Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC4D8312017211EF921AFA2D017001B1.roa
File: CC4D8312017211EF921AFA2D017001B1.roa (raw, json)
Hash identifier: sMiSh8v7Ndf6ve2+W3JFAfVF0dSJmWtBFqep6j4CeMQ=
Subject key identifier: A0:EC:AF:E7:D1:8A:21:8E:26:9B:86:50:76:F8:57:5C:52:C1:C9:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC4D8312017211EF921AFA2D017001B1.roa
Signing time: Tue 23 Apr 2024 13:10:04 +0000
ROA not before: Tue 23 Apr 2024 13:10:00 +0000
ROA not after: Fri 25 Apr 2025 13:10:00 +0000
asID: 28458
IP address blocks: 154.212.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44872 (0xaf48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 13:10:00 2024 GMT
Not After : Apr 25 13:10:00 2025 GMT
Subject: CN=6627b32c-fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:46:5b:f3:1b:64:47:7a:58:de:98:33:13:ef:
e9:6f:47:48:50:4d:1d:8d:25:2a:6a:6a:21:05:b8:
76:62:c4:50:35:9a:59:14:e8:06:b5:60:98:e4:67:
52:9c:be:cd:c0:99:01:eb:03:f9:41:10:86:10:3b:
0f:0e:69:02:f9:2f:33:a7:2c:aa:8f:7d:1a:b1:39:
75:b3:9f:d3:05:fe:01:f9:be:61:f1:80:3e:b2:d2:
b1:87:72:eb:18:ae:39:bc:9c:66:dd:37:a0:a4:19:
4c:bd:ea:c6:1d:5e:73:bb:62:a9:6f:af:2d:37:b8:
ba:13:9f:c2:2c:e7:c5:90:bc:63:97:29:d2:88:2f:
88:7e:f8:0e:b3:90:9a:f9:fd:7c:40:0c:52:d1:c7:
13:e3:d5:eb:91:bc:7c:2f:8f:1b:29:98:5b:00:23:
52:35:06:ba:ad:c2:26:4b:e6:8d:b4:b1:1b:d2:f1:
c9:0e:73:66:69:e7:00:3c:62:57:3e:23:fa:9c:a0:
d5:43:40:e7:ab:1b:dd:5a:b4:af:7a:e8:c9:90:69:
50:02:81:a7:43:81:f7:a2:ed:8e:c8:2d:5f:66:c9:
33:05:69:6f:c1:6f:77:be:10:6d:67:21:b9:ba:61:
45:4b:ef:2c:e1:be:96:2c:d1:ac:77:3a:8c:c5:d9:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EC:AF:E7:D1:8A:21:8E:26:9B:86:50:76:F8:57:5C:52:C1:C9:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC4D8312017211EF921AFA2D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.7.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2b:2c:7a:2b:b4:c2:cf:4d:4a:c3:1b:63:90:72:99:ce:ad:
5e:3f:7e:4d:7e:6d:94:2a:80:92:7c:eb:d2:0e:a6:0b:55:91:
05:99:80:f1:55:f3:68:35:3c:35:b4:81:e5:26:02:37:6e:1f:
08:46:d5:70:2b:e3:24:5b:c4:8b:ca:47:3e:56:22:cc:c4:95:
e5:cf:ec:86:53:84:a8:39:a7:60:91:2f:75:2e:f8:b1:b7:ed:
23:35:50:c1:c6:40:0e:06:e5:53:cb:57:3b:3a:6f:33:47:3d:
7b:2e:58:52:df:fa:be:12:aa:33:21:32:b8:aa:c4:28:0b:d2:
b4:47:15:d7:55:d7:83:7b:22:81:ba:5b:1c:7a:f0:8f:8f:12:
2c:c0:1e:12:02:d0:73:03:80:4e:8e:0a:27:e0:18:86:ef:f4:
fb:a9:77:60:bd:e2:9f:e8:73:fe:25:41:26:26:e1:6d:ad:73:
55:17:b3:d5:df:c2:92:24:6e:eb:42:75:92:5b:f3:bf:ad:a7:
a4:d2:08:06:e6:01:bd:d4:fd:33:0a:39:74:6c:8c:ce:00:a4:
4d:e6:0a:fd:bc:18:36:7e:60:a4:cb:42:81:f9:4c:19:e1:3d:
72:3d:78:3c:3f:c6:f7:01:df:e1:90:72:30:de:fe:de:2e:74:
3c:58:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:30 2024 by rpki-client on console-ams.rpki-client.org