Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEC66ACEFF211EE99FD7FA3775412E6.roa
File: FFEC66ACEFF211EE99FD7FA3775412E6.roa (raw, json)
Hash identifier: 2sY0p3awKlxehq1sIAvMMQwZ+WDLnPGzwcikKr/H1zE=
Subject key identifier: BD:0D:EC:8D:44:78:A0:48:E5:E4:F7:B3:06:FE:F1:3C:77:6D:41:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A7D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEC66ACEFF211EE99FD7FA3775412E6.roa
Signing time: Mon 01 Apr 2024 06:42:25 +0000
ROA not before: Mon 01 Apr 2024 06:42:22 +0000
ROA not after: Tue 07 May 2024 06:42:22 +0000
asID: 138915
IP address blocks: 154.223.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42964 (0xa7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 06:42:22 2024 GMT
Not After : May 7 06:42:22 2024 GMT
Subject: CN=660a5751-e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:18:99:77:3b:7e:2f:de:7f:bf:3a:59:a8:
b3:3b:74:36:c7:dd:de:6d:c1:f1:d2:32:94:e8:f2:
b9:6b:b1:80:f6:43:8e:7a:bb:ad:c2:f2:c8:35:75:
14:2e:06:44:0b:4a:5e:50:3b:ea:c3:ac:b7:55:b6:
c3:f9:25:34:6f:07:cd:fd:59:62:99:7d:2b:61:42:
c0:9d:22:16:a2:4c:fa:14:75:6e:b0:61:ed:cd:f6:
e6:7b:c8:b4:79:56:1a:2c:6c:a5:ef:f9:63:cc:9b:
ed:82:8b:98:af:c1:75:13:11:53:9d:05:3c:bf:5b:
8c:ca:c8:74:c8:27:26:4c:bf:bb:45:b6:0f:4a:9c:
64:de:c5:e1:72:4d:ac:57:80:b4:2c:13:e7:c2:09:
55:61:16:b7:0f:50:d3:53:73:82:b0:a4:bd:3b:7e:
2f:3c:05:fa:84:8d:a6:e8:84:22:f5:60:7f:59:92:
f7:32:f4:8f:7d:bf:cf:fa:e6:a3:ca:79:2f:f1:ca:
50:d9:f6:df:f3:de:d8:7c:d7:ff:a5:1d:18:ff:fa:
60:90:53:b4:90:55:7d:e4:36:0b:f5:36:43:20:11:
c0:23:af:2b:96:33:3c:7e:bd:71:1e:cd:d9:92:61:
82:dd:0b:62:85:b0:bd:50:81:5d:0d:ad:af:18:7e:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:EC:8D:44:78:A0:48:E5:E4:F7:B3:06:FE:F1:3C:77:6D:41:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FFEC66ACEFF211EE99FD7FA3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.17.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b3:56:98:63:36:41:2b:fd:6d:76:ae:78:69:56:53:f8:98:
a2:e6:a4:f5:04:66:3e:fa:92:34:80:de:5b:d9:d5:1b:7a:99:
ae:2c:07:a3:23:a5:bd:c0:d8:17:cd:6a:2b:d3:e6:91:9c:65:
f9:93:f2:1f:66:eb:ab:06:24:a6:84:f9:2c:9a:e8:f4:c2:cd:
1e:46:2a:e8:6a:c3:02:5a:51:59:9b:c5:fc:a9:e3:c2:e3:28:
f5:39:74:46:80:70:f3:b1:ee:c3:24:ba:35:84:5c:dc:59:60:
7c:c6:e0:c5:1b:d8:bc:f3:9e:33:fd:c2:77:4b:a9:47:7d:6b:
39:22:f3:62:2b:a5:20:51:13:57:45:e6:72:0c:ae:68:62:26:
6d:d2:fb:14:39:40:67:ee:32:96:5c:f0:eb:f2:84:d1:ff:13:
38:6e:8b:2b:4e:b3:3c:64:9f:30:68:32:05:64:58:a1:ee:37:
09:4f:b7:cf:c3:a2:6f:3d:48:ba:b7:d0:f7:37:fb:8a:46:d4:
05:01:e0:b7:48:99:9b:c2:ff:ff:5f:34:6f:af:48:88:3a:ab:
1f:a4:71:61:fb:f6:df:a9:e3:50:42:43:6b:f7:eb:8a:2a:ae:
51:33:57:78:6d:73:b7:aa:a4:4a:86:d9:0f:8f:27:80:62:f3:
65:1d:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:44 2024 by rpki-client on console-fra.rpki-client.org