Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08DB49E4B35911EEB7B0679B775412E6.roa
File: 08DB49E4B35911EEB7B0679B775412E6.roa (raw, json)
Hash identifier: iKo6znof2xuzdMBzh9XfkckXy9QiryAmTIZfdzmnC4k=
Subject key identifier: B6:65:28:FF:72:3D:6A:1F:B9:C8:24:A3:8B:8C:FC:B1:96:0C:14:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7592
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08DB49E4B35911EEB7B0679B775412E6.roa
Signing time: Mon 15 Jan 2024 03:49:08 +0000
ROA not before: Mon 15 Jan 2024 03:49:04 +0000
ROA not after: Fri 13 Dec 2024 03:49:04 +0000
asID: 8796
IP address blocks: 154.205.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30098 (0x7592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 03:49:04 2024 GMT
Not After : Dec 13 03:49:04 2024 GMT
Subject: CN=65a4ab34-0902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:85:8b:22:9a:5a:bf:22:32:0e:e7:4a:85:
88:3a:00:70:8b:a7:52:72:46:b6:e0:78:1e:37:2a:
e7:3a:49:14:71:f6:29:d1:56:04:71:2a:89:5c:0a:
a1:e9:e4:eb:d5:ba:91:0e:33:e9:d7:d8:18:3a:25:
67:86:77:25:ae:83:03:14:94:c2:66:74:cd:4a:5a:
6e:7d:39:40:86:5f:9f:7e:44:99:5c:8b:97:28:ca:
a1:b2:a2:b3:31:35:f1:94:75:22:b2:e8:0f:fa:c5:
dc:d0:0b:a2:e9:99:7e:0f:fd:8b:38:55:7b:f7:8d:
37:70:98:34:23:d6:c7:2c:4a:35:40:89:bd:4d:57:
7b:19:5c:00:6a:b9:d5:43:4a:02:05:52:07:28:b6:
7b:d8:1d:ba:f1:b2:1a:b7:02:f6:6e:85:17:f4:ba:
e5:cc:30:50:dd:82:6d:b5:ae:ca:4f:34:ce:fa:4b:
6f:8d:46:c1:d2:25:a9:90:60:a9:a5:6f:a8:70:f3:
43:20:e0:7b:a1:72:65:b0:19:3a:4b:ef:fd:ff:e7:
3d:5b:5f:5a:eb:44:b0:87:f7:15:52:4b:76:a0:69:
7c:db:72:bb:3f:ef:6d:81:be:d5:d8:9e:a0:b3:86:
21:bf:ca:3c:3c:b7:cf:45:f8:70:62:93:fd:ae:9a:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:28:FF:72:3D:6A:1F:B9:C8:24:A3:8B:8C:FC:B1:96:0C:14:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08DB49E4B35911EEB7B0679B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:bb:da:12:38:29:a9:97:fa:06:84:c5:8c:e5:01:b0:30:22:
c0:fb:de:8c:30:d7:79:ba:5c:c5:d4:53:73:b9:e0:4a:ae:4a:
61:f6:5c:6a:36:cc:64:a5:a8:c8:7b:ca:74:d2:08:32:f8:71:
5c:aa:56:e6:b3:78:74:b3:fd:d1:96:51:f0:1a:74:af:55:db:
5c:3d:58:3a:a0:19:cf:a2:fe:e7:62:a3:cd:c4:d8:d0:d0:08:
af:00:32:da:3b:7a:62:54:61:c5:90:e8:01:55:76:d8:83:23:
88:79:8b:14:1a:8c:93:78:aa:49:ae:d8:da:8b:04:47:6b:6a:
ed:bf:04:6f:d0:64:67:4f:4b:83:7e:21:ae:69:ef:0c:a7:e1:
63:43:fa:42:47:bf:42:13:e1:02:4d:ee:39:23:77:46:c2:27:
ab:d6:40:fd:c4:4d:81:5d:60:f0:7f:b7:88:0b:60:4d:a3:a4:
60:ba:b5:9a:97:6a:6a:0e:40:ab:b7:12:35:b8:6d:a5:42:28:
a6:f3:d1:88:86:0e:7a:bd:33:a5:0c:9d:74:85:7e:11:f5:4c:
4e:90:7a:50:f6:a0:57:a0:86:c9:d5:b2:a2:11:fd:18:dc:6b:
1c:0a:18:2b:f9:02:29:be:b4:6d:1e:5e:d8:a5:b9:60:9f:98:
3e:ff:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:15 2024 by rpki-client on console-fra.rpki-client.org