Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA8F8DE0062C11EFBA13EB3A017001B1.roa
File: CA8F8DE0062C11EFBA13EB3A017001B1.roa (raw, json)
Hash identifier: 9dIF9w1sWD04xp/gxTVPozP0lhq+L1x2T9xzlydmB2E=
Subject key identifier: C5:F2:A5:FF:49:5B:F8:0C:FE:58:6B:F3:30:E6:DF:0D:50:5F:CD:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B278
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA8F8DE0062C11EFBA13EB3A017001B1.roa
Signing time: Mon 29 Apr 2024 13:31:32 +0000
ROA not before: Mon 29 Apr 2024 13:31:28 +0000
ROA not after: Fri 07 Jun 2024 13:31:28 +0000
asID: 138915
IP address blocks: 154.223.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45688 (0xb278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 29 13:31:28 2024 GMT
Not After : Jun 7 13:31:28 2024 GMT
Subject: CN=662fa134-0012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:a8:d7:03:30:22:c7:d7:43:0a:1e:d9:e6:
20:b7:a6:08:89:78:ef:02:04:48:e0:0a:60:52:bf:
bc:43:04:64:22:eb:2a:f1:cb:6c:78:8d:fc:ab:dc:
06:d9:3c:cb:e7:b2:c9:1f:eb:de:bb:bf:f4:5a:d0:
b6:f4:3b:65:71:aa:6d:13:a8:2e:87:51:b4:de:26:
8a:48:a5:68:cc:d9:5f:c4:d8:56:43:e4:0c:8f:a1:
02:4f:a7:06:25:84:a6:59:d0:52:a0:86:89:a9:7d:
f4:1b:ff:57:00:63:67:b9:19:44:03:48:46:fe:ac:
03:b9:f8:7c:2b:4a:a3:f3:4a:b1:ae:54:25:fe:d5:
e4:0f:64:38:66:6f:7c:ec:c1:32:02:13:c2:7f:6a:
5b:9e:e0:9c:8b:fc:02:12:ba:16:b9:ba:4e:d3:53:
11:f1:65:a6:6b:93:40:0e:f5:b7:46:91:01:92:12:
5a:ba:0d:d3:5f:7c:3f:61:f0:6b:58:af:7e:db:aa:
a1:7c:dd:1b:1b:49:13:1b:39:eb:12:44:2f:ef:67:
ae:3b:a0:06:e8:f6:18:43:f0:8f:96:f6:26:da:4e:
ac:c8:94:31:65:f9:86:1e:dc:84:9d:df:06:ea:87:
18:70:6a:5a:dc:06:66:18:b8:b7:a4:18:ab:2d:fe:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:A5:FF:49:5B:F8:0C:FE:58:6B:F3:30:E6:DF:0D:50:5F:CD:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA8F8DE0062C11EFBA13EB3A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d2:0c:02:28:99:12:c6:70:d2:78:18:8b:1f:ef:80:76:62:
20:dc:64:79:d9:f6:bf:53:ea:b5:01:5e:7b:28:b7:d6:b3:d6:
79:73:eb:78:49:d3:fb:8d:bc:b7:ca:27:b6:03:31:ed:73:16:
3a:64:d8:56:17:32:08:94:7e:28:91:a5:59:3a:b9:10:21:81:
8b:a4:4b:c0:a0:de:04:c9:79:77:20:28:4a:08:96:74:db:7e:
8b:93:5c:5e:09:02:0b:a9:6b:90:2e:7f:04:02:7d:53:2f:02:
3e:4b:d5:ce:c4:fa:bc:1c:e8:ee:f1:ef:c3:c7:6e:49:e0:01:
2c:e7:61:98:19:72:7a:10:f8:f7:35:e8:24:cc:25:5b:2a:1b:
0b:0c:37:ac:b1:a8:da:33:d3:52:d8:38:81:55:dc:64:00:7c:
a8:02:f7:07:f2:24:bb:7b:f7:af:9a:88:d0:90:ee:29:72:c6:
56:9d:a5:73:75:05:eb:6c:36:de:18:20:87:0b:ea:38:c4:5a:
ce:fb:05:a5:13:67:b0:17:ff:84:47:52:3e:9f:6d:31:be:c8:
33:20:83:7a:90:b4:45:e2:ad:cc:c8:2a:85:46:53:9c:26:23:
70:f0:e9:35:f5:51:09:71:2f:93:3a:74:49:e3:c4:52:e7:cb:
2b:50:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:07 2024 by rpki-client on console-fra.rpki-client.org