Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBDD2CFA037711EF8E0D0627017001B1.roa
File: CBDD2CFA037711EF8E0D0627017001B1.roa (raw, json)
Hash identifier: hqD1iYHDwpJyZI55kSIekL9pMRKVFSf2jvLyJuzYn1c=
Subject key identifier: F8:73:87:20:2C:31:12:1E:99:E2:A9:59:4A:98:05:06:23:56:AF:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B102
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBDD2CFA037711EF8E0D0627017001B1.roa
Signing time: Fri 26 Apr 2024 02:50:53 +0000
ROA not before: Fri 26 Apr 2024 02:50:49 +0000
ROA not after: Sun 28 Jul 2024 02:50:49 +0000
asID: 151983
IP address blocks: 154.220.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45314 (0xb102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 26 02:50:49 2024 GMT
Not After : Jul 28 02:50:49 2024 GMT
Subject: CN=662b168d-e0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:b8:48:84:44:fb:24:31:eb:3e:da:5b:9b:
4c:81:19:97:da:b6:35:e8:8f:37:02:c2:22:02:fa:
ee:14:0f:ca:13:84:9b:5e:2d:73:bd:06:d2:b4:91:
d8:f8:f0:16:e2:2b:58:7d:6e:de:e6:56:28:9d:b4:
b8:b3:9a:25:d0:36:2d:e2:f0:36:1a:2d:61:f9:b8:
a4:af:f0:3a:29:fc:17:c3:17:e2:ac:de:aa:91:6e:
bb:c6:6c:53:25:60:45:0d:11:0d:aa:0c:61:b2:0c:
34:a1:ba:dd:90:71:ca:4f:80:41:a1:87:79:03:34:
77:d3:ef:1d:58:6c:31:5e:fe:ce:a6:d7:79:92:80:
3c:f4:80:5f:06:d1:6f:9c:77:9e:a2:6e:6e:7c:2a:
57:f9:46:a0:db:48:97:95:e6:b6:62:bf:a1:7c:e4:
ad:dd:7f:f1:15:1e:e7:6a:29:78:fd:bb:25:3c:af:
cb:df:98:5c:4d:f4:0b:18:e0:d5:59:6e:6a:d8:f1:
89:d8:2e:be:63:b8:55:31:1c:7c:60:6d:8c:de:86:
e1:71:27:25:52:fb:0c:b5:d4:73:f6:3f:f9:6b:43:
81:16:66:03:87:12:fa:d5:19:0b:f2:ae:98:5e:f2:
70:94:c2:59:a1:53:82:fa:fd:59:9c:29:7b:56:76:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:73:87:20:2C:31:12:1E:99:E2:A9:59:4A:98:05:06:23:56:AF:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBDD2CFA037711EF8E0D0627017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.220.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:30:5a:4e:b2:f6:12:5e:f5:81:36:cd:9f:d2:94:f1:c4:fa:
2f:7b:e8:95:00:f5:b5:6f:db:c5:0b:99:25:27:bc:b7:56:2b:
2c:a8:60:cb:b7:c2:29:a5:d2:b0:94:51:7b:00:e8:76:ab:90:
4c:08:50:15:80:3d:50:65:6f:35:34:3f:e1:54:b6:46:32:87:
96:65:1b:fe:8c:fb:af:c7:a1:08:b2:0e:71:0f:dd:e2:8b:1a:
68:7e:0a:fa:f1:6d:63:3b:f2:fb:7c:71:75:68:98:af:2e:05:
b4:79:b7:dc:c2:63:2d:67:ef:c1:f9:38:70:a5:55:8e:8a:e6:
fc:15:f5:d6:5a:54:8d:ad:10:eb:8b:16:5b:25:5e:62:2f:d9:
23:68:f3:32:9d:c4:7c:56:69:1b:86:3b:d2:d9:e5:dd:b7:fd:
61:48:15:9b:ea:a6:3a:d9:84:2e:fa:86:de:dc:7d:a4:0d:fd:
94:4b:29:bc:3b:3d:b9:83:56:66:7f:2f:95:c5:8c:68:83:85:
34:64:78:6f:37:dd:6b:ef:df:4c:c5:03:ea:57:c6:9c:b5:be:
77:09:f4:f9:a1:5d:c0:7f:fa:c3:8b:be:f1:53:aa:db:1d:1e:
bc:3a:ba:17:c9:8a:70:2b:8c:9e:93:c1:05:4f:d9:82:01:1c:
35:18:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:30 2024 by rpki-client on console-ams.rpki-client.org