Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2090C180277D11EE93D8E30E4AD9E6FC.roa
File: 2090C180277D11EE93D8E30E4AD9E6FC.roa (raw, json)
Hash identifier: vtlZfsWRDk8bjUYtNUlrgAfhvJAZuyg3k0ceAhZGo34=
Subject key identifier: B0:52:59:7C:CF:CC:82:77:40:57:9E:A6:C5:BD:45:46:2B:A7:B6:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 335F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2090C180277D11EE93D8E30E4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:14:47 +0000
ROA not before: Fri 21 Jul 2023 04:14:43 +0000
ROA not after: Thu 13 Jun 2024 04:14:43 +0000
asID: 22773
IP address blocks: 154.85.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13151 (0x335f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 04:14:43 2023 GMT
Not After : Jun 13 04:14:43 2024 GMT
Subject: CN=64ba0636-c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:3f:47:ff:2e:41:ce:1c:26:33:da:e8:6c:
c9:f2:18:ba:a6:de:d4:7e:d0:dd:e5:43:ff:4a:e7:
fc:df:15:b3:7d:78:84:69:2a:a3:ca:8f:20:09:40:
bb:e8:58:f9:a0:41:dc:e7:7c:12:37:77:cc:1c:71:
ae:22:e6:bc:48:47:2b:d0:8f:7b:de:f9:f1:a7:4e:
fa:f6:61:e8:4c:26:ae:8a:2a:6a:01:44:51:e5:cf:
70:e0:1d:8b:09:8e:16:68:44:da:26:a7:71:29:a5:
d5:70:05:8d:d7:81:75:0b:74:17:0d:99:8c:90:ae:
a1:23:53:8b:ae:94:f4:4e:b1:cd:c2:20:25:6f:07:
00:82:18:c9:89:26:37:31:06:d9:e1:50:69:92:e9:
14:d9:cd:32:2a:dc:92:e8:f6:11:75:25:41:f9:7d:
ab:d1:a4:04:e9:9a:ef:22:2a:ba:ec:e2:e8:73:6e:
a2:e9:a7:a8:c0:61:3f:8e:95:ec:1e:31:01:c2:ec:
09:f8:63:bc:1c:2a:25:d9:bf:85:d1:9e:f3:8a:80:
92:00:6e:00:43:91:24:5d:c7:ad:8f:7f:60:cf:23:
13:18:4a:98:b5:54:c7:b8:9b:6f:ac:d4:4b:e0:ef:
bf:a7:4e:41:77:6a:a4:01:26:82:b0:b3:d7:98:bb:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:59:7C:CF:CC:82:77:40:57:9E:A6:C5:BD:45:46:2B:A7:B6:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2090C180277D11EE93D8E30E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:47:86:99:77:a2:84:16:e8:12:76:e0:5b:1d:0e:d4:47:d6:
ff:a2:2f:94:61:e6:48:d4:0d:31:4a:d6:23:8b:b7:0a:b8:b6:
18:ed:b5:fa:a1:aa:ad:36:0c:d2:8c:f2:d2:7a:fb:d6:dc:bc:
9f:58:9b:a3:88:c9:ab:68:53:ed:60:ee:9e:f1:63:33:e9:60:
2c:35:8d:ce:21:cb:98:3e:2b:a4:43:ef:06:37:dd:cb:94:97:
c0:d9:6d:39:22:c3:63:57:94:97:fc:97:dd:f4:63:c2:b1:62:
71:83:6d:33:ae:5d:f5:e3:b1:74:95:dc:33:16:de:b0:90:96:
53:56:57:28:a3:b5:3c:45:19:c9:e8:ca:f6:a0:1e:35:26:29:
91:59:53:b3:08:4d:c5:5e:07:8e:66:cd:80:96:a2:17:4b:78:
6a:d9:c9:ac:7e:ce:cd:3a:e2:53:3a:72:56:68:e6:54:61:de:
4b:58:ae:9a:28:4c:4e:bd:3b:ba:0b:69:7c:da:13:58:97:54:
81:e1:eb:7b:6a:16:be:d1:85:dc:6c:40:15:26:d6:4e:69:c1:
18:81:f6:49:1d:c3:9b:e2:6c:2f:4c:26:59:2d:c2:1e:f9:68:
5a:c2:08:5d:00:ab:8c:d1:fb:c3:83:8e:9e:10:84:f4:5b:fb:
39:4a:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:04 2024 by rpki-client on console-ams.rpki-client.org