Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4F8DFE82BB11EEB450AE334AD9E6FC.roa
File: 5F4F8DFE82BB11EEB450AE334AD9E6FC.roa (raw, json)
Hash identifier: VNzMO9t/TsmZmMSSaOf5L7olhN1ghx8sbuMfjUsXv9Q=
Subject key identifier: 46:89:F6:C3:32:1D:07:35:C6:15:4C:2D:CF:25:AF:3B:07:6E:9E:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4F8DFE82BB11EEB450AE334AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:59:37 +0000
ROA not before: Tue 14 Nov 2023 06:59:33 +0000
ROA not after: Sat 28 Sep 2024 06:59:33 +0000
asID: 5065
IP address blocks: 154.207.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20456 (0x4fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:59:33 2023 GMT
Not After : Sep 28 06:59:33 2024 GMT
Subject: CN=65531ad8-4bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:da:42:27:18:1f:e8:82:95:88:8a:36:7d:
0b:9a:c7:9d:eb:20:bf:65:71:39:7e:57:c5:50:2b:
42:51:41:23:8d:81:61:61:d1:e2:d5:55:53:c1:d0:
70:73:ac:29:46:0e:de:03:a5:1e:16:6f:13:65:04:
b0:30:ab:48:3a:eb:1e:e0:49:3a:d6:15:15:ea:1d:
29:d5:5c:17:f7:91:ee:56:3b:d7:a3:44:03:fe:2d:
ef:a6:c3:76:04:d2:c3:db:e3:21:dd:59:34:67:2b:
8d:3e:e9:7e:42:71:60:47:9a:0f:b8:1b:9f:80:e6:
da:38:46:19:3e:34:c3:7d:b8:49:f2:ad:86:47:be:
5c:7a:c9:4d:86:6b:5f:5f:59:bc:0e:d4:e1:ec:06:
89:1c:5c:e4:83:40:61:e8:ed:ad:c0:f2:8a:6e:9b:
91:1f:56:01:ec:ac:24:23:00:7b:a8:72:5d:c9:61:
4a:b6:3b:cb:ad:79:72:5b:08:f3:3c:53:54:85:69:
6b:97:50:78:39:99:91:c7:6e:11:8f:d9:d3:bf:98:
7b:e1:85:f9:55:3f:bb:79:a0:59:fc:3d:e6:81:9f:
cd:dc:04:5a:62:ff:a8:9c:d5:e6:f0:31:c1:2d:73:
ad:57:6a:14:89:91:7e:9b:06:fc:d1:44:53:ae:7d:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:F6:C3:32:1D:07:35:C6:15:4C:2D:CF:25:AF:3B:07:6E:9E:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4F8DFE82BB11EEB450AE334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.172.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ff:8e:f7:57:6d:16:12:25:d1:ed:1a:f4:bf:d1:48:80:57:
21:a1:bf:ad:b8:40:71:94:a9:25:35:46:2f:8a:91:34:46:6a:
ac:c6:c1:38:98:7b:b5:ef:c3:05:28:6c:1d:d8:df:e5:fd:34:
e7:48:8f:15:15:f4:5a:ae:66:22:54:f0:4a:be:8b:1e:04:89:
76:68:47:64:db:08:39:9d:63:e2:70:fa:be:92:e2:2a:7b:0d:
ec:91:31:0c:b2:ee:cb:34:30:9f:30:0b:8b:57:74:33:7c:fc:
92:8e:43:f5:c3:88:04:86:fe:56:b2:67:26:a4:45:01:a5:bd:
1c:ab:50:5e:09:e8:ea:73:e1:51:73:db:fe:22:9f:b4:24:58:
36:9d:5e:0d:e5:f0:16:dd:39:78:1a:1f:8d:c6:ef:a7:bb:a5:
f3:6b:6a:73:2d:0c:94:60:05:94:3b:8f:9e:31:ba:a0:ac:a2:
37:96:fb:53:eb:c6:31:38:16:5d:27:2f:52:3d:ea:4e:c8:c9:
52:2a:fb:5c:93:8c:aa:6d:ac:45:0d:80:6f:5f:d1:ab:d9:54:
8a:f7:15:75:71:5c:6b:55:2e:cf:63:16:f2:b7:fa:30:fa:aa:
5a:38:1c:f4:9e:0c:2f:0f:d7:64:aa:fd:79:90:19:23:1c:f2:
6d:25:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:25 2024 by rpki-client on console-fra.rpki-client.org