Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5992C84671011EE8A4A944F4AD9E6FC.roa
File: D5992C84671011EE8A4A944F4AD9E6FC.roa (raw, json)
Hash identifier: b3j2x2SLcb4wVY7i014EqocqgbFYvw/egvODRvzzM4o=
Subject key identifier: 2F:51:C2:EB:05:BF:A5:69:9A:41:F9:49:7D:55:81:3B:76:96:05:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4551
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5992C84671011EE8A4A944F4AD9E6FC.roa
Signing time: Tue 10 Oct 2023 02:00:50 +0000
ROA not before: Tue 10 Oct 2023 02:00:46 +0000
ROA not after: Sat 28 Sep 2024 02:00:46 +0000
asID: 212238
IP address blocks: 154.207.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17745 (0x4551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 10 02:00:46 2023 GMT
Not After : Sep 28 02:00:46 2024 GMT
Subject: CN=6524b051-f6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:6b:7d:71:72:8c:ed:89:52:5e:06:3f:23:
73:5d:52:ff:8a:7b:ee:17:1b:2f:47:a1:bf:36:49:
87:e9:4a:94:63:27:67:d5:43:d5:8d:5b:b0:56:ea:
ff:5d:9c:aa:31:03:ca:ad:7a:39:e8:18:ff:57:a4:
66:0a:f0:fb:7e:76:2f:51:d3:71:88:6f:73:13:9a:
9d:95:a2:c8:a9:81:1e:54:a3:7c:fb:77:56:28:88:
28:b7:13:13:c6:19:cc:1b:e1:9b:ee:bb:ed:cc:e9:
09:6e:4e:dd:34:11:dc:0d:17:c8:82:f3:97:b5:75:
80:59:d1:f5:1b:29:d5:0e:61:10:97:4a:5f:c8:b8:
35:32:17:70:b7:e3:c9:f5:ec:eb:78:4a:eb:af:5f:
1e:e4:ca:06:d7:69:73:55:3e:12:1a:8b:9c:50:73:
ce:83:dc:85:47:cc:ac:fa:5a:20:56:10:c7:7b:0f:
2d:d8:09:6d:22:3e:40:37:98:40:da:f3:65:9f:8b:
b1:8f:02:79:03:18:dd:6d:7f:5e:4b:5b:63:da:aa:
da:b9:e3:f0:ef:ef:b0:06:ec:75:0e:ad:13:46:c3:
12:4a:15:d8:da:17:8e:75:23:0b:91:02:c0:26:fc:
7c:d0:57:59:28:74:cb:0e:d9:6e:7d:10:d5:16:47:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:51:C2:EB:05:BF:A5:69:9A:41:F9:49:7D:55:81:3B:76:96:05:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5992C84671011EE8A4A944F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.144.0/20
Signature Algorithm: sha256WithRSAEncryption
c1:c0:2c:ef:11:79:05:3f:68:0a:d1:6a:bd:88:12:6f:43:b5:
db:05:33:a3:19:6e:48:af:35:38:a9:96:38:97:e8:ef:5a:69:
93:5c:36:63:36:09:dd:fa:87:14:b4:4a:40:e2:77:cc:c2:1a:
f9:13:90:da:82:f1:f5:ab:f1:db:93:69:65:14:f6:50:27:71:
63:7a:97:92:33:4c:90:57:f0:b9:70:5d:f1:8c:df:27:40:84:
ab:46:d2:83:79:2f:a2:2e:85:c4:27:12:d6:69:b7:bc:d9:6d:
d1:b9:da:4d:d6:50:02:54:99:3f:38:09:3b:ce:f4:e5:8d:85:
12:e1:29:0a:e1:0a:b3:47:dd:a9:51:4d:a5:7a:1c:f5:ba:6c:
d6:3a:57:d1:97:6c:2b:1d:c4:36:92:60:69:73:06:8b:e5:e4:
7d:05:a3:a9:b7:b6:7c:61:6f:27:12:f8:e4:36:77:d1:8f:a9:
0d:a7:a1:83:18:9d:6c:a5:80:be:ac:03:d4:b1:fb:fd:75:e5:
1d:cd:c1:2c:cd:ef:d5:34:f4:20:19:be:a5:79:dd:a7:1f:58:
41:35:74:b1:67:37:06:5c:52:78:dc:ec:c2:e8:58:f4:ba:b7:
6e:a1:41:88:80:a7:cb:0c:6e:7b:f9:68:e8:4e:8d:db:71:de:
4c:87:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:55 2024 by rpki-client on console-ams.rpki-client.org