Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086BE9FAF00D11EE82FD7A71775412E6.roa
File: 086BE9FAF00D11EE82FD7A71775412E6.roa (raw, json)
Hash identifier: YEGPUMcI9SxvgUZTsGCNoGSHhiiMMrqpNPI762W0ULM=
Subject key identifier: EB:5B:D3:6A:6D:52:C9:B8:3A:9E:C7:35:3C:EC:FF:1E:7D:E2:78:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A85A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086BE9FAF00D11EE82FD7A71775412E6.roa
Signing time: Mon 01 Apr 2024 09:48:46 +0000
ROA not before: Mon 01 Apr 2024 09:48:43 +0000
ROA not after: Sat 11 May 2024 09:48:43 +0000
asID: 63139
IP address blocks: 154.203.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43098 (0xa85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 1 09:48:43 2024 GMT
Not After : May 11 09:48:43 2024 GMT
Subject: CN=660a82fe-bf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:10:87:6a:90:53:38:55:f6:21:1b:e9:72:24:
6b:db:ee:c6:eb:2a:6f:65:f3:a1:de:f8:10:91:96:
47:d7:2f:ec:c4:86:5a:ab:fe:6d:f3:98:0b:d3:0e:
07:b8:66:b7:34:f9:64:d6:da:5c:2d:30:ea:7d:dc:
71:fc:21:28:76:8c:1d:12:14:1d:d4:ba:36:f3:61:
36:bf:45:d6:fd:97:9a:f4:c8:3b:fe:94:37:05:07:
3b:a5:10:d6:23:c7:72:5d:ba:28:c6:7d:8a:e5:86:
2a:42:c4:51:5d:42:4e:7e:f6:57:dd:13:df:8f:ab:
1e:98:b0:8e:ed:94:6b:5f:84:a0:eb:7c:c1:49:a8:
03:b2:c7:58:c6:1c:4f:7f:cb:1d:69:fb:1b:f4:30:
24:39:4e:a7:ad:ce:29:1d:22:2a:14:5f:86:30:14:
ff:c1:ce:5e:d5:37:9b:4a:e7:33:14:8d:e0:d3:25:
b7:30:24:48:86:48:70:27:f9:04:f2:fd:b2:97:a4:
1e:a0:e6:44:c3:91:6e:18:63:52:b2:a4:39:2e:65:
f9:a3:1d:40:b3:d3:9d:0a:d1:06:8f:1a:f9:c8:71:
7a:8d:3f:84:0e:59:5b:03:0c:b5:94:eb:3c:8b:e8:
12:79:b3:fd:ad:6b:33:46:1b:99:6c:1c:63:56:b8:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5B:D3:6A:6D:52:C9:B8:3A:9E:C7:35:3C:EC:FF:1E:7D:E2:78:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/086BE9FAF00D11EE82FD7A71775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:89:e6:3c:31:7f:be:8c:8a:bd:df:60:51:e7:d3:b2:84:83:
d1:01:35:cb:32:74:32:d5:9c:06:a0:12:5f:20:70:82:12:5d:
c5:4c:96:2a:a3:6f:3b:c0:22:a7:e8:11:20:3c:39:43:da:5d:
04:a1:85:29:1b:a4:8b:34:cf:46:07:ba:ab:c6:cb:92:e6:64:
c7:a6:04:d0:09:43:d1:d2:23:7b:c3:f5:f9:18:b3:ac:ae:22:
29:37:f9:7e:f0:47:66:da:00:cc:e1:c8:2d:8c:65:70:10:4e:
af:8b:9b:8d:fb:c9:e5:be:ea:2f:9c:af:e3:4e:2c:3f:ce:47:
ac:a2:f3:8e:39:ed:36:14:3e:2f:1f:e2:73:d7:2e:fa:86:c7:
42:8e:84:bd:e7:95:42:3e:33:7c:dd:bc:41:2b:83:f9:71:94:
22:bd:e0:c4:0f:e9:46:0b:0a:cd:14:2c:14:8b:da:8b:b2:40:
08:85:e7:2c:d8:32:70:07:57:50:20:f3:e2:6c:46:15:50:25:
d1:ec:f3:de:87:2e:35:f8:a0:2a:f1:c0:31:dd:ab:24:aa:48:
1d:a9:79:b8:8b:54:8d:eb:94:92:c8:22:ff:be:37:92:3c:74:
a2:1a:f2:18:4b:68:3c:28:e2:b6:33:18:03:69:a5:47:b6:f9:
97:ab:98:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:02 2024 by rpki-client on console-ams.rpki-client.org