Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D094CD6EDB911EEA9E5ACBC775412E6.roa
File: 2D094CD6EDB911EEA9E5ACBC775412E6.roa (raw, json)
Hash identifier: wfmxftSwIcCNdemvcgA4ABxqeTPvIYTI3Q7S88butXs=
Subject key identifier: 48:B0:11:79:D9:F2:64:D2:EA:C1:30:40:EF:AC:1D:95:28:BE:57:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A73B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D094CD6EDB911EEA9E5ACBC775412E6.roa
Signing time: Fri 29 Mar 2024 10:43:28 +0000
ROA not before: Fri 29 Mar 2024 10:43:24 +0000
ROA not after: Sat 04 May 2024 10:43:24 +0000
asID: 142062
IP address blocks: 154.86.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 10:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42811 (0xa73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 10:43:24 2024 GMT
Not After : May 4 10:43:24 2024 GMT
Subject: CN=66069b4f-587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:0e:3a:65:03:76:f6:de:20:8e:54:33:f2:
f9:27:7c:d2:c4:b4:f6:f5:f4:a3:50:80:9b:0e:4f:
f7:73:51:f0:79:8f:73:b4:5c:35:e5:bf:fe:0e:e4:
48:d5:43:fb:6f:6f:d5:fe:12:a1:cd:b1:d9:db:0b:
71:1d:0c:10:89:55:26:1a:14:ea:26:96:d1:46:fc:
44:6b:c8:25:b9:6a:ac:06:c0:51:bd:f4:d7:86:44:
c9:b7:46:1c:59:8c:07:5e:ab:f6:b1:84:e9:5d:23:
67:f5:22:a9:8a:a2:fb:59:fb:6e:35:ad:44:6c:5b:
6d:eb:b1:a3:c0:f4:d7:1a:f8:0f:60:ab:c3:18:03:
8d:5c:94:ad:c6:07:c6:57:6e:94:cb:9f:98:f3:3a:
ca:d0:bd:e8:1f:02:aa:52:83:88:4d:cb:d9:10:ef:
5b:3a:90:e3:8a:8b:18:9f:10:37:64:d8:b2:83:c1:
e5:ca:81:15:3d:ad:51:92:9d:a7:df:ab:ff:e0:0b:
7a:82:c4:c4:71:f4:f2:30:27:c5:15:0b:c3:15:b6:
f0:7f:a7:69:dc:e4:af:20:a8:65:0e:fa:15:5d:fe:
eb:13:93:dc:54:c9:f2:06:7e:d1:27:f2:56:ed:6b:
11:a4:7d:cb:f7:dd:cb:fc:59:49:f6:b8:b8:02:8e:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:11:79:D9:F2:64:D2:EA:C1:30:40:EF:AC:1D:95:28:BE:57:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D094CD6EDB911EEA9E5ACBC775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.73.0/24
Signature Algorithm: sha256WithRSAEncryption
50:39:52:7a:74:2f:50:a6:84:2b:f5:2c:26:b8:f5:e7:ad:15:
66:87:68:41:1c:9c:ca:96:70:31:a4:c0:6e:8a:74:51:37:ec:
b8:36:5c:22:3f:10:a2:93:be:d4:a9:00:7b:7b:fc:ec:fa:34:
29:e2:83:39:4c:93:ce:42:1c:94:57:b4:ec:be:c8:72:2d:0a:
07:cb:cb:c6:a6:3d:e6:4e:cd:ef:a8:0e:41:20:a4:df:f6:24:
1d:6c:51:c8:92:cb:12:d8:e0:57:7c:7e:25:fc:95:06:47:b6:
94:b4:16:dd:a2:2d:e1:a5:4e:e0:a0:ff:ce:62:b4:f0:10:e8:
f8:18:ac:d5:30:ae:c0:4d:83:09:e7:bd:88:ad:a8:f9:b0:db:
2a:41:ab:2d:a6:c3:d0:e6:29:43:35:0b:bf:9a:ff:7d:bf:f4:
f8:fb:c5:a3:7d:dd:a3:f0:b4:11:a1:36:0e:fb:53:d8:d9:5d:
f0:c6:97:68:8e:5a:f3:4e:c8:ed:49:e8:3d:21:17:aa:cf:b0:
a8:52:9c:7d:a9:1a:41:d4:c1:4a:e7:71:c6:d4:82:3f:65:a9:
b5:90:c4:04:6b:ac:ea:32:bc:3a:87:d4:0c:08:63:3b:4f:00:
6a:78:08:6f:3c:22:1a:66:b3:6c:cf:03:06:d1:59:53:93:9b:
66:03:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:05 2024 by rpki-client on console-ams.rpki-client.org