Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C238BF2A84F611EE9C4266514AD9E6FC.roa
File: C238BF2A84F611EE9C4266514AD9E6FC.roa (raw, json)
Hash identifier: 3NhWuV5FJ81Gck3MGdGfT1QVIGZgPPDBCS0NSTSUSSM=
Subject key identifier: D3:47:9E:A9:E3:CA:CC:FE:A5:13:15:F0:F4:02:8A:54:4C:06:9C:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 5067
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C238BF2A84F611EE9C4266514AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:09:45 +0000
ROA not before: Fri 17 Nov 2023 03:09:42 +0000
ROA not after: Tue 12 Nov 2024 03:09:42 +0000
asID: 54252
IP address blocks: 154.201.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20583 (0x5067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 03:09:42 2023 GMT
Not After : Nov 12 03:09:42 2024 GMT
Subject: CN=6556d979-b973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:0b:46:d1:90:f9:cd:b0:e0:bb:ae:c1:0d:
76:9a:5f:8a:b8:59:8f:05:63:f6:00:f1:b3:cd:3a:
25:1d:c3:b2:28:03:7d:84:b7:be:c6:a4:08:57:0d:
c9:84:4e:61:08:d5:58:9b:8e:5c:da:fe:31:04:06:
f2:d2:a5:20:6e:70:eb:95:a0:38:a5:70:74:54:b1:
c2:23:d2:75:00:8a:f8:8a:0f:1b:80:0e:de:4b:96:
b6:19:11:17:61:fe:44:03:b4:2f:80:b3:14:b5:99:
b6:cc:39:42:df:fb:0d:a2:b5:c0:73:c5:08:87:46:
3e:ab:38:9a:40:e2:08:5d:77:0d:3b:41:78:c4:0b:
93:7d:eb:c8:7c:8f:cf:98:d6:33:52:30:65:e1:04:
49:ea:b1:a0:d2:90:cb:59:dd:91:68:60:80:10:37:
0a:d1:37:cd:b6:01:b8:29:6e:a0:5c:8d:61:c8:c8:
b4:03:18:19:2b:7b:dd:53:37:8b:d7:63:3b:f2:a9:
58:1c:d4:bf:a4:68:69:42:06:f3:b6:3e:74:7a:d9:
1c:11:fe:7e:c5:29:7d:cb:cf:08:51:64:dc:94:f3:
26:67:a5:13:b2:a7:2c:4e:6a:da:d6:5e:5f:97:02:
b5:4b:bc:f8:97:62:94:ef:23:ca:b1:d8:fc:78:16:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:47:9E:A9:E3:CA:CC:FE:A5:13:15:F0:F4:02:8A:54:4C:06:9C:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C238BF2A84F611EE9C4266514AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0f:e9:b2:a8:9d:75:2e:6a:6b:ce:1d:0d:2a:1b:4e:fa:c6:
f2:7d:87:76:c7:93:42:37:f7:e3:a9:2e:4c:2c:5f:e1:72:6b:
4d:35:da:7c:d0:ea:7a:59:47:09:76:f3:9b:39:d6:b1:93:5f:
63:ee:fb:9e:48:6c:4c:aa:85:9d:c9:13:c6:1a:36:bd:c9:ca:
56:1e:fc:bb:53:1a:eb:b4:3e:04:48:cb:f4:20:e7:37:9c:7e:
f8:e7:a0:9c:1d:58:ea:42:f8:18:46:8c:80:ba:ab:a8:82:58:
c3:be:c0:c4:6b:fa:45:52:1f:30:b0:2d:d8:83:d3:5c:32:07:
3a:d0:18:1e:33:93:9f:90:6d:f5:a3:94:f5:93:1f:3e:6f:9d:
a0:cc:9c:33:64:44:ef:ed:f5:6c:56:2d:87:b6:8f:3b:7d:0a:
ca:cd:fe:00:52:03:16:79:88:7f:c3:86:2c:4b:d6:13:95:cb:
ef:d5:9b:f3:9d:74:f8:70:e0:39:3e:c7:dd:e5:3f:f8:92:76:
69:ec:60:3b:a0:2a:56:c5:87:e0:cc:d1:df:7e:ec:13:36:91:
65:ec:25:4c:1b:25:25:58:f1:0f:7e:bb:4f:c9:51:5d:a7:06:
2d:63:63:2d:d6:05:e9:3a:ec:43:74:55:68:dc:09:3d:73:f7:
da:c0:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:28 2024 by rpki-client on console-ams.rpki-client.org