Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CB80A6014311EFB9B2C533017001B1.roa
File: F0CB80A6014311EFB9B2C533017001B1.roa (raw, json)
Hash identifier: rjc2BT1ZyWbtog3Gwhs/jM31HmbWR/izK5Df1Fa8ngc=
Subject key identifier: 2C:F8:13:A7:FB:70:E2:95:E2:B7:2B:0C:5A:7C:71:7C:06:56:CC:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AEF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CB80A6014311EFB9B2C533017001B1.roa
Signing time: Tue 23 Apr 2024 07:34:39 +0000
ROA not before: Tue 23 Apr 2024 07:34:35 +0000
ROA not after: Sat 11 May 2024 07:34:35 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44787 (0xaef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 07:34:35 2024 GMT
Not After : May 11 07:34:35 2024 GMT
Subject: CN=6627648f-8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:6b:0c:ce:1f:bc:eb:44:e0:ef:be:88:b7:
5a:1b:d0:6e:df:76:2b:bd:05:d4:fa:c5:f5:3c:e7:
7b:88:12:e0:17:e1:33:e1:fb:ff:73:f8:da:cd:c0:
e4:d1:86:f8:3b:17:2d:a8:7c:93:84:18:4b:38:ed:
b0:a3:68:98:0f:4a:07:df:9e:6d:0b:60:16:f8:e0:
75:64:f9:76:46:cc:7c:43:ea:24:49:88:5d:07:b4:
d8:12:38:a2:87:2b:91:c3:2e:78:fb:46:19:6a:c9:
f8:35:01:d3:ae:67:a5:4d:9c:ac:f3:2d:96:f0:bc:
cc:3f:8c:f1:77:b7:f4:11:92:c3:5b:c6:e4:d8:2e:
86:f2:75:9c:57:6c:a9:f6:cd:54:b4:4c:11:5c:5f:
17:cc:de:c3:6c:05:fb:46:03:d3:9c:a2:3b:1f:e4:
43:97:56:95:67:71:a0:07:82:61:1b:f8:1a:46:5c:
d0:7c:ef:f4:b9:f0:bf:b8:0a:3e:0d:f1:6e:9c:ce:
c9:96:d1:2d:25:4e:ed:a5:a6:59:66:03:2d:ff:f1:
44:07:85:3e:37:ad:4f:9f:e3:37:61:08:86:05:a5:
a9:97:a5:78:f4:a5:7a:2e:19:d0:cd:cb:9e:b2:70:
4f:56:1e:93:88:0c:b9:89:73:96:c7:3a:98:9e:4b:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F8:13:A7:FB:70:E2:95:E2:B7:2B:0C:5A:7C:71:7C:06:56:CC:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0CB80A6014311EFB9B2C533017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:9a:7a:e5:0d:46:28:72:7c:2a:b8:b9:15:12:30:3a:ea:6b:
f7:d4:e3:ad:86:4e:af:92:65:0c:26:cc:75:9b:60:29:48:ef:
da:a4:0d:e1:07:6a:bc:47:54:ff:82:a5:3c:cd:9e:05:4d:74:
6b:25:f2:cf:4b:b5:54:a0:ab:c0:29:44:84:64:19:42:2b:92:
1b:37:fc:81:a2:85:a8:6f:b5:74:24:09:4d:c3:7b:80:ed:0e:
f4:a6:53:9f:9d:95:d9:4e:98:6a:3f:0b:e1:2c:ee:71:cb:82:
a5:d1:5b:75:53:8c:49:b0:78:96:8c:8e:09:fc:22:2c:24:c5:
aa:09:bc:20:ce:91:b5:23:57:0a:ed:b9:37:b1:88:4c:86:28:
ba:60:53:82:aa:c4:5c:62:d4:ba:f6:b4:3a:e8:5b:ad:e4:f3:
c4:3f:79:09:f4:fc:36:b9:0c:b6:cb:8d:cc:60:32:3a:6d:12:
45:b9:72:55:db:e0:d3:66:b9:9d:4e:a9:77:5c:eb:be:e2:9b:
e4:d2:0b:00:05:71:55:52:ef:41:d1:b0:24:1f:1b:e5:8b:80:
31:fc:65:bd:86:de:54:58:62:80:2a:ac:f9:e3:74:bd:29:55:
25:a1:e7:bc:2f:d5:83:f1:c8:51:49:3f:5f:70:be:72:7e:c7:
8d:c6:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:45 2024 by rpki-client on console-fra.rpki-client.org