Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BBE5C2AB22E11EE81E61176775412E6.roa
File: 7BBE5C2AB22E11EE81E61176775412E6.roa (raw, json)
Hash identifier: btOQ2mWWjv8yrQgBPTZDKYIkpJ5oI/VHcsuZVD+QXdE=
Subject key identifier: 8F:72:C7:D8:03:17:FB:C4:C2:BA:73:53:C8:ED:FD:C9:92:75:F2:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7506
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BBE5C2AB22E11EE81E61176775412E6.roa
Signing time: Sat 13 Jan 2024 16:12:01 +0000
ROA not before: Sat 13 Jan 2024 16:11:58 +0000
ROA not after: Fri 13 Dec 2024 16:11:58 +0000
asID: 140227
IP address blocks: 154.205.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29958 (0x7506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 16:11:58 2024 GMT
Not After : Dec 13 16:11:58 2024 GMT
Subject: CN=65a2b651-038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:d0:ba:7b:58:f8:8a:57:8f:4c:55:db:66:
75:f9:43:bc:0a:ad:9c:2a:fa:09:3e:a1:79:73:bb:
ce:4b:f2:23:9d:d2:d1:c2:6f:5e:2a:73:67:f0:d9:
a8:43:e9:c5:05:95:07:44:0d:04:b8:b4:a0:c0:8e:
f3:19:d1:a1:b4:98:96:1d:af:53:b7:b1:67:6c:7a:
35:6a:dc:b1:b6:14:c9:38:2c:62:96:e8:66:aa:2c:
26:18:37:6e:a7:dd:c1:6e:d5:8c:41:6d:b3:25:6c:
93:76:eb:74:16:64:b0:ba:ba:98:79:b6:6a:dc:1d:
7e:01:3a:1d:5b:91:ee:56:63:ad:d0:17:71:80:13:
c0:4d:8a:25:9b:af:e5:04:2a:0e:bb:4a:0e:c1:49:
28:0b:08:37:c1:6d:ce:42:25:55:11:16:ae:1b:23:
b2:3a:80:e8:10:36:4d:20:6a:0f:11:a8:d9:fa:4b:
40:f4:79:82:a4:03:fa:00:7e:37:2c:22:0f:60:a9:
26:18:bf:dc:3c:e8:3d:3b:70:d1:44:51:6f:97:6a:
64:69:d9:9f:24:85:f2:98:a2:cb:0a:d7:33:78:ec:
af:73:95:f3:5e:b1:b2:9f:ae:80:59:fb:5e:ee:f1:
4b:f6:a1:b3:f9:54:2d:92:87:5e:79:32:a1:78:d0:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:72:C7:D8:03:17:FB:C4:C2:BA:73:53:C8:ED:FD:C9:92:75:F2:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BBE5C2AB22E11EE81E61176775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f4:53:e3:b8:82:19:55:12:69:26:c8:81:2e:87:72:83:37:
d9:46:d7:8e:cc:ed:d3:11:6c:44:94:62:1d:86:97:86:15:fe:
79:1f:94:9b:bb:1c:1c:39:3a:73:62:80:27:86:a3:78:c3:f4:
27:65:61:97:f3:80:fd:e6:ef:e0:a8:83:11:97:5a:64:72:0b:
80:8f:a4:ba:6a:78:b1:00:85:54:21:a2:b4:a7:f7:a1:b5:f3:
17:15:28:f4:7b:f4:b2:2b:db:c8:5c:70:34:b4:0d:da:1a:1b:
29:c6:fb:5a:e1:44:25:95:c8:1c:10:30:a2:ac:fc:32:22:6e:
97:01:26:0c:88:75:31:59:62:26:68:ff:82:5a:b9:9d:50:7a:
16:37:14:c2:98:0b:34:1b:c1:f4:56:f2:b0:a5:2e:dd:e1:93:
5f:87:9e:f3:27:25:08:b8:7f:bd:7a:98:3b:51:29:1a:8c:22:
56:27:aa:ed:c4:fe:06:17:0a:59:c7:81:04:b9:5a:8f:07:1f:
01:1a:85:34:10:d3:7d:ed:61:0e:cd:8f:74:cc:37:21:5c:55:
05:44:8f:80:79:43:70:94:0e:98:a1:7a:36:c3:5d:07:76:43:
ae:4f:f6:8c:26:ed:a8:6a:2f:16:a6:ee:bf:12:74:c2:96:18:
19:c4:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:29 2024 by rpki-client on console-fra.rpki-client.org