Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/170FD83EFE9811ED89BE864C4AD9E6FC.roa
File: 170FD83EFE9811ED89BE864C4AD9E6FC.roa (raw, json)
Hash identifier: n/r1oD300UHpGaCeTLbnp4GG+KBN4YlfoVrpqXoJWNg=
Subject key identifier: 01:3B:D8:D8:A8:C0:45:9E:60:21:2B:95:D1:5B:E2:E0:5B:B3:AC:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 2844
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/170FD83EFE9811ED89BE864C4AD9E6FC.roa
Signing time: Tue 30 May 2023 03:14:30 +0000
ROA not before: Tue 30 May 2023 03:14:24 +0000
ROA not after: Wed 15 May 2024 03:14:24 +0000
asID: 63888
IP address blocks: 154.207.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10308 (0x2844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 03:14:24 2023 GMT
Not After : May 15 03:14:24 2024 GMT
Subject: CN=64756a15-91cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:9b:fb:32:32:fe:f4:76:f7:e8:cd:74:ba:
a9:7b:5c:ff:77:c2:e4:eb:d4:d3:b7:bf:65:d3:46:
9b:68:28:da:1d:a6:4d:df:27:ae:b5:47:be:b2:79:
1f:1b:11:45:71:6c:7f:f0:0f:c1:bc:bd:d1:01:3c:
ff:1a:10:e6:31:e2:9d:e0:77:6c:58:a0:7f:45:c3:
b2:4a:6d:2e:ec:84:46:d0:23:56:49:fa:fa:7f:de:
07:53:43:45:de:fd:f6:89:a9:2b:a2:c0:78:76:b8:
4c:0b:09:a3:10:d1:44:e6:d6:f2:76:23:7e:6c:04:
e1:74:2f:a8:57:99:3d:4a:89:bd:7e:b5:04:8f:ce:
e6:50:f5:0d:4a:0f:b9:29:d8:6d:9f:d6:ce:d6:5f:
a9:3d:35:09:75:24:fb:3e:36:cf:b3:d7:21:a3:cc:
ea:b7:00:11:f6:eb:a3:15:5a:3b:eb:f4:71:71:41:
f4:c7:80:e0:71:17:95:37:c2:a0:f4:76:f9:83:4c:
4a:03:49:49:3d:8b:c0:ff:b9:6b:e4:37:f2:c9:33:
4b:e8:f1:a4:a9:e5:22:cb:64:ff:fd:33:e6:0e:b2:
ed:fb:52:3f:15:09:73:41:c3:e6:ee:50:03:13:5e:
98:5e:12:3c:d6:2e:e5:ae:7c:31:4b:bd:aa:a9:9a:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:D8:D8:A8:C0:45:9E:60:21:2B:95:D1:5B:E2:E0:5B:B3:AC:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/170FD83EFE9811ED89BE864C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f3:b8:8d:6f:65:31:da:ce:94:4d:41:ff:e8:88:cd:f9:0b:
c1:fa:49:f1:e1:1f:39:19:ab:6c:bc:b1:40:18:4b:4f:35:fa:
f7:21:cf:1c:44:24:55:56:e6:6a:78:e5:be:ee:00:bb:6d:bf:
c4:40:b4:cb:df:8b:62:9d:df:82:ad:10:4f:c4:60:c0:5a:7c:
5f:09:9f:c1:b6:3e:78:41:2f:ff:e2:85:a2:75:c2:54:98:3b:
06:24:c7:ef:2a:f1:cb:c0:ef:08:64:fe:a2:02:50:62:ec:4a:
d9:19:72:62:66:28:98:b3:5d:fd:03:0e:58:6c:6a:f1:0d:10:
7e:41:ee:81:b0:a4:1b:54:40:1d:01:1e:45:b9:fd:43:40:34:
7a:9b:28:12:53:82:75:3c:10:fb:61:e2:01:74:9b:68:e3:1e:
3d:f0:d5:c3:af:bb:db:d2:a5:ae:de:26:c3:d3:dc:1f:b7:d4:
36:70:2d:6e:d2:62:04:ce:b8:74:f4:ee:48:03:8f:c9:49:7d:
0c:db:80:cb:3f:0c:dc:1e:5b:08:c2:cb:fe:cb:2b:49:d9:53:
56:88:fd:6c:69:ea:47:de:5d:fa:7c:9b:45:9e:74:44:fa:bf:
bb:b3:3c:15:09:19:94:8b:9d:f8:31:b1:da:27:f8:60:98:c8:
a7:d1:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:03 2024 by rpki-client on console-ams.rpki-client.org