Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C71FFB5E277F11EE85D2FE164AD9E6FC.roa
File: C71FFB5E277F11EE85D2FE164AD9E6FC.roa (raw, json)
Hash identifier: bpeERcXZ8MVonsLuocTerhK/574xPHlY0XFrp2nRf/A=
Subject key identifier: DD:6B:2B:FF:4B:74:CA:40:58:73:D2:00:F3:A1:34:B2:EB:08:0E:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 337F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C71FFB5E277F11EE85D2FE164AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:33:45 +0000
ROA not before: Fri 21 Jul 2023 04:33:41 +0000
ROA not after: Thu 13 Jun 2024 04:33:41 +0000
asID: 22773
IP address blocks: 154.84.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13183 (0x337f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:33:41 2023 GMT
Not After : Jun 13 04:33:41 2024 GMT
Subject: CN=64ba0aa9-2203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:d6:a6:0a:a6:e1:1d:b8:00:3b:28:34:f1:
ec:97:d7:2a:4a:3b:f0:ea:95:96:a8:fd:83:48:02:
dc:69:f3:fe:0b:05:16:59:15:8d:3d:a8:67:20:b1:
a3:53:61:ba:d7:76:bb:9c:10:1d:8d:96:f0:43:b2:
5b:12:aa:b3:43:48:f4:bc:1f:74:2f:8e:fe:0f:71:
d0:39:b5:02:39:58:78:e4:31:4f:b8:24:60:27:08:
e6:ea:c4:79:a5:4e:f4:c2:58:b2:0a:4f:33:c7:eb:
73:87:99:62:66:21:ea:da:27:24:e4:e3:a9:96:2a:
71:d5:98:29:7c:65:0b:7f:f7:07:32:63:ce:4f:63:
ef:02:8a:c1:99:0c:a7:a3:ca:aa:38:9e:c0:ca:3f:
f7:a4:45:25:4b:25:83:c3:97:26:f2:d2:b8:de:f6:
fe:d3:28:d0:54:9f:f7:57:5f:6c:c3:3d:45:99:14:
55:ec:e9:57:7f:31:30:6a:e9:7e:44:e9:4d:ae:eb:
65:2a:6e:9b:0e:49:15:40:72:fc:1b:f8:66:19:81:
3d:e4:5a:3f:a1:a9:dc:5b:60:76:87:c7:a9:12:50:
f8:d5:47:9e:35:19:c2:d2:e3:db:74:83:b5:3b:42:
b1:a6:7c:eb:a6:cd:d7:72:2a:be:50:a2:ae:56:95:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:2B:FF:4B:74:CA:40:58:73:D2:00:F3:A1:34:B2:EB:08:0E:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C71FFB5E277F11EE85D2FE164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:9d:71:3f:01:6b:bb:05:07:60:da:b5:1a:bc:e7:ef:fa:10:
89:9f:3a:a5:7f:2a:cd:db:26:7e:42:b3:19:23:48:08:11:5b:
f9:64:80:52:78:8d:8b:f2:29:0f:33:e0:a3:07:81:2c:1a:d5:
ac:8b:fe:d2:a6:34:34:9f:9e:4e:ae:f6:b6:23:b0:be:da:51:
f7:c9:15:6f:58:39:51:74:9b:41:4c:ad:de:c8:0e:5b:98:17:
84:e4:f5:7e:3a:71:29:25:df:03:d6:16:5a:81:f3:2e:23:1f:
ac:b2:ac:b2:a4:fe:c4:5b:65:5c:d1:af:25:c1:c7:ad:ad:a7:
f4:06:58:44:cf:ac:5e:fa:13:2b:16:fe:5c:8a:56:2e:1f:e1:
6b:91:d1:c5:f7:b7:bf:b3:1a:f9:a3:14:5d:11:ff:fa:d0:77:
35:73:6f:c2:80:fc:2f:3e:21:ee:14:b1:dc:2a:0e:94:61:9e:
c2:58:42:cb:90:07:43:c5:3f:d9:a3:d0:f9:44:83:2f:06:b7:
eb:88:d2:7b:98:7f:2f:91:73:89:88:f4:4b:d4:70:31:6b:45:
1b:05:31:bd:fa:80:31:dc:1b:f8:0c:64:68:d6:63:da:1a:4d:
83:d1:82:4e:cd:c1:19:4f:1b:bb:79:0a:10:07:75:aa:62:ae:
5a:92:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:38 2024 by rpki-client on console-fra.rpki-client.org