Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B978C1D6B34B11EE9598EB7E775412E6.roa
File: B978C1D6B34B11EE9598EB7E775412E6.roa (raw, json)
Hash identifier: HQT3XCASNN6wwj3+qDFPnINjKjliUijhLzq6HChVfHo=
Subject key identifier: 38:21:E3:78:91:70:86:2D:7C:63:5D:EE:B1:D8:CF:F5:B4:AE:FC:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 7556
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B978C1D6B34B11EE9598EB7E775412E6.roa
Signing time: Mon 15 Jan 2024 02:13:51 +0000
ROA not before: Mon 15 Jan 2024 02:13:48 +0000
ROA not after: Fri 13 Dec 2024 02:13:48 +0000
asID: 140227
IP address blocks: 154.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30038 (0x7556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 02:13:48 2024 GMT
Not After : Dec 13 02:13:48 2024 GMT
Subject: CN=65a494df-42c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:2d:53:b5:c9:e4:b9:9d:c3:a8:1c:e6:2e:
f6:81:52:9b:ae:99:68:dd:17:7d:66:99:7e:9b:77:
97:0d:8f:81:01:d4:cd:df:8f:3a:db:bf:55:6d:f8:
94:f8:a7:cb:41:fe:bb:6d:06:56:45:c6:93:7f:f1:
dc:73:55:49:59:33:46:ae:ad:bf:29:84:36:4e:bc:
f3:37:63:fb:71:d8:a4:80:58:d7:f3:6b:42:6f:41:
f2:f8:ee:93:31:d2:8b:f0:6f:c2:ed:e0:84:3d:07:
d4:c2:2d:e3:ef:47:f3:64:f5:5f:b3:ee:65:a1:51:
2b:78:f0:1d:28:6f:2b:fc:76:4a:77:78:d0:a7:77:
77:ec:70:aa:df:cf:49:87:ee:fd:82:fa:0d:d9:70:
89:d5:5d:1e:44:a6:91:7d:f2:c4:8b:e4:d4:8b:70:
51:54:9a:2f:ed:13:72:8d:65:b2:72:b1:dc:df:63:
d8:c9:15:92:90:7b:8e:44:1c:b2:4a:b3:cc:2e:e0:
a0:44:ac:65:91:69:eb:ac:98:a8:2e:0c:ef:80:83:
2c:c5:5e:73:c9:a0:aa:9a:b4:99:8d:a3:f5:d7:7c:
b8:bc:ef:1a:7b:18:e3:ff:13:69:cd:6d:41:8d:45:
73:5e:76:ec:88:54:c6:cd:30:26:aa:4b:f2:ae:59:
b9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:21:E3:78:91:70:86:2D:7C:63:5D:EE:B1:D8:CF:F5:B4:AE:FC:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B978C1D6B34B11EE9598EB7E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:25:a5:5d:b0:46:5b:bd:f8:dc:74:df:13:9d:b0:aa:5d:a9:
7c:ea:f9:a4:d4:26:9d:e9:80:83:dc:2e:5a:41:88:c1:2b:77:
ce:f6:05:bf:26:32:3d:26:95:5a:e3:a0:ec:e3:60:4a:be:0c:
21:45:12:d2:8a:7e:be:df:f9:09:d8:f0:35:53:15:b1:4c:07:
36:98:bf:ed:1b:23:37:c4:1c:0c:cf:7e:95:3f:58:e6:83:85:
40:f9:43:ba:18:4e:8d:78:e0:98:ef:56:cf:14:45:80:bd:2e:
d2:00:bd:17:8a:4e:99:7d:90:d8:0d:3e:87:5c:eb:bc:42:2b:
50:f5:47:e8:38:2a:d4:28:0c:f0:77:10:b8:ae:09:3e:54:ea:
a9:99:e6:2f:b8:32:3c:09:aa:8f:ca:aa:94:35:2e:9f:28:08:
0b:e1:68:43:6d:8b:b5:8c:83:df:5e:55:70:89:1f:62:90:f6:
00:45:9c:54:fc:5c:6d:6d:ae:f1:7e:65:67:c5:8c:f4:77:93:
78:4a:2a:44:25:b8:5d:b5:b5:e0:86:af:23:a3:fa:4d:89:24:
e4:3c:47:68:2b:d5:f5:89:69:db:69:45:90:d3:fe:45:73:9e:
4c:32:18:89:3a:a9:00:06:72:12:6c:63:a2:c2:87:4a:a9:5e:
31:40:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:22 2024 by rpki-client on console-fra.rpki-client.org