Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9989B9E6EFF211EE92EF4EA2775412E6.roa
File: 9989B9E6EFF211EE92EF4EA2775412E6.roa (raw, json)
Hash identifier: 3M6j5narfpC28AzyOVZrRX/55zYc3QKGhyGX3J2A89M=
Subject key identifier: D8:6E:04:9B:C5:4B:64:4E:E2:A7:85:23:64:2A:11:59:A4:9E:F4:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9989B9E6EFF211EE92EF4EA2775412E6.roa
Signing time: Mon 01 Apr 2024 06:39:33 +0000
ROA not before: Mon 01 Apr 2024 06:39:30 +0000
ROA not after: Tue 07 May 2024 06:39:30 +0000
asID: 63139
IP address blocks: 154.223.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42958 (0xa7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:39:30 2024 GMT
Not After : May 7 06:39:30 2024 GMT
Subject: CN=660a56a5-f6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:6d:ec:3f:4b:33:d2:4d:7d:f1:73:bb:64:
cb:8d:76:ec:6e:15:31:81:7c:bb:e6:1f:a8:57:5b:
dc:3a:44:cf:66:ef:6a:01:62:18:23:fa:5d:d1:f3:
67:1a:32:73:09:b8:35:78:ca:2b:12:e0:3a:36:62:
71:b3:0f:37:94:f8:de:70:96:f8:99:72:3e:bb:15:
43:f4:e0:f2:f4:50:bc:ef:c5:8f:41:27:0c:3f:08:
00:e6:50:59:ee:0f:b9:bb:35:23:71:0e:ef:e9:67:
2b:d5:ad:70:77:6e:0b:7d:40:69:4b:a3:c4:ef:ea:
0f:e8:63:42:bb:4a:ab:64:ae:5c:04:8d:20:a5:5c:
c4:b9:d0:c9:fa:8f:ee:31:34:f9:05:55:fe:5f:51:
d4:b9:fd:d3:e4:b7:85:d8:cd:23:b7:63:ea:23:0a:
c1:c1:26:c9:5a:10:ff:aa:8f:34:09:c6:b2:8d:01:
8f:84:89:37:ff:ae:02:7a:27:09:96:a5:02:53:63:
56:f4:be:38:21:5d:14:c9:88:ff:0e:8a:e3:0c:3e:
9d:58:d5:38:4b:d7:c3:dd:9f:e8:61:10:97:1f:9f:
35:43:f6:11:5d:4a:06:f5:1c:d5:d8:0d:49:81:ba:
85:31:1f:7d:b5:64:ff:fb:1e:77:31:bc:25:bd:e4:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6E:04:9B:C5:4B:64:4E:E2:A7:85:23:64:2A:11:59:A4:9E:F4:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9989B9E6EFF211EE92EF4EA2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ec:a6:db:58:4e:bf:49:4e:73:37:15:58:0e:30:a6:22:56:
52:56:8b:c3:12:eb:38:03:9e:91:80:21:c2:8a:74:7f:f7:03:
e2:33:be:e1:55:32:bc:69:1a:b0:d1:b9:d9:99:6b:e1:5f:09:
a0:a4:dd:3c:f1:66:6b:41:20:8a:51:70:75:32:f7:b0:17:cc:
82:15:4f:dc:2c:3f:7d:fa:85:1c:40:fd:29:73:4a:45:e7:59:
f7:a8:8f:37:99:24:18:a1:0e:37:74:b7:25:87:8c:d9:66:44:
65:14:6a:54:5b:46:36:15:e8:88:4c:30:19:12:72:93:7c:d8:
32:63:c8:38:be:2e:6e:90:8a:fa:de:dd:c0:84:6e:8c:ed:0a:
92:71:74:c5:88:0e:b3:29:d0:61:62:f8:b4:ac:e1:72:80:4b:
45:99:92:2f:9c:bb:16:e5:aa:66:6c:b2:f6:fd:c0:6d:96:97:
27:c3:d8:46:37:c9:a7:03:31:4a:de:84:32:5f:d0:31:ad:a8:
f0:a5:f8:ad:43:9d:a7:4b:1f:c6:05:b5:1d:6c:cd:f0:49:e1:
b3:bc:a1:a2:82:a9:c7:99:fd:d2:31:28:8b:bb:0c:47:de:5e:
5c:f0:7d:d1:9c:d4:2d:07:c6:0e:68:3c:14:a3:b9:e8:17:aa:
af:08:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:32 2024 by rpki-client on console-fra.rpki-client.org