Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207CCC3AB10111EEB0C9C560775412E6.roa
File: 207CCC3AB10111EEB0C9C560775412E6.roa (raw, json)
Hash identifier: 4TSqZL+97ajy5AyRdoVj/PzsS/mQ3z7FYegjn8fFxRQ=
Subject key identifier: 38:03:DF:2F:66:02:FF:14:05:B3:4F:C2:44:2A:30:5C:20:7E:98:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7495
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207CCC3AB10111EEB0C9C560775412E6.roa
Signing time: Fri 12 Jan 2024 04:14:49 +0000
ROA not before: Fri 12 Jan 2024 04:14:46 +0000
ROA not after: Fri 13 Dec 2024 04:14:46 +0000
asID: 140224
IP address blocks: 154.205.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29845 (0x7495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 04:14:46 2024 GMT
Not After : Dec 13 04:14:46 2024 GMT
Subject: CN=65a0bcb9-976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:f1:59:86:28:ca:1a:13:55:dc:ff:28:e5:
b5:8b:c2:c8:16:f9:cb:8d:e8:a2:85:41:d6:be:01:
8f:73:d9:31:a2:c9:eb:f2:bb:23:f5:91:7a:c1:49:
be:96:44:c8:86:76:1c:be:21:bb:89:18:3e:06:76:
8e:eb:57:f7:01:4d:73:62:c1:11:1b:56:f0:a8:39:
be:a3:84:a8:be:40:b9:49:da:75:e1:ff:44:8a:f2:
c7:42:19:1a:49:22:d8:6f:35:0f:56:d0:2c:2c:23:
a4:e2:3c:9a:8b:fd:cb:9d:16:7e:e0:f5:d5:cc:15:
06:92:d8:cb:32:66:c3:b3:01:e1:65:ac:3c:d8:b0:
95:56:d3:4c:9d:de:7a:bb:d7:bf:76:ec:b2:00:cb:
90:ce:99:57:cf:0a:de:a3:6f:4b:d0:da:d3:38:f2:
49:3d:e6:99:8c:5a:68:16:37:a9:56:7c:12:1a:9a:
23:33:4f:87:e1:d3:08:92:75:53:aa:81:b3:15:dd:
23:81:5d:38:c1:1d:82:e1:9f:ae:1d:00:0d:b1:e1:
2f:1e:f5:fc:20:38:f4:c6:1b:b4:c0:84:cb:53:8d:
eb:1a:16:85:ce:44:9c:e0:1e:b1:0f:6f:03:23:2c:
79:7a:33:24:26:aa:83:73:62:58:3e:fe:da:07:f8:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:DF:2F:66:02:FF:14:05:B3:4F:C2:44:2A:30:5C:20:7E:98:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/207CCC3AB10111EEB0C9C560775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:91:02:a4:6f:f7:ac:cb:1e:e8:92:c4:10:44:7f:e9:d3:a8:
4e:bc:16:b7:5b:b4:d4:99:0e:11:76:0f:b5:38:31:80:3d:ed:
67:44:3f:34:4e:08:40:39:59:c0:f3:ac:71:57:a5:da:86:cc:
52:93:02:bf:34:ad:df:2c:8f:66:ec:cc:57:4c:b5:9a:26:38:
1c:b9:18:af:07:59:ec:c5:be:f1:e9:af:3b:34:3f:c1:99:f3:
d4:71:c8:8e:0b:09:ce:97:e2:de:35:2a:29:b9:d1:01:be:b0:
91:91:ce:67:d3:09:79:22:10:6b:aa:2d:19:68:9e:30:c9:0c:
32:13:de:66:ca:69:6b:92:5c:30:ff:28:bc:75:bd:3b:30:56:
93:6f:4e:c4:7b:89:07:a2:a2:df:72:d4:b7:7c:a6:31:5f:68:
9d:fb:d2:51:d9:7e:db:75:07:ff:ea:31:4e:79:e4:a7:03:93:
43:2d:23:74:71:7e:e1:d9:c6:28:59:bb:b0:9d:f9:1f:fb:ce:
14:73:e3:f2:ea:ba:48:ba:8d:fd:a8:c2:b4:ec:8c:7c:7e:96:
7a:90:95:8e:eb:4b:5e:3e:c1:a5:1c:2d:77:3a:91:85:48:a8:
7a:a1:04:e8:c3:57:9c:c0:cd:68:52:c7:85:e5:ed:0f:95:86:
f8:e5:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:17 2024 by rpki-client on console-fra.rpki-client.org