Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FE63796DAB411EEBCC04E89775412E6.roa
File: 8FE63796DAB411EEBCC04E89775412E6.roa (raw, json)
Hash identifier: kB2zHa2eRbP6g7UtBWSeNMvU83db/d5sL30HHlbgQ6o=
Subject key identifier: 7D:FA:54:8A:F1:95:B1:70:E6:0E:B6:EF:36:26:0F:95:1E:91:4C:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 9A7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FE63796DAB411EEBCC04E89775412E6.roa
Signing time: Tue 05 Mar 2024 05:52:34 +0000
ROA not before: Tue 05 Mar 2024 05:52:30 +0000
ROA not after: Tue 07 Jan 2025 05:52:30 +0000
asID: 139057
IP address blocks: 154.85.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39547 (0x9a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 5 05:52:30 2024 GMT
Not After : Jan 7 05:52:30 2025 GMT
Subject: CN=65e6b322-ee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:77:6c:7d:b7:20:b4:ff:4a:4b:21:83:ea:
57:42:06:9d:18:ed:34:23:b1:52:56:77:c5:1f:21:
de:c7:b4:3e:66:2d:9e:03:29:04:8f:9d:6d:55:88:
fc:f4:87:0f:77:e4:ea:02:62:d1:0f:79:34:57:eb:
43:a9:46:6f:e8:50:21:14:c4:f6:18:f4:2a:d4:81:
47:c9:b6:c4:9e:c7:76:a6:ea:f0:70:b9:e8:d7:71:
f6:d7:38:68:65:1a:fe:87:68:a5:4f:9c:45:51:6e:
8e:e1:f8:08:52:04:66:04:a2:9d:5c:7e:6f:99:ba:
01:8f:f2:42:83:ec:12:d1:ae:aa:d5:ea:7b:dc:69:
dd:4a:c9:25:60:51:d7:14:6c:8e:1e:aa:f9:67:0b:
ac:27:69:eb:eb:a5:58:85:d3:7b:ec:14:b6:91:2c:
87:25:b5:c8:35:8c:cb:98:53:d7:40:fc:c4:8c:3c:
f1:41:8b:75:ac:7e:4d:95:5f:85:18:87:c9:17:d8:
b5:d3:ba:16:f4:fa:d0:6b:c7:a7:da:60:8f:8d:57:
5b:95:3a:5c:58:7d:8c:a2:c9:2f:2d:ad:80:79:c5:
b5:3b:ad:61:2f:a1:9c:4d:4d:70:98:b2:68:17:55:
2f:f7:37:19:17:fd:13:d1:84:65:3e:8f:b6:40:f3:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:54:8A:F1:95:B1:70:E6:0E:B6:EF:36:26:0F:95:1E:91:4C:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FE63796DAB411EEBCC04E89775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:99:05:8f:55:26:00:e0:52:2e:16:d9:cb:f1:24:12:49:65:
e4:90:0b:0d:05:1a:1c:9f:57:dd:d3:62:2d:1f:2c:cb:8b:3d:
06:b3:6f:3e:a1:de:7d:7e:d9:a3:94:b3:e8:95:66:98:f2:72:
94:47:48:d8:51:0e:53:c6:b8:2e:af:a5:0e:c5:70:35:c1:ed:
30:80:a3:62:77:8a:0c:3b:ab:9c:1e:61:d7:da:ab:f0:31:b2:
3b:96:7a:af:a6:cb:5f:a0:e6:2b:da:a5:7b:2d:a5:94:17:ff:
74:a8:a7:a4:62:3a:1a:10:e6:01:c3:f6:82:0b:a4:73:d2:69:
33:dd:48:66:5c:8b:8c:b6:4c:a7:83:19:89:8c:17:96:42:b9:
a3:d4:0f:21:4c:25:58:a1:e7:10:5a:0c:52:3e:3c:69:f4:bf:
d5:6c:0f:7b:8e:22:ce:de:08:38:77:78:c4:50:f7:a9:9d:71:
b7:b5:c3:0e:25:7f:a7:a2:91:12:e4:c8:44:22:10:1e:ed:2c:
9f:87:03:1f:6a:89:4c:a7:e7:50:91:da:19:ed:fd:d2:3e:3d:
80:55:89:e7:33:25:5f:02:07:25:90:7a:80:39:39:92:b4:9e:
9c:ed:c5:82:a9:fc:35:7f:a6:9d:3b:a8:b3:56:05:71:2c:fd:
fb:a3:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:15:25 2024 by rpki-client on console-ams.rpki-client.org