Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFE8D7E6DE8211EEBD3252C7775412E6.roa
File: CFE8D7E6DE8211EEBD3252C7775412E6.roa (raw, json)
Hash identifier: cj4r3vJgxVVZTMMuiOEZPBJkovd4FMinj93jNzRkG8g=
Subject key identifier: E7:3D:E4:F8:C2:D7:A3:2B:05:51:FA:DC:69:31:13:5F:40:28:08:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 9FFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFE8D7E6DE8211EEBD3252C7775412E6.roa
Signing time: Sun 10 Mar 2024 02:06:31 +0000
ROA not before: Sun 10 Mar 2024 02:06:28 +0000
ROA not after: Mon 13 May 2024 02:06:28 +0000
asID: 55020
IP address blocks: 154.91.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40956 (0x9ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 10 02:06:28 2024 GMT
Not After : May 13 02:06:28 2024 GMT
Subject: CN=65ed15a7-68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:1e:27:35:4e:37:c2:a8:27:aa:11:23:50:
86:ee:d6:9c:58:fb:f2:cd:85:e8:66:3d:31:70:c0:
2f:64:7e:f2:96:1d:38:84:7a:65:f7:f1:3c:bc:b2:
48:5d:02:0d:54:7c:38:0e:66:98:21:1e:fb:3e:d0:
01:ea:d3:c6:08:36:94:66:0f:21:e7:82:30:6c:b4:
51:95:f2:32:ae:dc:55:65:23:99:fe:89:3a:5f:db:
2b:d3:9a:8c:cd:e0:43:62:05:cc:e3:47:73:fd:c2:
15:dd:bf:27:69:a9:3e:9c:92:8f:4f:60:3d:16:65:
c1:fb:fb:2c:29:8d:26:6f:13:3c:9c:9b:d1:b9:36:
84:eb:fe:f5:99:4a:af:d1:70:e5:12:da:e8:91:fa:
04:c7:cd:69:e2:d9:f6:a2:cb:ed:92:ae:08:4f:3a:
0d:a9:ae:de:bb:cd:de:ab:4b:0f:e9:f9:48:62:02:
37:ab:33:02:7d:ce:bf:8f:b8:d5:f2:41:2a:f3:c7:
20:b7:17:11:15:47:7a:c8:aa:b0:28:70:c8:a0:b7:
99:c4:00:10:32:35:3c:40:04:d5:e8:88:8d:1d:2c:
6a:39:02:8b:f8:aa:51:b8:ab:47:aa:7c:e5:0c:0d:
4a:80:4a:9b:d2:ac:36:43:21:15:cb:b6:cf:25:cf:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:E4:F8:C2:D7:A3:2B:05:51:FA:DC:69:31:13:5F:40:28:08:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFE8D7E6DE8211EEBD3252C7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.176.0/21
Signature Algorithm: sha256WithRSAEncryption
97:2d:bc:1d:b1:9c:d3:b0:ff:52:ff:cf:27:f6:f6:14:71:90:
8f:73:69:98:c7:9f:55:ce:b1:6b:ff:01:5c:06:6f:dd:00:43:
de:3d:31:57:55:f1:a4:76:98:9f:1b:81:69:93:aa:50:a2:2b:
14:5b:1c:c3:73:68:d1:ef:17:b4:3f:c6:72:01:1d:37:37:bb:
e3:f7:f7:9e:90:db:14:79:a8:6f:a7:6f:ac:83:4c:53:af:47:
5b:d5:03:c5:fe:3a:76:e2:2d:37:bd:28:45:3a:14:0c:b9:ef:
0b:4a:ac:9e:ef:a5:08:8f:7e:bf:a8:dc:4e:b0:21:a8:b6:11:
03:62:1f:d7:c0:02:fd:d2:26:5d:06:ba:c2:6e:21:a1:17:dc:
b2:e1:8e:bd:1a:f8:ec:de:1f:8b:ff:4b:23:e9:28:d3:a7:59:
03:11:5f:9e:1f:f5:f2:1d:cb:79:a2:8b:4b:43:e0:f9:96:3b:
31:6e:f1:58:cb:ea:70:e5:92:28:e3:ad:48:a6:d9:55:84:d7:
07:e8:21:f2:ad:1e:d1:61:d8:64:bc:fa:ea:8f:45:6c:2d:bd:
16:31:ad:a0:c8:af:cd:00:ef:e6:97:e0:59:dc:6a:a1:8f:c5:
eb:1a:3e:5d:0c:f7:2b:80:9f:ff:57:06:b0:b2:d9:cc:21:cf:
15:18:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:21 2024 by rpki-client on console-ams.rpki-client.org