Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91BF52AC0B4F11EF9E42A50E017001B1.roa
File: 91BF52AC0B4F11EF9E42A50E017001B1.roa (raw, json)
Hash identifier: 0IbeZnEAnMwHxPY/UNVp8r//3R/mMrLXrHp5Sqbap+w=
Subject key identifier: 1F:41:4A:A1:69:64:A9:57:0D:17:58:85:A6:B5:10:9F:54:6C:3A:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: B48C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91BF52AC0B4F11EF9E42A50E017001B1.roa
Signing time: Mon 06 May 2024 02:23:05 +0000
ROA not before: Mon 06 May 2024 02:23:01 +0000
ROA not after: Tue 11 Jun 2024 02:23:01 +0000
asID: 138915
IP address blocks: 154.205.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46220 (0xb48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 6 02:23:01 2024 GMT
Not After : Jun 11 02:23:01 2024 GMT
Subject: CN=66383f09-99d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:c8:0a:80:0a:d9:88:16:6f:07:36:e1:6f:
8a:05:7d:1d:63:a4:de:fa:83:cc:58:31:4c:83:ea:
91:a1:89:fe:42:b0:a9:32:78:82:f1:d0:e3:91:23:
ba:46:1a:74:a1:e3:dd:85:25:c6:22:46:23:a4:8f:
7c:b5:33:ef:90:df:3a:d8:78:85:e6:88:98:25:5c:
50:41:0c:84:6e:94:93:f7:63:a9:dc:5d:e6:62:7d:
24:c6:44:ca:62:ce:5f:f1:3d:b4:3b:30:1e:29:1e:
5b:d9:81:10:d0:12:f1:67:de:d7:49:4a:b5:8e:67:
2e:86:2f:cc:42:f4:8a:74:92:d6:37:1c:a9:65:5e:
4b:b7:d6:8c:ab:a1:9e:a5:2c:1d:42:b3:00:77:f1:
43:bc:aa:97:f7:d1:39:61:00:6e:76:b1:32:1d:77:
d8:6f:2d:dc:0d:45:9b:5b:cd:b8:7b:a0:ba:e7:ed:
b7:b2:86:e9:61:87:98:d3:fc:19:bf:04:5d:c9:0c:
61:c7:33:02:df:90:f9:d7:c2:3b:bc:d3:f7:7c:15:
56:53:95:3d:e5:71:0c:c9:ba:19:3a:a2:6d:65:8f:
30:ac:86:92:e7:36:44:8c:30:c0:ae:05:84:8e:d5:
2a:eb:e8:99:9f:64:2c:8c:9f:12:26:ed:0a:ac:68:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:4A:A1:69:64:A9:57:0D:17:58:85:A6:B5:10:9F:54:6C:3A:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91BF52AC0B4F11EF9E42A50E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:df:09:24:02:4c:e0:3f:2a:41:cd:56:76:0a:aa:0e:de:1d:
f6:6d:ee:f8:ad:bd:2a:02:27:92:aa:21:ea:a9:ec:a5:b3:a8:
f2:23:64:76:0a:3e:79:1e:b6:3e:c3:45:62:cd:6f:f8:95:17:
f8:ef:2c:da:62:dc:1e:4b:8f:78:11:40:72:02:e4:45:5d:62:
d3:7d:58:f4:de:82:2d:54:90:05:a6:c2:88:be:ac:3e:a8:5c:
ab:e7:e8:9a:96:9c:d4:24:ac:cf:32:33:42:b1:c3:67:90:61:
15:32:14:bd:d4:a9:5d:a4:15:04:57:55:e9:02:63:7e:75:8f:
ba:b7:15:3a:de:2c:fa:5b:85:39:8e:a3:d8:aa:f4:3e:0e:8c:
0e:2d:94:47:d6:2b:af:4c:28:d2:e9:b0:0b:ec:2d:f4:cb:f1:
52:a8:63:b6:59:e9:96:82:33:8a:23:ee:0d:e4:d7:82:ba:2e:
ff:87:a3:e0:d2:a6:8f:3c:9c:75:df:14:29:53:6d:8d:34:80:
3c:99:23:4f:63:ba:cf:0c:a5:70:56:2d:e7:ab:d4:7c:e2:ae:
8f:e3:59:6b:66:10:a2:e0:41:bf:af:1b:b6:c5:74:e9:26:dc:
9f:c3:60:1d:f5:bb:41:d5:91:27:aa:42:7e:9f:ac:ec:e8:54:
cb:f3:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:26 2024 by rpki-client on console-ams.rpki-client.org