Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC6EB1C82B711EE9D2CDF264AD9E6FC.roa
File: 4DC6EB1C82B711EE9D2CDF264AD9E6FC.roa (raw, json)
Hash identifier: EQ8gFtd6gLU++MZTSRMIvevC0WHa3xSIFIDHpJBG4dk=
Subject key identifier: DB:F3:88:47:CF:09:17:A0:73:A6:79:AA:E0:9A:81:F9:04:CF:7A:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 4FBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC6EB1C82B711EE9D2CDF264AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:30:29 +0000
ROA not before: Tue 14 Nov 2023 06:30:26 +0000
ROA not after: Tue 12 Nov 2024 06:30:26 +0000
asID: 397630
IP address blocks: 154.83.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20412 (0x4fbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 06:30:26 2023 GMT
Not After : Nov 12 06:30:26 2024 GMT
Subject: CN=65531405-96b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:4d:b4:51:15:7d:7e:bc:cb:90:ec:20:41:
ec:c1:37:fa:31:75:7c:b5:00:3b:54:19:53:42:ad:
b1:a4:d9:84:35:82:e5:ea:09:64:61:22:e2:23:a1:
8f:4d:eb:29:96:52:7b:5d:e5:8f:32:b0:7e:19:aa:
e9:d6:23:af:c6:e6:97:fb:35:17:95:17:08:12:ae:
f6:e2:65:ab:a4:87:90:65:08:42:83:f5:98:76:e8:
04:7c:25:37:80:f3:cc:7c:d7:49:e3:b0:37:5f:fc:
14:b3:d2:19:50:f7:dc:f5:31:85:34:11:a0:11:19:
90:45:b1:1c:d5:bc:9a:de:5c:44:7d:c6:8c:bd:66:
d1:0a:95:5e:aa:4b:75:d3:2f:1d:bb:19:90:a0:64:
01:64:50:ab:0a:28:30:d9:a7:20:0f:d9:71:36:ab:
59:7e:b8:2a:e3:64:c0:fb:67:df:0f:61:b1:a6:2e:
b0:79:3a:b1:75:be:a9:08:15:87:6f:d9:08:46:e0:
02:e8:48:25:d3:01:9e:10:de:81:2b:99:42:09:7e:
78:35:0c:13:9c:9b:d1:27:99:a8:38:b4:ba:55:ba:
58:82:b3:0e:ab:a3:9d:38:75:04:42:4f:43:25:00:
3e:0d:81:8f:ca:47:b0:80:5d:7e:83:79:27:0f:81:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F3:88:47:CF:09:17:A0:73:A6:79:AA:E0:9A:81:F9:04:CF:7A:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4DC6EB1C82B711EE9D2CDF264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.8.0/24
Signature Algorithm: sha256WithRSAEncryption
81:92:b6:08:d7:63:be:2a:6b:04:f2:38:fd:1f:fb:66:05:dd:
2a:5f:09:d6:6a:7b:18:1f:f7:79:11:fd:fd:3d:b2:1e:82:9f:
10:69:5a:59:27:41:0f:8e:f1:e3:1c:1c:4a:67:1d:0b:c6:37:
06:58:6a:c2:64:1e:9e:71:c3:6d:07:29:62:df:02:ae:b7:d1:
64:7f:4c:0e:d6:e3:4a:80:b5:cd:0f:ed:b0:7a:9e:01:f4:c2:
b0:e9:df:dd:81:32:33:83:4d:ad:2a:eb:98:39:9f:00:d5:c3:
2f:05:46:e0:9a:67:fe:cb:67:21:c5:64:5d:a3:d5:4b:48:f1:
dc:e5:a4:69:b6:38:d2:ba:ed:54:e0:de:bd:fc:be:cb:28:ad:
81:93:ab:8a:a9:fd:53:4a:f0:80:52:93:af:28:c4:15:10:4e:
ad:bf:65:f9:88:e9:29:c4:2f:bd:e1:5a:ce:ad:3e:4e:10:99:
1d:04:43:23:04:51:82:77:c5:35:95:a3:4d:12:ee:93:90:e0:
ac:33:53:a4:ca:70:7e:a5:52:1f:08:18:da:b7:ce:64:75:21:
e9:6b:9d:86:f8:f6:18:a1:48:40:73:a4:14:00:23:67:fd:ce:
77:de:c7:13:9d:ec:e3:6c:a2:e2:b9:9f:3f:33:11:8c:e4:b1:
63:3f:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org