Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B7ABBB6AE1F11EE824B93A1775412E6.roa
File: 4B7ABBB6AE1F11EE824B93A1775412E6.roa (raw, json)
Hash identifier: YJiPgGorUYkC3GPpwPmfq5MEX2mH3E57cArmxZSCq4I=
Subject key identifier: 37:8E:2B:DD:1D:32:D3:90:35:59:E3:97:90:A8:28:CB:3B:C2:DC:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B7ABBB6AE1F11EE824B93A1775412E6.roa
Signing time: Mon 08 Jan 2024 12:13:13 +0000
ROA not before: Mon 08 Jan 2024 12:13:10 +0000
ROA not after: Tue 14 Jan 2025 12:13:10 +0000
asID: 138965
IP address blocks: 154.222.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29386 (0x72ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:13:10 2024 GMT
Not After : Jan 14 12:13:10 2025 GMT
Subject: CN=659be6d9-9858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:82:8d:b1:0a:7c:be:d9:9e:5e:7c:2e:9b:
39:8f:42:59:91:e5:b3:03:28:87:24:b8:5c:f0:56:
a3:f0:90:35:73:7c:a6:75:ff:30:88:32:f7:a1:8a:
76:55:aa:7b:75:be:21:af:13:04:6b:5c:05:09:a5:
0f:f5:17:34:80:8b:e9:41:ce:86:a5:bc:1b:ad:00:
18:44:d1:30:dc:d9:df:d0:85:48:8e:af:5f:e6:34:
b1:3e:d2:8c:24:4c:f2:a1:5b:fe:be:9c:4e:f2:15:
fb:e7:56:1e:48:14:84:40:ec:95:f5:82:58:51:19:
f4:74:7c:ec:e0:de:bb:72:a1:ee:ad:7f:70:18:d6:
9b:c1:0d:3a:ca:17:7c:17:00:ed:6c:db:6b:95:c3:
4f:77:3d:53:38:ce:d6:1f:ea:c2:b8:c4:31:77:0d:
16:34:de:e5:97:21:97:1d:dd:49:bd:a7:e1:89:89:
94:cb:64:ad:7a:36:2f:f6:12:e4:c6:2a:db:21:0d:
df:30:22:c7:79:62:d3:22:f1:d0:63:36:d4:2d:7b:
62:92:37:06:53:32:02:96:fa:e6:e6:4c:f9:bc:90:
e2:dd:74:2c:d3:a1:3b:02:2b:35:8c:53:e4:bf:d1:
44:b2:55:37:7f:af:72:82:81:8e:1a:b3:1a:56:18:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8E:2B:DD:1D:32:D3:90:35:59:E3:97:90:A8:28:CB:3B:C2:DC:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B7ABBB6AE1F11EE824B93A1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6b:4e:6a:0d:22:51:22:62:2b:a0:3f:25:3c:4f:54:ec:0e:
d2:67:c4:6b:fa:1a:8d:5d:5b:79:1e:ae:99:13:16:ee:64:5e:
23:2c:c0:b5:16:52:cb:f5:46:0b:b1:a1:7e:28:62:f1:dc:a7:
cd:13:df:39:0a:02:56:94:1b:fc:47:77:d3:db:a1:1e:0d:a3:
93:c6:e5:ba:60:24:fb:42:a0:70:18:74:d5:1b:1c:58:58:ae:
83:16:a6:0c:2f:d9:4e:46:8c:87:6f:ca:25:e8:65:c2:08:63:
19:18:00:e7:bd:8f:b3:c5:e3:8f:01:a6:d9:ab:47:3d:1d:57:
31:92:c1:82:88:52:a0:f8:d3:5b:9b:b2:ff:41:5c:a0:5d:82:
a1:3b:5e:9c:c9:f5:db:52:1e:e0:14:2d:e7:d8:25:53:2c:32:
9a:97:c4:95:2e:83:a6:f7:5a:49:a5:e1:5e:1f:04:c6:c4:56:
c6:03:df:c9:16:d1:50:f0:a9:19:02:65:40:92:8a:b5:60:aa:
af:2e:58:19:f4:ef:c1:b3:35:4d:cc:3a:bf:5b:04:7c:3c:93:
34:11:52:92:6c:2f:31:2d:b3:27:02:3e:aa:3f:24:9f:c3:bf:
ae:6d:79:c8:f5:7b:b9:3d:e0:ea:d8:db:14:a6:96:72:a6:76:
9c:fd:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org