Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/657AECA6C5C211EE9FBDD170775412E6.roa
File: 657AECA6C5C211EE9FBDD170775412E6.roa (raw, json)
Hash identifier: p6OOxFkfO7tyA5T/Pb3n2PH33bP9qwoU6et71zrmLvA=
Subject key identifier: 24:E3:83:42:4C:8D:CB:A2:1D:38:52:03:CD:55:98:26:7B:72:17:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 86F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/657AECA6C5C211EE9FBDD170775412E6.roa
Signing time: Wed 07 Feb 2024 14:08:41 +0000
ROA not before: Wed 07 Feb 2024 14:08:38 +0000
ROA not after: Wed 31 Jul 2024 14:08:38 +0000
asID: 53356
IP address blocks: 154.214.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34544 (0x86f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 7 14:08:38 2024 GMT
Not After : Jul 31 14:08:38 2024 GMT
Subject: CN=65c38ee9-cf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:b8:9b:a7:0d:62:0f:9c:bf:ea:7f:96:0f:
7c:b7:32:66:5e:78:34:9a:83:17:75:9a:4b:05:37:
b8:a8:92:09:1e:75:c2:e5:32:ff:12:74:d0:f4:00:
92:85:8a:15:b0:cf:54:12:a6:79:25:27:24:59:91:
ee:fe:e7:65:1f:7f:14:86:cc:10:2e:5e:87:ec:2a:
c4:70:7c:e9:e8:91:83:24:2a:cd:a6:6d:56:ac:96:
30:35:d9:99:3a:59:bb:21:19:26:41:ea:23:a3:8c:
d4:d9:99:16:10:5e:21:0a:fc:2d:56:d0:9a:0f:cd:
4d:16:d0:48:38:31:57:51:67:12:3e:fc:74:d4:52:
b3:0e:e7:78:ce:b6:ed:5f:09:7c:59:a6:20:3e:4e:
52:b7:39:59:af:0c:d6:98:24:e9:46:db:7a:73:5d:
04:6c:88:3a:05:e8:e1:ec:89:25:19:23:b2:96:56:
17:f3:b5:20:a9:3d:a3:ba:d1:28:8b:c2:f6:61:e9:
26:09:ee:d3:24:0d:9d:dc:f7:7b:b6:94:69:6b:bb:
6d:24:7e:90:0b:d2:27:9b:da:50:21:a4:35:b6:73:
24:a1:02:97:a0:49:ac:a6:0f:18:04:d5:cc:d2:72:
23:7b:9f:27:11:5b:db:99:3b:ec:30:56:d8:6d:33:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:83:42:4C:8D:CB:A2:1D:38:52:03:CD:55:98:26:7B:72:17:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/657AECA6C5C211EE9FBDD170775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.250.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:5c:7f:f9:cc:c0:b9:64:79:19:0a:2d:32:d7:84:ed:0b:ee:
d3:7a:49:33:3f:4f:aa:df:1a:ad:ee:29:4d:8a:83:1d:9f:b8:
63:87:d7:0d:4b:62:fc:e7:de:03:1e:b8:dd:b9:06:de:04:ff:
96:2d:aa:a1:fb:d5:dd:d6:db:44:6d:95:e3:32:f3:54:a1:f2:
5e:2f:b1:4c:2e:2f:0a:9b:25:d3:08:42:e4:80:93:6c:d6:5d:
09:21:07:c0:8c:15:4f:a3:c0:2d:8a:0c:f6:ab:d8:27:a2:b0:
f1:39:f6:d6:f5:ce:a5:c4:a0:46:14:e0:13:61:3e:7e:bd:fb:
13:a0:6b:e3:ab:cd:10:06:2f:e4:e9:6c:6f:1f:49:85:52:7d:
79:ff:10:4c:e1:ad:7a:d4:fa:e6:f1:18:60:76:28:8e:9f:1b:
08:20:73:6a:56:cf:b9:41:75:31:36:74:52:d1:0f:f2:ac:4f:
0f:4b:d2:97:a1:d6:7b:df:fa:35:0f:11:55:10:3d:eb:fc:a2:
f2:79:e5:1c:06:7e:d8:d4:e5:d7:2b:b9:e8:65:6b:dc:72:0b:
d9:40:4e:ae:68:89:a7:55:36:eb:b7:d2:78:72:66:b7:67:d8:
ec:26:b5:87:30:4f:72:01:15:74:10:a8:51:d3:df:66:b2:fe:
aa:09:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:26 2024 by rpki-client on console-fra.rpki-client.org