Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BEC77C80DC911EFB1B1BB3A017001B1.roa
File: 0BEC77C80DC911EFB1B1BB3A017001B1.roa (raw, json)
Hash identifier: TRHxf1RSO18EgKsq84KX9EGP69y5p/tTAjvXbXaylWw=
Subject key identifier: CF:CD:24:1F:42:1C:D7:08:D4:FA:2C:C9:8C:1B:08:35:89:08:52:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B611
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BEC77C80DC911EFB1B1BB3A017001B1.roa
Signing time: Thu 09 May 2024 05:57:41 +0000
ROA not before: Thu 09 May 2024 05:57:38 +0000
ROA not after: Thu 01 May 2025 05:57:38 +0000
asID: 140227
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46609 (0xb611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 9 05:57:38 2024 GMT
Not After : May 1 05:57:38 2025 GMT
Subject: CN=663c65d5-9322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:49:f1:01:79:a0:f5:6e:97:bf:ae:48:09:
0b:df:c4:01:10:09:c2:92:2c:94:eb:c5:a8:36:0f:
89:7b:f0:2e:2a:fd:f5:f8:61:4a:f9:36:b1:ba:07:
f8:71:8e:af:cc:37:04:9c:9d:74:e6:d9:de:4c:b2:
f3:5a:7f:65:aa:2a:6a:63:64:6c:05:02:c6:63:9f:
d4:49:54:89:1e:3e:35:0e:34:95:ce:88:54:ea:e6:
e8:0e:df:a6:29:0e:81:47:07:25:c2:1a:4f:1e:a6:
ed:03:a1:d9:85:f8:c2:7e:f5:de:9e:97:73:21:9e:
ea:c9:5e:a4:26:f7:19:72:b2:46:7e:1c:68:1f:6f:
42:46:db:84:2d:0b:e9:b5:b8:be:0a:d4:3f:88:a1:
bb:fd:64:a4:67:a4:5c:b9:d0:f6:9e:dc:f9:30:fa:
e6:9c:a7:e6:69:86:15:d1:18:bb:61:3b:13:33:6f:
3c:ef:bf:6d:5c:f0:77:4a:db:53:7f:03:26:31:fb:
0d:4c:4f:ee:ce:78:d1:5c:84:2d:52:6e:38:ec:eb:
fa:09:d6:c4:48:af:34:dd:29:67:17:78:2b:6f:c8:
ee:bd:7b:93:54:8c:69:c0:0b:7d:9e:75:da:1b:e5:
4d:2f:4b:9b:8c:5d:ee:11:45:ae:59:72:41:fd:86:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:24:1F:42:1C:D7:08:D4:FA:2C:C9:8C:1B:08:35:89:08:52:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BEC77C80DC911EFB1B1BB3A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:46:d8:89:fc:f6:01:c3:00:6b:38:08:73:f4:20:36:82:b7:
da:73:21:6f:63:ed:4c:d8:df:8c:da:9c:27:df:27:a7:c6:99:
1e:df:a4:80:61:37:24:e3:76:cd:11:a2:24:f6:e8:ff:49:74:
e6:c1:72:2c:53:19:c7:e6:e5:1c:7f:1e:fb:8d:df:5c:e0:9c:
5a:b7:28:84:75:35:4a:c5:9d:0c:9c:49:3c:2e:e8:43:60:f4:
ad:15:cb:e7:35:68:ee:aa:9a:c5:02:da:e9:89:2d:65:7c:13:
27:85:a9:74:84:0d:41:6b:8b:ec:03:65:6f:58:52:11:a5:24:
c1:38:bd:50:85:cd:98:f5:d0:83:98:12:bb:d0:54:51:fb:f9:
b5:43:19:3d:68:0c:0a:73:01:cf:1a:da:2f:74:a5:5e:58:63:
98:b2:e4:92:9f:fa:5f:41:c6:2d:df:1d:e3:e3:37:b8:73:ac:
70:b3:c3:19:fb:98:97:46:bc:9a:66:ed:35:4b:16:92:8b:23:
c2:0e:47:82:f7:22:bd:ba:32:8d:83:1a:a1:83:c3:4a:f4:6f:
fb:8a:8c:89:31:23:22:7a:2d:f6:01:b1:ae:68:c5:b6:ab:6e:
4e:d2:b5:c5:f7:bc:dd:29:7d:7d:ba:8d:f5:d3:95:8b:a1:78:
07:61:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:17 2024 by rpki-client on console-ams.rpki-client.org