Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50EB19F8B34511EE951AB46C775412E6.roa
File: 50EB19F8B34511EE951AB46C775412E6.roa (raw, json)
Hash identifier: xlukZx7dtNyIzvvVD1dtnJvMhpF95TdEE9oOaNyRMdQ=
Subject key identifier: 09:0A:C7:62:0E:59:29:27:11:13:17:40:FC:56:0C:FB:3A:26:88:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 752C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50EB19F8B34511EE951AB46C775412E6.roa
Signing time: Mon 15 Jan 2024 01:27:59 +0000
ROA not before: Mon 15 Jan 2024 01:27:55 +0000
ROA not after: Fri 13 Dec 2024 01:27:55 +0000
asID: 8796
IP address blocks: 154.205.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29996 (0x752c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:27:55 2024 GMT
Not After : Dec 13 01:27:55 2024 GMT
Subject: CN=65a48a1f-892c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:86:6a:a7:50:ca:9c:15:68:ba:47:32:d3:
48:10:7d:9c:39:05:93:1a:c7:89:fd:83:89:2d:4f:
c9:99:f9:bd:25:37:21:db:09:bd:6b:a0:92:79:fc:
e2:d9:17:e7:86:40:e5:d8:85:af:83:c4:7d:78:27:
ec:d2:98:44:f2:55:a2:d8:5d:e9:21:b2:24:02:76:
db:65:3e:ad:49:24:44:bb:51:6e:76:1e:3b:f9:b5:
57:6c:24:01:ef:20:78:73:12:46:e3:d4:1f:e6:09:
95:a4:4e:b5:cc:7a:e9:d0:55:36:fd:a5:2d:86:9d:
d6:63:f7:20:64:f7:7f:c0:73:b0:e6:85:9c:83:8c:
8b:f9:e5:db:89:ec:6b:11:55:07:71:1c:17:e4:2f:
48:62:02:91:60:01:c7:92:2e:bb:f2:2c:b3:bd:f4:
8d:3f:a2:dc:21:22:6a:ab:55:30:46:d6:b4:23:72:
5a:54:5e:71:1d:dc:b4:08:c1:92:24:e4:23:14:5e:
99:74:2c:df:33:4f:3b:bd:0a:63:f1:86:51:82:03:
22:d1:03:ce:d0:c1:2c:3c:ac:95:3c:21:d3:25:f2:
5a:fe:53:17:a8:aa:a9:65:b7:b7:9d:b7:94:c5:d8:
0e:86:2f:87:4d:c6:f6:22:7e:e5:2c:a9:4f:4d:96:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:C7:62:0E:59:29:27:11:13:17:40:FC:56:0C:FB:3A:26:88:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50EB19F8B34511EE951AB46C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:42:f9:e0:2a:e5:e4:b5:ea:db:d7:5f:6f:fa:d0:cc:e8:69:
0d:3f:50:9f:45:08:91:07:cf:6b:9e:11:bb:85:35:d0:fe:b4:
ff:c0:70:77:65:12:e9:d7:8a:c1:20:d4:18:9f:43:54:13:cc:
26:51:f6:cc:7d:fa:15:ed:d7:16:b3:d8:df:60:88:b7:2c:31:
f4:30:02:d1:50:83:6c:d8:bf:c2:da:d8:c7:cd:0f:50:32:72:
dc:c6:ff:ff:ba:1c:44:4e:30:0e:aa:d3:f6:58:ad:c1:fb:d3:
39:e9:d4:23:0f:24:83:5c:a0:91:f6:e4:b4:52:b8:89:d2:1c:
90:4b:a4:9d:58:62:ff:b2:ea:88:a7:47:5d:88:86:ec:a5:b3:
2f:2a:4d:2b:1a:ae:7b:f7:a0:e6:98:1d:e3:eb:bd:5f:11:2a:
e3:13:b6:04:d5:e0:91:56:3a:9f:a0:9c:6c:a4:06:61:ec:23:
24:bd:05:7f:09:a1:be:7e:cd:15:df:59:70:63:f2:f7:ef:9b:
d2:93:ee:4d:f2:24:88:00:b5:e4:74:d9:c9:d9:e1:35:73:03:
f4:74:ab:6d:ac:34:f8:ac:d2:2b:30:67:4a:c0:fd:d2:46:59:
ee:cd:b2:bf:27:72:ba:d0:06:c8:c7:35:65:5c:d6:27:29:25:
ec:c2:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:23 2024 by rpki-client on console-fra.rpki-client.org