Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C784ACFD5011EE974B8BFE007001B1.roa
File: 05C784ACFD5011EE974B8BFE007001B1.roa (raw, json)
Hash identifier: yajmM/85lVzJkl11jZT8AkuVbp7TLeNiDnbNaDNOHcY=
Subject key identifier: 81:BA:AE:15:BC:A3:94:EB:23:A1:9F:01:16:8B:FF:86:AB:52:71:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AE2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C784ACFD5011EE974B8BFE007001B1.roa
Signing time: Thu 18 Apr 2024 06:51:03 +0000
ROA not before: Thu 18 Apr 2024 06:51:00 +0000
ROA not after: Fri 26 Apr 2024 06:51:00 +0000
asID: 39600
IP address blocks: 154.90.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 06:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44587 (0xae2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 18 06:51:00 2024 GMT
Not After : Apr 26 06:51:00 2024 GMT
Subject: CN=6620c2d7-bf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:44:8b:84:76:0f:10:75:1a:2d:ec:17:3d:e5:
4f:2a:f7:a8:cf:a4:bf:a2:e7:bb:5b:48:91:76:a6:
56:21:27:95:48:01:4b:fb:06:47:b4:c7:5c:bd:00:
b5:64:69:dc:af:10:46:cd:a7:eb:e2:a8:1f:b8:6c:
44:9e:4e:fa:eb:21:9a:0f:20:53:fb:3d:a5:59:c1:
a8:4b:88:d9:5f:0f:31:cf:1d:ed:05:ca:34:f3:5d:
17:33:4b:fd:3b:1e:f5:a3:ce:96:09:a8:f3:20:30:
0d:40:bf:12:7e:bf:e8:45:04:c1:66:d7:e0:df:7c:
e4:c8:cb:ce:4b:85:48:4a:c2:92:23:d1:b0:5d:39:
e4:c1:2c:e2:0c:d9:c4:94:84:cb:f2:53:da:a8:42:
29:0c:9e:23:31:77:78:71:61:63:7a:9e:b1:85:1c:
9d:c9:92:6e:1e:5b:25:d6:67:76:e8:64:30:df:34:
9d:af:63:42:25:e1:12:d0:d3:5a:ba:64:21:af:01:
8e:75:aa:7b:f8:9b:44:8b:ee:3c:9f:db:25:5c:5a:
fc:11:7a:de:31:7a:dc:24:97:c3:cb:20:9e:f8:bf:
9d:c9:cc:28:65:f4:fd:bd:a9:67:4b:e0:6d:db:e2:
33:85:69:1b:14:1e:ca:72:eb:a7:43:cb:c3:d6:63:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BA:AE:15:BC:A3:94:EB:23:A1:9F:01:16:8B:FF:86:AB:52:71:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05C784ACFD5011EE974B8BFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.16.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:fe:78:f5:c0:89:7f:0d:38:2e:da:e7:43:69:23:41:97:bc:
32:95:e3:67:16:f5:47:70:4f:b3:ad:19:30:18:f4:49:dd:0d:
c3:2b:1c:0b:e5:f3:a3:c6:91:fa:e2:8f:62:35:3d:98:7f:99:
e2:07:ed:e8:dc:67:db:01:1e:a8:18:42:33:2b:d2:ed:83:45:
6f:9c:a7:fb:85:ed:67:0d:a3:92:12:b6:e7:7a:a7:1f:72:c6:
c3:61:c9:75:b5:70:bc:ba:e7:f9:ae:56:b4:13:46:a0:91:40:
3b:de:78:9b:d0:96:52:70:c8:e2:24:ef:50:72:7e:ec:65:2d:
fd:bf:3c:f1:48:52:1d:fd:20:46:5e:86:0b:a8:0a:6e:cb:37:
15:3d:90:4a:cd:01:25:6b:1a:fd:a1:0f:0e:80:18:20:49:c5:
11:bc:9a:cc:90:69:84:95:02:2d:b8:7d:29:45:97:88:9d:2c:
9e:22:20:8f:fb:fb:f5:ae:09:a0:31:32:80:36:14:ba:5d:6f:
b1:ba:ba:bc:d9:2d:54:f9:be:fc:17:83:9b:15:af:22:ed:d9:
03:f9:04:55:f2:0f:7a:e9:78:ad:18:1f:45:e1:8c:34:fb:1c:
2e:64:71:1f:62:94:69:4d:52:06:78:17:3e:14:a3:bc:f6:49:
c3:00:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:25 2024 by rpki-client on console-fra.rpki-client.org