Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08828074014D11EF8A74D9FE007001B1.roa
File: 08828074014D11EF8A74D9FE007001B1.roa (raw, json)
Hash identifier: QMIQpN8S66krdGcxodJbAffub1dLr00CaVZo1meaPLA=
Subject key identifier: 19:89:E5:93:54:92:05:04:40:21:05:21:2D:F1:43:FA:12:F7:FD:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: AF27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08828074014D11EF8A74D9FE007001B1.roa
Signing time: Tue 23 Apr 2024 08:39:44 +0000
ROA not before: Tue 23 Apr 2024 08:39:40 +0000
ROA not after: Sun 26 May 2024 08:39:40 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44839 (0xaf27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 23 08:39:40 2024 GMT
Not After : May 26 08:39:40 2024 GMT
Subject: CN=662773d0-aae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:28:50:32:8d:e5:e4:41:89:ef:c3:8e:bd:
9a:d1:1f:10:4f:13:31:97:98:7f:21:1d:0d:a8:99:
f7:52:21:4d:ff:e5:d7:52:59:a3:f5:9c:35:23:2a:
13:e2:9e:c5:71:c2:be:6a:c3:6a:f3:64:1e:01:68:
e4:5d:bf:f4:54:43:89:11:00:53:0a:b7:78:bd:ee:
ff:17:c7:6f:36:a7:2d:e0:3d:25:53:15:92:d7:69:
c9:ad:ea:02:0c:bb:b1:18:84:51:6a:82:94:82:0f:
4d:0b:1f:05:38:90:c2:fd:cd:18:b4:bd:86:c7:07:
94:ee:85:a1:64:d3:e6:03:23:e3:37:3d:df:67:d7:
cb:8a:b8:91:e2:aa:87:e4:e3:f9:42:90:22:31:d2:
bc:32:81:3d:76:1f:2c:1a:bb:bd:99:1f:31:0e:dc:
b4:15:e2:ad:d4:4e:ac:db:77:6d:c1:bb:71:e5:ef:
0f:54:56:67:f1:84:30:27:73:e5:15:f7:6a:02:e5:
ff:de:f7:1f:5d:82:cd:2e:39:96:cf:2f:f8:c8:6e:
63:47:4d:a5:f4:b3:8f:e4:2d:81:63:0b:d7:f1:87:
78:ce:ec:17:fe:1b:19:c9:19:c6:f4:64:31:82:6c:
8d:d5:5e:58:3f:d0:38:f4:a9:6f:0c:d3:a9:13:da:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:89:E5:93:54:92:05:04:40:21:05:21:2D:F1:43:FA:12:F7:FD:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08828074014D11EF8A74D9FE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
66:f1:ec:50:7d:ed:3a:a6:f6:a3:b0:b7:34:81:60:60:2f:b7:
f0:d4:ae:b5:a5:ed:6e:26:d9:7b:8f:20:3a:14:d6:37:36:f6:
64:33:47:ba:a8:1e:39:85:73:83:12:ea:79:1c:0c:41:16:b3:
f7:00:36:73:e8:21:62:b3:60:06:dc:c7:23:8b:db:a5:0d:d4:
65:95:42:de:8d:df:cc:68:3a:49:20:43:42:39:13:99:cc:53:
55:6d:30:93:92:dd:31:dc:38:a8:29:90:f4:1d:c8:5e:88:15:
22:6a:46:c8:9e:35:9b:19:ab:69:5b:65:a0:18:a7:39:3e:4e:
a0:93:f0:c8:01:6f:7a:3b:f5:15:af:95:77:52:6a:68:b9:0e:
a5:cf:d9:ae:93:0c:cb:db:21:7b:27:c0:25:45:2a:27:65:b9:
36:86:29:b1:66:80:e9:a4:83:0a:21:0f:0a:56:76:dd:95:4d:
5e:1e:cd:ed:5e:45:b3:bf:84:4f:42:70:27:2c:86:16:af:78:
ce:33:b9:59:09:9a:4f:75:80:a3:ee:b5:e4:aa:fe:44:96:c2:
4a:87:88:0e:ef:e1:91:92:a7:e5:5d:b9:16:d0:e4:e6:98:ca:
4a:dd:a4:af:51:4f:5e:42:94:d4:ad:06:82:7e:f0:f7:ff:56:
6e:5d:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org