Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FB8CBC8727511EE9A1642344AD9E6FC.roa
File: 8FB8CBC8727511EE9A1642344AD9E6FC.roa (raw, json)
Hash identifier: 3UPRBCvudd6XM107p1IqgMfgDHheNpa/ndUv2FwoPr0=
Subject key identifier: 3C:4A:66:55:AD:A7:46:A4:32:9B:D8:2D:E8:6F:47:EC:01:B7:F8:64
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4769
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FB8CBC8727511EE9A1642344AD9E6FC.roa
Signing time: Tue 24 Oct 2023 13:59:34 +0000
ROA not before: Tue 24 Oct 2023 13:59:31 +0000
ROA not after: Thu 17 Oct 2024 13:59:31 +0000
asID: 58879
IP address blocks: 154.91.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18281 (0x4769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 24 13:59:31 2023 GMT
Not After : Oct 17 13:59:31 2024 GMT
Subject: CN=6537cdc6-8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:58:fe:b2:4e:c6:d2:8d:13:d8:d3:4a:50:
a3:db:e8:38:57:2b:eb:c9:db:c9:3c:2f:b1:45:4e:
4a:28:c3:6b:52:49:c1:8b:b2:9a:3a:6b:fd:9f:18:
a2:27:ff:df:7c:ff:ab:d7:4f:c9:f9:7d:13:e8:df:
52:dd:28:26:fa:2e:de:2b:79:32:ed:4f:8b:f4:b7:
a3:8a:a5:9d:3a:ba:df:3a:32:c5:d1:98:94:9b:f8:
cc:a3:b7:35:91:6b:c0:c7:4f:db:c1:ef:9d:cd:c0:
b3:ed:c6:9f:84:a5:27:3f:8b:8e:fb:c8:24:a7:8c:
b5:ec:90:55:1a:93:54:d2:6e:6d:2a:aa:26:87:1a:
be:3d:8a:6f:c2:2f:fa:10:1c:71:0c:8b:39:1f:12:
b2:d7:a0:25:a1:38:06:67:de:b1:c8:07:80:19:d6:
ca:f5:61:ba:98:d0:ed:99:b3:4e:de:92:c1:eb:7b:
16:d5:a2:b7:7b:46:d8:73:47:dd:50:1a:b8:22:7d:
ed:dc:05:87:50:15:bc:81:63:5f:21:48:14:ca:71:
92:49:73:e9:50:79:6f:86:66:ba:66:23:76:e3:3d:
75:d3:06:76:11:1f:72:43:54:47:80:ee:1e:ae:3c:
76:65:5c:e2:13:49:3e:7d:e8:51:c8:cf:d0:5f:f5:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:66:55:AD:A7:46:A4:32:9B:D8:2D:E8:6F:47:EC:01:B7:F8:64
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FB8CBC8727511EE9A1642344AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.33.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:42:4a:6a:22:9c:57:6f:66:7a:ac:61:16:b0:a7:41:85:
b4:fa:53:0a:f6:9c:09:40:ac:d6:f3:4f:12:4c:ab:fc:bd:f8:
c6:69:4a:4a:1a:11:b8:4c:06:91:15:b0:74:9d:51:a2:7c:92:
65:4a:00:f1:76:21:eb:48:4d:f4:33:61:a8:1b:14:58:a4:38:
6a:91:21:74:e2:3a:4c:e4:00:64:03:e8:3c:ab:34:3c:b6:18:
35:0f:1b:74:fa:70:ac:f8:29:3e:aa:25:b0:31:0c:02:ed:e0:
4b:5e:78:f5:1c:d1:ec:e5:0b:20:a9:4a:72:74:c9:33:92:8c:
2d:83:b2:0b:89:83:e5:9f:02:5f:e7:cd:c7:2d:0f:08:a9:ee:
47:aa:af:15:25:4a:b2:3a:b2:5c:69:b5:8b:15:4a:70:c6:b6:
d4:ae:d1:60:cc:0e:a7:5a:20:51:93:ee:79:5e:c0:a6:68:b6:
fb:de:20:9b:5e:6e:d3:1a:68:bb:d6:8d:de:d3:93:dd:de:bd:
78:cd:34:d6:82:4f:3b:25:fd:55:41:db:9b:4b:f3:fe:2e:dd:
75:48:a3:68:6a:44:71:a3:2f:5a:a3:2f:50:66:51:38:24:c3:
2b:e4:8f:33:fe:95:67:d3:dd:32:4f:9a:bd:d9:4d:54:dc:34:
e6:85:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:31 2024 by rpki-client on console-fra.rpki-client.org