Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC0E43DE53A111EEAB696B654AD9E6FC.roa
File: CC0E43DE53A111EEAB696B654AD9E6FC.roa (raw, json)
Hash identifier: F15Xci8c9oxSkanTVojWjCUZSWhdHyT5gFWGN9lYo2U=
Subject key identifier: D4:DB:19:65:04:2C:84:3A:FE:96:B0:50:07:53:A8:26:07:F4:AA:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 3D95
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC0E43DE53A111EEAB696B654AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:28:07 +0000
ROA not before: Fri 15 Sep 2023 08:28:04 +0000
ROA not after: Sat 08 Jun 2024 08:28:04 +0000
asID: 142403
IP address blocks: 154.221.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15765 (0x3d95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Sep 15 08:28:04 2023 GMT
Not After : Jun 8 08:28:04 2024 GMT
Subject: CN=65041597-5686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:39:9c:8f:91:fd:80:92:ea:e4:cb:9d:72:
0d:cd:5f:f5:8c:25:e9:4d:00:e4:55:02:1e:13:17:
81:f4:17:ad:ca:88:77:61:66:49:d2:9f:10:40:27:
bb:be:fd:33:1b:56:55:aa:80:dc:14:a7:6d:1d:84:
34:3d:7f:8a:a6:88:e1:5a:d4:80:db:eb:42:da:77:
08:be:0a:ac:d3:dd:1a:b2:c8:64:9c:e3:16:64:55:
f0:cf:a6:55:1d:fd:ca:84:56:5a:03:ee:de:04:77:
65:82:7d:31:52:f0:aa:a0:5b:15:b1:02:5a:c3:6b:
6a:56:47:ca:13:46:0b:ee:b5:29:58:22:3e:3c:43:
1a:58:a7:b7:48:80:cd:78:39:6e:4e:75:07:c0:fb:
49:e4:85:35:b0:35:2e:00:0a:74:9e:1d:f8:6a:4a:
37:cf:3e:4f:b1:2f:e6:1a:ea:f2:9e:de:47:ad:04:
30:c3:cf:be:d8:f2:a6:f3:64:53:c2:c8:74:d0:19:
67:f2:fe:88:da:46:57:bf:20:f6:b2:0d:2a:c8:b5:
f4:1f:cb:97:9d:54:d0:ab:e6:af:b6:87:42:de:3c:
a9:f9:87:0b:62:fe:0d:19:87:c0:df:c3:43:e9:84:
24:d7:d7:0b:87:82:b2:4d:29:8d:ba:11:88:85:76:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:19:65:04:2C:84:3A:FE:96:B0:50:07:53:A8:26:07:F4:AA:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC0E43DE53A111EEAB696B654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:04:e3:ee:a1:a8:91:8c:29:dc:14:04:3a:3d:a6:6c:f3:13:
d0:f2:86:ce:d2:51:79:2f:40:67:fa:d6:3a:d4:c1:a3:c4:7c:
af:81:aa:c6:f7:8b:ea:ca:f8:72:f3:1d:63:89:22:a0:ec:25:
97:e2:c3:42:80:96:aa:1b:c0:a0:84:21:1a:2c:aa:ba:a3:5c:
cb:50:89:c7:79:ae:3a:61:e1:57:72:82:01:e1:20:ee:63:61:
25:af:f0:97:a4:9a:f8:36:f2:af:0c:3d:42:14:25:3e:4d:1a:
56:1c:30:b9:c1:14:c1:9c:9d:0e:81:54:d5:19:d7:14:8e:6c:
52:f3:f3:27:ca:ac:68:02:d2:69:fc:f3:60:30:7c:14:56:16:
e7:c0:b8:ed:73:09:ce:9c:54:88:41:ff:77:ca:b8:6d:00:4e:
7d:3f:70:49:12:dd:db:69:93:dc:36:94:89:de:37:0e:78:6b:
de:a3:6d:0a:18:79:0c:34:ec:49:a4:74:cd:f1:a4:e8:d6:18:
45:82:5a:8f:26:0d:f9:49:5d:5c:a4:92:ae:f3:a1:1b:f3:b6:
8f:4f:cc:4c:ef:ce:b6:7e:49:72:eb:4f:2e:1c:f4:34:61:48:
02:40:81:4a:8b:d1:f6:1f:e3:eb:71:17:19:db:15:66:12:6c:
4a:dd:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:20 2024 by rpki-client on console-ams.rpki-client.org