Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021D2B5AD15811EEAB2CB98B775412E6.roa
File: 021D2B5AD15811EEAB2CB98B775412E6.roa (raw, json)
Hash identifier: I2jfnzylAT3CJNYoduWRcOKUm+/QGCxEY/CLc3W/crM=
Subject key identifier: 4C:02:CB:72:06:88:80:AF:5F:08:A5:A2:23:56:A3:28:51:C0:E5:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 8D17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021D2B5AD15811EEAB2CB98B775412E6.roa
Signing time: Thu 22 Feb 2024 07:57:22 +0000
ROA not before: Thu 22 Feb 2024 07:57:18 +0000
ROA not after: Sun 23 Feb 2025 07:57:18 +0000
asID: 197730
IP address blocks: 154.208.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36119 (0x8d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 22 07:57:18 2024 GMT
Not After : Feb 23 07:57:18 2025 GMT
Subject: CN=65d6fe62-043c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:4a:e7:c6:b8:ba:08:bf:09:b4:c0:ae:93:
f2:96:60:60:d0:73:86:e3:44:af:96:12:65:8d:aa:
da:36:ce:c8:e0:82:5c:73:11:09:d3:7b:e3:a4:a7:
a8:63:ad:05:bc:a7:9e:ba:40:88:62:01:9e:8a:52:
9a:e1:2a:64:74:d3:4a:08:20:96:f8:56:05:66:70:
82:98:49:d8:50:e5:cf:63:1b:04:98:fe:b5:5a:1e:
aa:48:38:10:a9:c4:83:57:47:bb:bb:e3:c1:bf:3b:
b8:6b:bf:60:df:c4:ec:47:58:a5:04:cd:de:e8:a5:
a8:d1:da:6b:65:dd:8c:ed:64:35:7c:01:b4:8d:92:
ef:48:72:3f:07:18:0e:4b:1e:c0:8f:0f:74:8d:4d:
1d:1e:4e:3b:9c:05:fc:50:31:e6:5e:3f:cd:44:d8:
5c:97:ae:e9:8c:7d:a1:26:ae:cd:30:0f:cb:01:1b:
6e:20:2f:c4:f0:d9:a2:ec:94:ea:10:21:c4:55:e8:
b5:44:a7:a9:9a:72:e8:f6:93:28:4a:8a:4d:ce:22:
dd:30:5e:5d:9c:5b:d6:1a:38:4b:47:b9:75:4d:35:
b1:68:3a:fc:c6:3e:b0:5a:a7:b6:b2:d1:98:6c:8e:
c2:c1:12:5f:0d:6d:3c:f7:42:5e:73:6e:9c:8c:d3:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:CB:72:06:88:80:AF:5F:08:A5:A2:23:56:A3:28:51:C0:E5:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021D2B5AD15811EEAB2CB98B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.168.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ca:f7:49:a1:12:6e:07:49:90:4f:5f:4c:8e:13:3c:9e:75:
62:dd:2c:e1:6b:bf:ae:0d:4a:5e:b4:89:38:76:34:78:ac:dc:
65:ae:fa:55:9d:57:a3:50:2c:e8:37:e3:70:2b:b2:9c:dc:dd:
2e:89:3b:63:d2:a8:ea:c7:b9:bf:59:fb:b1:2b:7b:be:e8:3d:
90:7b:88:aa:97:89:d9:58:8a:86:d0:df:42:80:e8:2b:a5:03:
ba:18:9f:fd:66:69:31:e0:cb:a6:78:9a:0e:bc:4a:8f:5f:95:
60:9b:b4:12:ac:d5:f3:7a:6e:d9:71:8a:f9:09:6f:2b:7b:9e:
a7:6c:16:d8:c1:9e:10:ef:c1:5b:f7:f4:b5:bc:74:6e:10:da:
ed:3e:83:3f:53:90:a4:4b:a4:75:8d:cd:7b:d5:39:da:e2:7d:
36:2b:9d:b7:b3:94:6c:4c:a1:63:8e:5f:12:45:bf:b3:c4:28:
3e:9b:d6:91:2c:13:d5:55:35:85:18:2e:90:f3:bb:d1:ab:fd:
7a:2c:7f:bd:38:90:e6:f7:2e:9e:6d:19:e6:1b:1d:f1:8b:a7:
1e:c0:e7:b7:2d:fa:c9:29:85:a6:ef:2b:7a:70:3b:5a:aa:f9:
05:e5:06:64:ce:f5:9e:dd:90:e9:93:5f:41:f3:5c:9a:95:da:
ef:64:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:14 2024 by rpki-client on console-fra.rpki-client.org