Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/5B5AB2F28E6511EB82C6206BF8AEA228.roa
File: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (raw, json)
Hash identifier: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=
Subject key identifier: DA:E2:5E:8E:A4:9D:D0:E0:D9:1A:CE:89:FB:3E:6A:2D:53:2E:24:A3
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 0254
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/5B5AB2F28E6511EB82C6206BF8AEA228.roa
Signing time: Fri 26 Mar 2021 18:59:14 +0000
ROA not before: Fri 26 Mar 2021 18:59:09 +0000
ROA not after: Mon 31 Mar 2031 18:59:09 +0000
asID: 42
IP address blocks: 196.250.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Feb 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF
Validity
Not Before: Mar 26 18:59:09 2021 GMT
Not After : Mar 31 18:59:09 2031 GMT
Subject: CN=605e2f02-2b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:8f:f7:7a:77:74:40:44:5d:b9:69:82:2f:
dc:56:5e:f1:5d:59:8e:ec:83:58:8c:42:f2:88:a5:
21:36:76:d7:30:01:40:3c:15:b3:c9:02:4b:f7:a9:
dc:9b:a4:52:3b:5b:e0:25:53:b8:33:6f:68:02:dc:
31:50:d7:3c:21:08:ad:18:17:a2:78:4b:ed:39:63:
44:ae:54:21:15:a7:b9:0e:4a:eb:90:73:13:06:2a:
ee:3b:15:15:f1:bd:62:26:e8:66:ae:e1:4b:6a:ed:
01:2f:95:37:e7:1e:18:e4:a1:4b:07:d9:54:53:5a:
85:7f:8a:50:5b:0a:6f:f0:d3:02:02:b9:17:85:de:
ca:a5:2d:24:7d:36:2a:ee:10:cc:8c:9c:ec:90:cc:
71:59:9b:be:10:26:34:93:20:d4:09:41:c8:2d:08:
8e:8d:11:6c:55:56:8f:28:c1:df:a0:a6:d3:36:a2:
f6:c1:f1:3c:bf:fb:59:d3:71:3e:c3:5d:4c:00:b1:
fb:14:4f:0c:76:0f:d3:95:60:a1:1b:1a:e9:2c:5b:
98:de:33:9d:05:1e:6a:e4:ad:c4:b0:42:c5:3d:7f:
e0:28:b7:98:1f:c4:e1:e2:0a:a6:66:20:be:f4:87:
56:a8:58:ab:81:9a:30:7a:bc:aa:b9:14:33:1a:47:
b6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:5E:8E:A4:9D:D0:E0:D9:1A:CE:89:FB:3E:6A:2D:53:2E:24:A3
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/5B5AB2F28E6511EB82C6206BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.250.252.0/22
Signature Algorithm: sha256WithRSAEncryption
86:51:0a:13:df:a6:db:b5:d0:eb:31:ba:5f:06:86:b2:ff:78:
60:ca:21:70:4e:c9:e5:14:72:d3:ba:88:e5:9c:bc:aa:b7:61:
75:8e:b9:1e:d9:a7:f4:f3:82:8c:bf:d8:53:fe:5c:03:36:8b:
1d:6d:cf:67:94:d8:e4:70:8f:c2:ac:c1:69:36:34:d0:94:a2:
36:02:5c:a3:5e:2c:5b:fc:06:dd:82:5f:02:ee:0c:80:c6:3e:
61:26:8e:26:fa:18:20:22:3a:28:4b:65:0a:5d:eb:97:df:a0:
88:09:27:81:0c:84:59:9d:3d:d3:50:4a:5d:9d:5b:db:29:41:
8f:68:78:57:66:91:5d:ca:7d:77:9a:e7:ce:42:73:7d:77:fe:
20:50:df:06:dd:c4:ee:0e:47:cd:f8:88:d8:e6:58:49:d8:2a:
14:fc:dc:5d:1c:1c:54:ef:b2:da:d9:1b:e8:e7:72:f8:14:27:
0c:e6:59:f0:86:a2:61:1c:2c:f1:19:ee:9c:62:ad:97:79:31:
ed:25:7e:d0:41:16:1e:e6:d6:67:4e:ab:f7:60:34:50:37:6a:
a9:d3:f3:a7:88:6e:03:4b:1c:71:88:af:8f:1e:a7:0a:35:26:
b6:02:e7:7e:e4:26:6f:0e:23:8f:e7:65:49:78:b4:30:7a:62:
38:9f:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:09 2025 by rpki-client