Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2000977882B711EEAF475B264AD9E6FC.roa
File: 2000977882B711EEAF475B264AD9E6FC.roa (raw, json)
Hash identifier: MzzMc5JH/1KQIDE5XnlulVXRsdEOeuSOhN7cFQIuoQE=
Subject key identifier: 3F:A0:A7:91:E8:6C:47:86:CA:57:9F:A0:4D:16:B8:A7:4D:1A:8D:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2000977882B711EEAF475B264AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:29:13 +0000
ROA not before: Tue 14 Nov 2023 06:29:09 +0000
ROA not after: Tue 12 Nov 2024 06:29:09 +0000
asID: 397630
IP address blocks: 154.201.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20410 (0x4fba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:29:09 2023 GMT
Not After : Nov 12 06:29:09 2024 GMT
Subject: CN=655313b9-1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:7d:c4:39:4d:40:a0:53:91:14:07:ce:11:
47:77:fa:36:9d:e1:73:65:0e:0b:0e:e6:54:61:d4:
90:b8:20:cc:5a:56:e2:02:cf:95:18:93:6f:ca:96:
9b:64:92:ae:37:94:fe:fc:75:8a:83:5f:02:b8:50:
70:33:01:f6:11:37:f6:ec:09:22:bf:23:0d:fe:5e:
ef:8f:d2:b8:b8:43:02:fa:46:91:05:dd:8d:cd:2b:
9e:ff:69:52:91:f4:31:7f:ef:98:8c:97:45:c4:56:
af:2f:92:86:00:de:6d:a6:84:e8:5f:44:88:97:d5:
4d:d9:97:9a:2a:3b:62:21:85:04:51:b2:9a:17:09:
cf:49:5a:2c:e1:99:8d:29:13:45:c4:db:aa:6b:13:
53:51:da:08:b4:c9:01:10:de:fe:13:fe:16:32:b4:
e3:5b:3f:6d:03:80:61:26:10:66:b2:78:5c:f1:9d:
d4:26:b6:1b:45:e8:9d:89:9a:32:3c:92:3b:71:8c:
24:9a:48:c1:de:f8:30:6e:09:36:72:28:f0:1c:13:
f4:02:53:11:29:17:12:c9:ae:91:6f:97:7b:54:9d:
63:11:16:26:99:a1:cb:b1:74:20:7b:20:f2:94:57:
c3:b9:30:78:a4:f6:b7:04:57:19:c4:98:20:35:99:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:A7:91:E8:6C:47:86:CA:57:9F:A0:4D:16:B8:A7:4D:1A:8D:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2000977882B711EEAF475B264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.56.0/24
Signature Algorithm: sha256WithRSAEncryption
20:46:d9:e1:01:28:f7:20:e9:91:06:86:97:5d:b4:4e:9a:2b:
41:bb:b8:9c:29:59:9c:ff:f9:ca:6e:e7:34:58:fe:53:f5:34:
7d:ad:05:ff:96:21:46:03:d9:37:2b:04:57:5a:af:75:8b:dd:
83:3d:f1:a6:d0:0c:29:ab:8f:f1:5a:4d:1f:94:ed:6c:90:fa:
43:d1:ba:13:8c:17:a0:3f:aa:b8:d1:9f:9d:7c:ba:72:be:29:
61:28:47:f9:55:84:38:c8:17:bd:eb:d0:0e:af:3f:ee:fa:8b:
46:ad:a5:22:5d:cb:c7:44:61:93:3a:e3:a9:ef:f9:9f:32:af:
85:92:fc:16:a8:ad:49:47:04:5d:8b:a1:a7:95:d0:90:2f:21:
c2:e2:72:55:e7:30:6c:ad:c1:78:03:9e:89:46:96:ff:27:33:
61:9b:c9:17:3f:fb:a0:c8:ac:33:8a:4b:05:2f:f1:d0:7d:26:
e2:a7:ba:d6:df:b8:68:bb:d6:a7:ee:34:b9:70:09:43:6c:52:
17:b6:25:13:1c:77:e3:40:00:e0:56:de:3e:9b:04:ec:51:3d:
6c:bd:79:2a:89:68:86:7c:da:36:52:f7:eb:25:06:ae:ff:07:
7d:37:45:5d:4a:40:fd:78:48:29:db:c6:2e:25:e4:69:cb:2f:
23:f6:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org