Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258C4732B22D11EE93D1C573775412E6.roa
File: 258C4732B22D11EE93D1C573775412E6.roa (raw, json)
Hash identifier: KMCK1YhbH5SxnD9j6RwymQcG72zeOYt4TFJuuvuD9DM=
Subject key identifier: 55:39:07:AE:D1:63:BC:46:9C:5F:87:FD:B2:B6:34:BA:80:0D:E6:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 74FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258C4732B22D11EE93D1C573775412E6.roa
Signing time: Sat 13 Jan 2024 16:02:27 +0000
ROA not before: Sat 13 Jan 2024 16:02:24 +0000
ROA not after: Fri 13 Dec 2024 16:02:24 +0000
asID: 140227
IP address blocks: 154.205.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29946 (0x74fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 16:02:24 2024 GMT
Not After : Dec 13 16:02:24 2024 GMT
Subject: CN=65a2b413-f6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:5d:cb:00:e7:72:51:06:f5:fd:37:d2:4b:
97:77:37:9d:e3:24:d9:bd:74:65:56:ec:d3:45:8f:
7c:1c:f0:5e:4b:15:d6:cf:87:69:45:09:20:6a:5f:
2c:28:1c:09:eb:00:62:b2:20:c6:4f:43:28:a3:de:
88:ed:79:f1:05:32:da:ff:5c:76:e8:d3:a1:f4:cc:
33:4f:9a:d4:32:90:31:99:6e:b0:32:80:e7:d1:80:
a2:ef:77:6f:10:14:06:53:aa:70:6f:d0:c4:9a:b5:
8a:45:67:2a:17:34:d7:0a:a3:36:8b:13:20:40:5b:
9c:63:fc:3d:dd:57:80:e3:80:2e:0c:87:c0:30:45:
8e:4d:1e:d6:cd:4d:8a:41:dc:62:47:51:7c:f8:e4:
ec:9a:23:e2:0b:57:23:70:6e:1b:66:51:b8:c5:d1:
39:0d:8f:d3:67:ca:08:6a:8c:29:97:cd:ea:80:86:
ba:74:32:7f:54:f3:c2:6d:1f:b5:72:0d:7c:81:58:
b3:55:84:ae:0b:1d:e8:27:74:6b:58:7a:5d:7f:e0:
0e:34:af:49:b2:b9:85:6b:67:53:75:cd:32:f9:5b:
fc:13:4d:07:c9:bd:be:15:bd:da:68:b4:8a:5a:98:
74:c0:e2:75:f1:03:1f:d1:28:e4:3a:37:0c:29:c6:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:07:AE:D1:63:BC:46:9C:5F:87:FD:B2:B6:34:BA:80:0D:E6:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/258C4732B22D11EE93D1C573775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:d7:9a:79:c0:18:0c:ea:13:9d:0f:8c:87:35:03:0c:bb:c9:
39:11:44:c2:86:e8:30:39:ef:15:82:ff:4a:00:47:83:e2:e2:
c4:12:51:82:03:8d:2e:99:40:db:2f:e3:50:52:c2:74:1c:03:
20:04:18:96:67:0b:4f:b9:47:6a:5e:81:2b:e0:54:51:93:0f:
41:f4:3f:97:4e:09:63:be:be:c4:99:14:d2:06:0f:7f:6b:0f:
c5:f7:e6:a3:53:d1:a0:87:54:6d:49:48:8c:09:e1:ca:df:d9:
84:15:3a:80:00:79:e5:ca:c8:d6:da:e5:87:67:a2:c8:da:60:
64:95:ac:7d:8b:f9:c4:4c:3c:b2:a6:a6:e0:b8:01:35:89:30:
74:de:16:ac:2e:a0:49:f4:17:50:f5:30:c3:99:61:d2:30:4f:
46:31:93:74:5c:15:e4:40:a4:e0:7d:b1:e9:21:d9:e2:b6:53:
7f:d8:56:ad:01:24:2e:e1:37:0c:2b:f7:68:25:f8:54:98:58:
b0:e2:d0:f2:5b:5b:43:4f:fe:3f:d1:6d:02:e0:16:52:f5:60:
87:df:a8:df:fe:93:d2:e4:82:ff:83:51:cb:a8:c3:3d:11:3a:
a8:8f:95:64:b1:57:7b:a4:cd:87:79:2d:e7:08:21:99:4c:f4:
b1:36:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:18 2024 by rpki-client on console-fra.rpki-client.org