd:82:00:4c:5a:6a:7a:76:
29:26:c8:b6:2a:10:8d:3b:ba:a0:5d:d2:98:2a:d7:93:c2:80:
be:fd:4e:63:4c:55:9c:22:5a:56:07:b3:e8:be:f5:cf:bd:ba:
22:68:55:ef:ac:95:65:e1:b5:46:90:b9:51:ab:00:09:96:a1:
32:f7:fd:28:0d:91:5c:94:75:8c:3c:13:88:2a:a5:23:68:62:
39:64:53:0b:d2:80:a9:ca:5d:eb:a3:97:f9:19:01:97:8e:7a:
6d:a2:9b:84:69:bf:23:50:20:5c:35:7c:12:2a:4a:8b:6d:73:
64:45:2c:57:78:48:4f:14:42:98:b5:d3:af:d0:9d:d1:50:45:
8f:f3:47:f3:e4:c9:e4:5e:ee:2d:11:a1:8a:cb:d7:6d:01:3d:
cf:37:3e:53:2d:d4:5c:0c:17:98:1d:5d:80:ce:c3:8d:b4:99:
75:b4:86:57:81:26:91:12:0b:3e:a9:dc:08:33:37:7a:15:0c:
d2:b6:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org