Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB4DBEECAE1F11EEBD5750A2775412E6.roa
File: CB4DBEECAE1F11EEBD5750A2775412E6.roa (raw, json)
Hash identifier: 6UDjk31ZVGRMpfMkdi6OBcEYQv41EQyO+9dCzisHk6Q=
Subject key identifier: CD:C8:10:EE:FB:22:DE:72:E4:28:7D:E2:5D:1B:7E:AD:A4:D6:A0:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 72CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB4DBEECAE1F11EEBD5750A2775412E6.roa
Signing time: Mon 08 Jan 2024 12:16:48 +0000
ROA not before: Mon 08 Jan 2024 12:16:44 +0000
ROA not after: Tue 14 Jan 2025 12:16:44 +0000
asID: 138965
IP address blocks: 154.222.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29390 (0x72ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 8 12:16:44 2024 GMT
Not After : Jan 14 12:16:44 2025 GMT
Subject: CN=659be7af-8c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:e9:d0:e9:b5:43:a1:39:7c:81:85:dc:22:
3d:8e:29:57:cc:36:28:b9:53:83:dc:f6:12:47:e0:
42:e8:43:08:81:72:78:96:2a:fc:ab:03:04:2d:55:
70:18:2e:69:88:6b:66:38:43:44:7a:4a:4e:87:bd:
32:ac:56:a3:ea:d8:1e:23:29:67:c4:24:9b:8a:5b:
db:9c:cb:c1:08:2b:36:32:78:c2:8d:d9:ed:51:06:
dd:92:e0:c2:19:6d:e3:b5:ad:4e:1f:fb:ee:57:f7:
1c:eb:e2:a9:f8:9c:1d:51:f0:ae:11:97:27:9c:47:
d3:e0:44:37:ed:dd:8a:c2:f1:a2:7f:75:02:7b:21:
7c:51:7e:45:45:e4:03:86:41:6b:de:31:2b:02:4f:
c4:44:8c:43:58:d8:b8:33:ca:90:51:5e:ba:ae:0a:
f4:3f:20:ba:ef:74:b4:63:9e:a0:c8:ba:93:8e:89:
32:fd:ca:2f:95:7f:9c:61:80:4f:9f:87:f4:2a:e2:
13:21:ad:1d:9c:d8:ae:f8:bc:40:cc:7d:7a:2b:29:
0f:34:7e:b3:6b:6b:ee:b2:16:ea:a7:99:cd:62:b2:
01:5d:6e:2a:8f:c3:11:da:5a:89:8e:aa:07:f5:ee:
23:c8:f5:71:24:08:c7:2f:c4:8c:44:b9:33:9a:ec:
57:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:10:EE:FB:22:DE:72:E4:28:7D:E2:5D:1B:7E:AD:A4:D6:A0:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB4DBEECAE1F11EEBD5750A2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:72:0d:e4:08:45:4a:69:2f:82:21:a4:96:f7:2b:db:0e:c6:
a6:87:79:48:0e:c2:d7:34:87:52:64:8f:ee:45:7a:fe:1a:73:
6a:8e:5f:bc:d0:44:09:07:36:71:71:e0:5f:66:78:3e:73:34:
27:9e:f4:5a:8f:76:69:85:90:3b:ed:05:cf:07:64:64:99:82:
3a:51:08:45:72:1f:b5:13:de:55:95:53:be:6d:ce:1c:e5:26:
fe:14:29:95:27:f5:72:e8:49:dc:f4:94:52:4a:b1:ff:06:77:
e7:28:85:b6:b5:56:4b:e1:38:f2:b1:8c:41:23:a9:f5:8c:49:
a2:80:28:11:00:19:74:f3:39:59:88:24:57:c8:b3:ab:8e:bb:
4a:3a:5f:e5:d2:fd:a8:91:d6:08:15:71:16:64:17:e4:71:83:
6e:14:f8:ca:b0:b7:22:fb:b7:8a:d7:4f:0b:a0:b2:1f:73:3c:
24:9e:d6:dd:6f:d2:7a:44:88:eb:fc:da:03:47:51:3a:36:95:
46:79:69:5c:67:66:47:7e:a6:c1:24:ed:4c:8e:eb:b0:90:aa:
14:df:ad:a8:52:9e:1c:fc:dd:d2:33:b9:b1:0e:75:6c:36:39:
69:be:3c:7a:0a:fb:8c:3d:b8:1f:07:68:c4:1f:90:59:ee:b9:
0e:8a:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:38 2024 by rpki-client on console-fra.rpki-client.org