Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550F2ABCB34811EE9BA53375775412E6.roa
File: 550F2ABCB34811EE9BA53375775412E6.roa (raw, json)
Hash identifier: AAWZ4d0KKX/E4693NpnMtp/lzctiKYcq4U8iz9MB2XY=
Subject key identifier: 6A:EE:E5:25:26:56:B2:A5:28:44:85:D9:30:C6:44:25:81:D9:39:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7538
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550F2ABCB34811EE9BA53375775412E6.roa
Signing time: Mon 15 Jan 2024 01:49:34 +0000
ROA not before: Mon 15 Jan 2024 01:49:31 +0000
ROA not after: Fri 13 Dec 2024 01:49:31 +0000
asID: 8796
IP address blocks: 154.205.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30008 (0x7538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 01:49:31 2024 GMT
Not After : Dec 13 01:49:31 2024 GMT
Subject: CN=65a48f2e-1c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:9c:5b:0a:c4:db:1e:b0:52:98:d8:00:78:
bd:51:fd:28:8d:2d:f9:72:16:b1:af:46:8e:36:05:
39:d2:48:4a:57:b8:80:7e:d7:84:51:aa:09:cb:ad:
dd:39:d3:c4:b2:29:60:b7:3d:5d:98:26:4c:9d:ba:
90:45:db:8e:4a:9a:51:ea:d8:98:2d:91:37:5f:b5:
70:1a:bc:44:fb:97:55:78:4e:de:5b:17:e0:88:da:
a3:0d:4f:84:b0:c9:f4:dd:72:41:34:6c:76:9d:4d:
32:aa:ef:91:22:f6:1e:68:1c:9f:c0:5a:50:08:bd:
f6:bf:9c:0f:ad:92:f1:67:0a:5a:56:fb:78:4e:04:
bb:ee:5f:1f:1e:e0:55:21:68:09:e4:12:0d:3b:05:
46:92:78:75:42:fa:af:c7:52:ea:ed:e4:ef:72:45:
cb:2d:88:86:eb:19:af:e7:71:62:f1:5c:7a:49:04:
67:45:33:58:08:48:0e:d1:63:2d:d4:fa:d3:55:54:
1d:46:14:e0:18:d2:aa:21:af:ed:03:c3:43:ee:21:
e1:c1:b7:71:86:df:c3:7a:78:13:dc:99:46:0d:01:
90:b3:b0:e7:3a:1c:2c:87:81:a0:ba:32:84:3c:88:
d0:18:18:55:31:d9:e8:df:87:60:32:82:94:a1:6c:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:E5:25:26:56:B2:A5:28:44:85:D9:30:C6:44:25:81:D9:39:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/550F2ABCB34811EE9BA53375775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cf:bc:c1:3e:58:13:75:8b:11:61:62:f0:a3:00:b7:1a:ca:
6c:84:e5:ae:a5:9f:5d:f3:eb:90:2f:07:04:0d:37:ec:89:47:
d6:c3:ee:ad:bc:c2:38:1a:92:b0:e5:ec:4b:89:58:46:9d:f8:
d2:d4:0d:6e:73:80:da:23:01:a1:d8:63:36:a0:30:cb:e0:70:
bf:f6:f0:66:53:b2:f0:50:ae:89:c2:66:08:f9:eb:fb:bd:a4:
bc:32:ce:bb:00:97:59:ea:fe:53:74:2e:41:e4:ff:a9:68:39:
51:9f:8d:75:68:ae:4a:0b:4d:86:6a:63:01:63:d2:19:a9:1e:
fb:d1:98:5f:8e:a1:53:6b:e4:cd:06:cd:f6:f8:7f:df:e5:d0:
b5:bd:80:56:a2:ed:86:ba:7e:8c:c6:9d:cd:10:c3:d5:5c:40:
02:ac:d0:cc:e1:5c:94:70:7b:af:ae:0d:68:c4:12:09:9e:2c:
41:ec:66:c9:3e:75:4b:8f:8a:4c:fc:56:d9:dc:38:a0:f1:09:
68:d6:d3:df:de:70:fe:c0:8f:0d:7d:ae:17:3a:c5:a5:17:84:
30:97:33:2c:1b:fe:0e:73:09:10:f2:ab:a8:f0:90:bd:72:40:
ea:5f:9b:77:80:f5:b9:e2:10:14:04:6e:4c:c1:53:84:b2:98:
27:27:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:07 2024 by rpki-client on console-fra.rpki-client.org