Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E5CD1CFEA111EDB7A213694AD9E6FC.roa
File: 05E5CD1CFEA111EDB7A213694AD9E6FC.roa (raw, json)
Hash identifier: q/b/6+Ae2JLgJVff7nPymAUrdzlvPfkAIoRPGIwcFt8=
Subject key identifier: B5:87:93:AA:03:92:28:D7:D3:A3:89:62:F0:1B:F7:C6:C6:6A:59:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 285A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E5CD1CFEA111EDB7A213694AD9E6FC.roa
Signing time: Tue 30 May 2023 04:18:26 +0000
ROA not before: Tue 30 May 2023 04:18:22 +0000
ROA not after: Wed 15 May 2024 04:18:22 +0000
asID: 63888
IP address blocks: 154.207.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10330 (0x285a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 04:18:22 2023 GMT
Not After : May 15 04:18:22 2024 GMT
Subject: CN=64757912-a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:15:9a:26:89:6f:39:91:b9:0d:63:bd:7b:
ee:ae:90:dc:4a:46:15:c8:b9:25:b4:b6:9f:dd:6e:
3c:3c:08:6f:e0:ea:ed:73:30:44:a2:cb:0a:51:8d:
e8:d4:8b:f7:e0:a7:87:2b:0d:0f:84:51:7c:0e:80:
e4:82:21:97:ba:40:44:d9:7d:66:13:68:fc:aa:f2:
8a:ee:a5:af:8b:ec:63:56:14:7c:ed:89:02:2f:6e:
bb:d8:c3:db:75:cb:39:c1:85:5d:21:4a:62:5a:7e:
c2:53:81:f4:27:05:75:ad:4f:2e:f2:f7:a9:d5:17:
36:90:4c:3c:a3:29:d2:74:67:28:aa:df:ae:8b:c9:
56:aa:1e:de:03:e6:21:52:5e:81:da:83:15:6c:87:
51:57:38:f6:54:60:1e:93:40:11:ba:f7:0a:a9:9f:
58:51:56:68:f7:0d:7d:7d:84:b3:47:ba:7b:54:e7:
d7:24:e5:1b:2c:7e:58:e0:5d:cc:f0:4a:fa:d6:de:
28:7d:51:09:22:9c:81:de:f8:64:15:c4:c2:36:7f:
d8:84:9f:8d:fa:f9:a1:ac:1c:95:f5:10:0f:8a:f0:
50:b6:8f:6f:04:d8:86:ee:64:4c:88:28:c1:d3:a4:
89:a1:45:39:92:b6:5d:18:2d:24:68:ef:ed:99:4b:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:87:93:AA:03:92:28:D7:D3:A3:89:62:F0:1B:F7:C6:C6:6A:59:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/05E5CD1CFEA111EDB7A213694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.190.0/24
Signature Algorithm: sha256WithRSAEncryption
16:36:5d:6f:e3:60:e0:fa:5f:3a:29:d4:37:12:ca:68:f8:e3:
a6:b7:f9:4c:27:d3:db:86:55:41:eb:cc:03:35:e4:a9:17:b7:
7b:22:3b:90:e6:45:7d:e8:52:9d:30:67:6b:8f:dd:d9:55:60:
6c:6b:96:88:50:b1:1b:15:82:6d:75:48:f8:84:7a:6e:73:b7:
10:cd:3a:16:c3:15:65:78:42:0e:87:b1:e6:f7:fd:b2:9b:c0:
6d:53:c3:8f:85:1f:3c:d0:b8:6a:ee:7f:ca:26:d5:bf:f5:4f:
fd:fd:f5:5e:11:2b:76:85:fe:44:cd:3f:54:71:30:63:d4:90:
1f:de:7e:e9:3c:03:20:6c:80:ab:db:aa:03:25:2f:68:b5:f8:
bd:81:1b:63:71:b5:1a:a6:55:85:9e:70:cd:39:a4:e6:f4:02:
07:69:94:6e:99:18:4d:d3:55:04:a8:69:d3:3e:09:a3:5f:c2:
14:01:6f:38:32:5f:78:09:fd:c8:ed:ca:08:c8:5b:f7:70:83:
12:9b:61:7d:a1:fa:c8:db:e7:ff:46:d9:0a:4d:2b:24:63:4b:
6d:cd:41:d1:50:8a:fc:e0:6a:17:1e:d5:29:e8:b8:32:34:50:
21:1d:dd:c2:20:cf:75:4e:46:74:20:e1:e1:f7:60:09:af:44:
e0:17:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:14 2024 by rpki-client on console-fra.rpki-client.org